CVE-2026-48892

creationtimestamp| type| source ---|---|--- 2026-07-07 11:44:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq2jnxkscc2t 2026-07-07 12:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2kw5rdo32e...

CVE-2026-14476

creationtimestamp| type| source ---|---|--- 2026-07-07 11:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq2iytgfgd2a 2026-07-20 13:12:20+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mr3enz3dlw2l 2026-07-20 14:14:46+00:00| seen|...

CVE-2025-63079

creationtimestamp| type| source ---|---|--- 2026-07-07 11:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2i47t6uk2r 2026-07-07 11:16:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mq2i4bpfxr24...

Improper Authorization

Keycloak is vulnerable to improper authorization. The vulnerability is due to missing validation that the target user belongs to the caller's realm in certain user read endpoints, which allows a tenant realm administrator to access profile information, client roles, and realm roles of users acros...

CVE-2026-8306

creationtimestamp| type| source ---|---|--- 2026-07-07 08:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25wlek3u2w...

CVE-2026-57867

creationtimestamp| type| source ---|---|--- 2026-07-07 07:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq23cby4z22b...

CVE-2026-56044

creationtimestamp| type| source ---|---|--- 2026-07-07 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq22p3vtqu2n 2026-07-07 07:25:29+00:00| seen| https://bsky.app/profile/potato.software/post/3mq237t753r2y...

CVE-2026-10834

The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...

CVE-2026-10834

The CVE covers the WP Travel Engine WordPress plugin (pre-6.8.1) where input validation for a user-supplied profile image path is insufficient before the file is moved. The vulnerability allows authenticated users with subscriber-level access or higher to relocate arbitrary files within the WordP...

CVE-2026-10834 WP Travel Engine < 6.8.1 - Subscriber+ Arbitrary Media File Move via user_profile_image

The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...

EUVD-2026-42010

The WP Travel Engine WordPress plugin before 6.8.1 does not properly validate the source of a user-supplied profile image path before moving the file, allowing authenticated users with subscriber-level access and above to relocate arbitrary files within the WordPress uploads directory into their...

CVE-2026-34149

creationtimestamp| type| source ---|---|--- 2026-07-07 04:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzrr7czc623...

CVE-2026-34198

creationtimestamp| type| source ---|---|--- 2026-07-07 04:26:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzr7cexwq2y...

CVE-2026-34057

creationtimestamp| type| source ---|---|--- 2026-07-07 04:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzqkwrtlp22...

CVE-2026-42143

creationtimestamp| type| source ---|---|--- 2026-07-07 04:06:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzq464xi72a 2026-07-07 06:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzwje4owm2u...

CVE-2026-34152

creationtimestamp| type| source ---|---|--- 2026-07-07 04:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzpxzrmfu24 2026-07-07 07:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpzzu4caya25 2026-07-08 05:09:15+00:00| seen|...

CVE-2026-42204

creationtimestamp| type| source ---|---|--- 2026-07-07 00:39:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzejfdhmj2y...

CVE-2026-53641

creationtimestamp| type| source ---|---|--- 2026-07-07 00:34:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzeagtf7d2w...

CVE-2026-42148

creationtimestamp| type| source ---|---|--- 2026-07-07 00:26:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdrvg3vk24...

CVE-2026-43921

creationtimestamp| type| source ---|---|--- 2026-07-07 00:17:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzdbnq6ex2h...