CVE-2018-9148

creationtimestamp| type| source ---|---|--- 2026-06-25 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5gvakeg62n...

CVE-2026-6412

creationtimestamp| type| source ---|---|--- 2026-06-25 21:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gh4hh4627...

CVE-2026-6331

creationtimestamp| type| source ---|---|--- 2026-06-25 21:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5gdqrqws2u...

CVE-2017-14877

creationtimestamp| type| source ---|---|--- 2026-06-25 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5a6ozavk2n...

CVE-2026-50015

creationtimestamp| type| source ---|---|--- 2026-06-25 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp52rdwmyw2u 2026-06-27 00:35:29+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-rxhj-4m44-96r4 2026-06-29 23:01:49+00:00| seen|...

CVE-2026-9179

creationtimestamp| type| source ---|---|--- 2026-06-25 18:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp4zy7pl6f2w...

CVE-2026-55698

creationtimestamp| type| source ---|---|--- 2026-06-25 17:57:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4ywb3qok2j 2026-06-27 00:35:04+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-w466-c33r-3gjp 2026-07-01 09:37:06+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.13 Images Security Update

New images are available for Red Hat build of Keycloak 26.4.13 and Red Hat build of Keycloak 26.4.13 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

keycloak: Keycloak: Information disclosure due to user profile permission bypass

A flaw was found in org.keycloak.services. An administrator with delegated access to read group memberships and users can bypass user profile permissions by accessing the group members endpoint. This allows the administrator to view user attributes that are explicitly configured to be denied,...

CVE-2026-27366

creationtimestamp| type| source ---|---|--- 2026-06-25 17:14:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mp4wjhseyg2h...

CVE-2018-12993

creationtimestamp| type| source ---|---|--- 2026-06-25 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp4w4tgjlu2d...

CVE-2026-48943

K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin plguserk2. A Registered Joomla user, by including the field K2UserForm=1 in a standard comusers profile.save POST, can write arbitrary values into the notes, image, and plugins columns of their own row in the k2users table —...

CVE-2026-9184

creationtimestamp| type| source ---|---|--- 2026-06-25 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp4tbneuuh2p...

CVE-2026-2815

creationtimestamp| type| source ---|---|--- 2026-06-25 15:56:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4s6q6fxv2s...

CVE-2026-54843

creationtimestamp| type| source ---|---|--- 2026-06-25 15:41:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4rdtpb6j2j...

CVE-2026-54849

creationtimestamp| type| source ---|---|--- 2026-06-25 15:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qpi25kb2l...

CVE-2026-48943 Joomla Extension - getk2.org - Authenticated user property mass-assignment in K2 extension for Joomla < 2.26

K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin plguserk2. A Registered Joomla user, by including the field K2UserForm=1 in a standard comusers profile.save POST, can write arbitrary values into the notes, image, and plugins columns of their own row in the k2users table —...

CVE-2026-48943

Summary: CVE-2026-48943 affects K2 ≤ 2.24, specifically the K2 system user plugin plg_user_k2. A mass‑assignment defect allows a registered Joomla user to set the field K2UserForm=1 in a normal com_users profile.save POST and write arbitrary values into the notes, image, and plugins columns of th...

EUVD-2026-39438

K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin plguserk2. A Registered Joomla user, by including the field K2UserForm=1 in a standard comusers profile.save POST, can write arbitrary values into the notes, image, and plugins columns of their own row in the k2users table —...

CVE-2026-48943

K2 ≤ 2.24 contains a mass-assignment defect in the K2 system user plugin plguserk2. A Registered Joomla user, by including the field K2UserForm=1 in a standard comusers profile.save POST, can write arbitrary values into the notes, image, and plugins columns of their own row in the k2users table —...