PT-2026-54948

Name of the Vulnerable Software and Affected Versions PIA affected versions not specified Description The OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check instead of validating the issuer as a properly host-bounded URL. This allows an attacker to bypass the check using a...

PT-2026-54640

Name of the Vulnerable Software and Affected Versions Request a Quote versions prior to 2.5.6 Description The Request a Quote plugin for WordPress allows unauthenticated attackers to perform code injection. The issue occurs because the emd delete file function derives a PHP function name from the...

Malicious code in @marketfront/bannerpopup (npm)

The @marketfront/bannerpopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in @marketfront/errorcounter (npm)

The @marketfront/errorcounter package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

MAL-2026-6772 Malicious code in @marketfront/customdealsfeed (npm)

The @marketfront/customdealsfeed package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

CVE-2026-55791

creationtimestamp| type| source ---|---|--- 2026-07-01 23:58:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpvmvzr52u 2026-07-02 16:32:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohhzys7f2w...

CVE-2026-14390

creationtimestamp| type| source ---|---|--- 2026-07-01 23:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpphwqn62e 2026-07-02 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116849208764595962 2026-07-02 07:30:31+00:00| seen|...

CVE-2026-14424

creationtimestamp| type| source ---|---|--- 2026-07-01 23:51:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpmpjx4mny2v 2026-07-02 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116848500782460057 2026-07-02 04:30:28+00:00| seen|...

CVE-2026-14067

creationtimestamp| type| source ---|---|--- 2026-07-01 23:41:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmoyeg24d2d 2026-07-02 03:40:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4d3bn6e2t 2026-07-02 07:51:16+00:00| seen|...

CVE-2026-50279 Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Craft CMS is a content management system CMS. IN versions 5.0.0-RC1 and above prior to 5.9.21, theEntriesController::actionSaveEntry performs entry-edit permission checks before request-controlled author changes are applied to the model, allowing for authorship spoofing. The subsequent author...

CVE-2026-53352

creationtimestamp| type| source ---|---|--- 2026-07-01 22:47:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlxnkdke2y 2026-07-06 06:53:18+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53349

creationtimestamp| type| source ---|---|--- 2026-07-01 22:47:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlwvpaaw2r 2026-07-06 06:53:14+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53350

creationtimestamp| type| source ---|---|--- 2026-07-01 22:46:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvbdcrx2y 2026-07-06 06:53:16+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-53353

creationtimestamp| type| source ---|---|--- 2026-07-01 22:41:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlly3lrl2y...

CVE-2026-53344

creationtimestamp| type| source ---|---|--- 2026-07-01 22:36:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlddysy32i...

CVE-2026-53327

creationtimestamp| type| source ---|---|--- 2026-07-01 22:29:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmkw2hdf22o 2026-07-06 06:52:56+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-07-24 13:25:32+00:00|...

CVE-2026-13603

creationtimestamp| type| source ---|---|--- 2026-07-01 22:27:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmksvl2xj2q 2026-07-03 11:58:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqimivyih2i...

CVE-2026-53340

creationtimestamp| type| source ---|---|--- 2026-07-01 22:26:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmkrk2x5l2r...

CVE-2026-14265

creationtimestamp| type| source ---|---|--- 2026-07-01 22:18:52+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpmkdt4q3p27 2026-07-02 11:54:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnxwqajkt2n 2026-07-02 18:59:54+00:00| seen|...

CVE-2026-53331

creationtimestamp| type| source ---|---|--- 2026-07-01 22:14:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmk46kqmu2u 2026-07-06 06:53:01+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...