CVE-2026-54007

CVE-2026-54007 describes a cross-origin postMessage bypass in Open WebUI prior to version 0.9.6. The root cause is a chat input/submit flow in the Chat.svelte window message listener that accepts non-same-origin messages (input:prompt and action:submit) and forwards them to submitPrompt(), enabli...

CVE-2026-54007 Open WebUI: Cross-origin postMessage confirmation bypass via action:submit

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the chat message listener allows non-same-origin input:prompt and action:submit messages, so an external site can set prompt text and trigger submitPrompt in an authenticated victim...

CVE-2026-54007 Open WebUI: Cross-origin postMessage confirmation bypass via action:submit

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the chat message listener allows non-same-origin input:prompt and action:submit messages, so an external site can set prompt text and trigger submitPrompt in an authenticated victim...

CVE-2026-50221

creationtimestamp| type| source ---|---|--- 2026-06-23 16:29:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moxt4m72zm2s 2026-06-29 23:53:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphop63u4q2q...

CVE-2026-35018

creationtimestamp| type| source ---|---|--- 2026-06-23 16:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxsmyk3dz2q...

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures by December 31, 2031. EO 14409 leaves national...

CVE-2025-71370

creationtimestamp| type| source ---|---|--- 2026-06-23 14:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxn3phlth2q...

CVE-2026-56274

creationtimestamp| type| source ---|---|--- 2026-06-23 14:27:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxmasquup2a 2026-06-25 05:40:10+00:00| seen| https://gist.github.com/muhamedfazalps/db2c0e46436e75ee35dd214e14e27b40 2026-07-10 11:37:06+00:00| seen|...

CVE-2026-56243

creationtimestamp| type| source ---|---|--- 2026-06-23 14:22:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlz54mb62o...

CVE-2026-56315

creationtimestamp| type| source ---|---|--- 2026-06-23 14:12:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxlh2kytx2w...

CVE-2026-56784

creationtimestamp| type| source ---|---|--- 2026-06-23 14:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkzjwhcv2u...

CVE-2026-56222

creationtimestamp| type| source ---|---|--- 2026-06-23 14:02:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxkvowk242n...

WordPress Themify Event Post plugin <= 1.3.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Themify Event Post versions = 1.3.3...

WordPress Themify Portfolio Post plugin <= 1.2.9 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Themify Portfolio Post versions = 1.2.9...

CVE-2026-8172

creationtimestamp| type| source ---|---|--- 2026-06-23 08:26:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowy4lqfd72a...

CVE-2026-7687

creationtimestamp| type| source ---|---|--- 2026-06-23 08:20:43+00:00| seen| https://bsky.app/profile/yogsotho.bsky.social/post/3mowxrnuw722s...

CVE-2026-55655

creationtimestamp| type| source ---|---|--- 2026-06-23 08:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwprsilu2l 2026-06-28 18:41:10+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpemrrslna2p 2026-06-28 18:41:12+00:00| seen|...

CVE-2026-12866

creationtimestamp| type| source ---|---|--- 2026-06-23 06:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116797893970275740 2026-06-23 06:00:56+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mowpwxfz6z2b 2026-06-23 07:57:27+00:00| seen|...

CVE-2026-11772

creationtimestamp| type| source ---|---|--- 2026-06-23 04:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-11772 2026-06-23 16:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxrs3s44b2q...

CVE-2026-54232

creationtimestamp| type| source ---|---|--- 2026-06-23 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow7gveg3u2j 2026-07-01 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mplgiawmxa2x...