CVE-2026-63097

Dendrite 0.13.8 is affected by an improper access-control in the syncapi /context endpoint (syncapi/routing/context.go). The flaw uses a flawed membership check that only considers RoomExists, ignoring IsInRoom, HasBeenInRoom, and Membership fields, allowing authenticated local users who have lef...

CVE-2026-63097 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

CVE-2026-63097 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

CVE-2026-63093

creationtimestamp| type| source ---|---|--- 2026-07-17 15:16:22+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqu272jdvo24 2026-07-17 18:39:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqufkqdbbk2x 2026-07-19 10:01:08+00:00| seen|...

CVE-2026-15943

creationtimestamp| type| source ---|---|--- 2026-07-17 14:40:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqty7cut4t27 2026-07-18 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqw6kh5sgv2j...

CVE-2026-16013

creationtimestamp| type| source ---|---|--- 2026-07-17 14:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxweafkp2s...

CVE-2026-7189

creationtimestamp| type| source ---|---|--- 2026-07-17 14:19:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwyzep3z2x 2026-07-19 12:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyq7bpmry2q...

CVE-2026-7488

creationtimestamp| type| source ---|---|--- 2026-07-17 14:18:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwx7rdsf24 2026-07-19 11:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqymt5k3yy2l...

CVE-2026-15901

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:45+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 00:00:39+00:00| seen|...

CVE-2026-15904

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:32:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942644743608855 2026-07-20 04:45:51+00:00| seen|...

CVE-2026-15903

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:58:55+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942748712137836 2026-07-19 11:01:06+00:00| seen|...

CVE-2026-15902

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-20 04:45:47+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260720 2026-07-21 01:58:35+00:00| seen|...

CVE-2026-15905

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-18 19:45:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116942696086498977 2026-07-19 16:35:47+00:00| seen|...

CVE-2026-15899

creationtimestamp| type| source ---|---|--- 2026-07-17 13:55:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvoejuek27 2026-07-19 02:22:25+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116944256682998893 2026-07-20 04:45:40+00:00| seen|...

CVE-2026-15395

creationtimestamp| type| source ---|---|--- 2026-07-17 12:12:29+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqtpwagzup2v 2026-07-17 12:12:46+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116935253395484489...

CVE-2026-15094

creationtimestamp| type| source ---|---|--- 2026-07-17 11:49:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtonqazmg2d 2026-07-21 06:00:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-15094.yaml 2026-07-22...

CVE-2026-59694

creationtimestamp| type| source ---|---|--- 2026-07-17 10:49:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtlcdzsam2r...

CVE-2026-59695

creationtimestamp| type| source ---|---|--- 2026-07-17 10:44:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtkzflzkx2k...

EUVD-2026-45149

The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from...

CVE-2026-15982

creationtimestamp| type| source ---|---|--- 2026-07-17 05:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqt2kgy3tm2y 2026-07-17 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116933789451136259 2026-07-17 06:00:30+00:00| seen|...