CVE-2026-58370

creationtimestamp| type| source ---|---|--- 2026-06-30 17:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjl75243h24 2026-07-02 06:07:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnejmuv3z2u...

CVE-2026-12349

creationtimestamp| type| source ---|---|--- 2026-06-30 17:17:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjizi73cq2c...

CVE-2026-58174

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-48286

creationtimestamp| type| source ---|---|--- 2026-06-30 17:02:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji6wod572y 2026-07-01 11:45:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mplgwhlm3fm2 2026-07-...

CVE-2025-53648

creationtimestamp| type| source ---|---|--- 2026-06-30 16:10:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjfctafk723...

CVE-2026-57079

creationtimestamp| type| source ---|---|--- 2026-06-30 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjezu3btb2s...

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174

Hermes WebUI

CVE-2026-58174

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

EUVD-2026-40355

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58011

creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjakneukd2m 2026-07-03 12:19:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjrcmvoq2d 2026-07-21 12:00:54+00:00| seen|...

CVE-2026-10817

creationtimestamp| type| source ---|---|--- 2026-06-30 14:35:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7yqkhca2m 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...

CVE-2026-58016

creationtimestamp| type| source ---|---|--- 2026-06-30 14:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7gtiwvm2t 2026-07-02 05:19:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnbtzxrwh2k 2026-07-21 12:01:08+00:00| seen|...

WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by daroo in WordPress Plugin Five Star Business Profile and Schema versions = 2.3.19...

CVE-2026-13474

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server of type LB, CS, VPN or the service configured on NetScaler...

CVE-2026-10817

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server of type LB, CS, VPN or the service configured on NetScaler...

CVE-2026-13474

The CVE-2026-13474 vulnerability affects NetScaler ADC and NetScaler Gateway when HTTP/2 is enabled in an HTTP Profile and tied to a virtual server (LB, CS, VPN) or its service. It allows denial of service via malformed HTTP/2 requests, impacting availability. CVSS v4.0 base score 8.7 (HIGH) with...

EUVD-2026-40317

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server of type LB, CS, VPN or the service configured on NetScaler...