CVE-2026-53900

creationtimestamp| type| source ---|---|--- 2026-06-16 14:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofxrmn5go2g 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

CVE-2025-68045

creationtimestamp| type| source ---|---|--- 2026-06-16 14:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofxjsavxg2n...

CVE-2026-53899

creationtimestamp| type| source ---|---|--- 2026-06-16 13:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofxfuqupl2j 2026-06-17 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260618...

BIT-DISCOURSE-2026-44785 Discourse: Hidden reply-to post raw can be disclosed through AI explain prompts

Discourse is an open-source discussion platform. From versions 2026.1.0 to before 2026.1.4, 2026.3.0 to before 2026.3.1, and 2026.4.0 to before 2026.4.1, the AI "explain" helper only checks cansee? on the post being explained, not its replytopost, so any authenticated user with access to the AI...

BIT-DISCOURSE-2026-44782 Discourse: GroupPostSerializer leaks hidden full names through reaction post association

Discourse is an open-source discussion platform. From versions 2026.1.0 to before 2026.1.4, 2026.3.0 to before 2026.3.1, and 2026.4.0 to before 2026.4.1, GroupPostSerializer declared includeuserlongname? as the predicate for its :name attribute, but AMS looks for includename?. The misnamed...

CVE-2026-39574

creationtimestamp| type| source ---|---|--- 2026-06-16 11:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofnjg5v3u2n 2026-06-16 13:52:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofx34pvne2g...

CVE-2026-8176

creationtimestamp| type| source ---|---|--- 2026-06-16 11:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofniyneli2d...

CVE-2026-8442

creationtimestamp| type| source ---|---|--- 2026-06-16 11:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofnhbv7um2t 2026-06-16 13:57:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofxe36bfh2f...

CVE-2026-40727

creationtimestamp| type| source ---|---|--- 2026-06-16 09:11:57+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mofheuylhq2v...

CVE-2026-9187

The Abandoned Contact Form 7 plugin for WordPress is vulnerable to unauthorized arbitrary post deletion in versions up to, and including, 2.2. This is due to a missing capability check and missing nonce validation in the actionremoveabandoned function, which is registered to both the...

CVE-2025-11694

creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-04 2026-06-16 17:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogdwx72mc2j...

CVE-2025-14272

creationtimestamp| type| source ---|---|--- 2026-06-16 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-167-01 2026-06-16 17:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogd547waq2m...

EUVD-2026-37032

The Abandoned Contact Form 7 plugin for WordPress is vulnerable to unauthorized arbitrary post deletion in versions up to, and including, 2.2. This is due to a missing capability check and missing nonce validation in the actionremoveabandoned function, which is registered to both the...

CVE-2026-9187 Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameter

The Abandoned Contact Form 7 plugin for WordPress is vulnerable to unauthorized arbitrary post deletion in versions up to, and including, 2.2. This is due to a missing capability check and missing nonce validation in the actionremoveabandoned function, which is registered to both the...

CVE-2026-9187

The Abandoned Contact Form 7 plugin for WordPress (

CVE-2026-1767

creationtimestamp| type| source ---|---|--- 2026-06-16 04:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moewsbzgsh2n...

CVE-2026-1764

creationtimestamp| type| source ---|---|--- 2026-06-16 04:10:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moewkmggos2j...

CVE-2026-42014

creationtimestamp| type| source ---|---|--- 2026-06-16 04:07:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moewdvftpp2p 2026-06-29 11:39:00+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgfnrmckv2h 2026-06-29 11:39:01+00:00| seen|...

CVE-2026-8484

creationtimestamp| type| source ---|---|--- 2026-06-16 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-8484...

CVE-2026-54512

creationtimestamp| type| source ---|---|--- 2026-06-16 01:10:42+00:00| published-proof-of-concept| https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm 2026-06-24 00:07:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moymp44sqy23 2026-07-12...