CVE-2026-8697

creationtimestamp| type| source ---|---|--- 2026-05-28 20:28:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwud7wckh2k 2026-05-29 09:00:04+00:00| seen| Telegram/IiZ67zcGoo6QZpKiZ8plCh8QtxQmsZpB3uf27cpFh2eFp4...

CVE-2026-45261

creationtimestamp| type| source ---|---|--- 2026-05-28 20:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwtieccrp2c...

CVE-2026-9632

A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is the function strcpy of the file /goform/formGroupConfig of the component Web Management Interface. Executing a manipulation of the argument Profile can lead to stack-based buffer overflow. It is possibl...

CVE-2026-38703

creationtimestamp| type| source ---|---|--- 2026-05-28 19:33:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwrbkouza2p...

CVE-2026-44797

creationtimestamp| type| source ---|---|--- 2026-05-28 19:02:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwpjcpkqe2r 2026-05-28 20:00:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwsqz5dbl2v 2026-05-29 14:37:06+00:00| seen|...

CVE-2026-45044 RustFS: Authentication bypass in /profile/cpu and /profile/memory allows unauthenticated access to profiling handlers

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.2, the admin router explicitly whitelists /profile/cpu and /profile/memory from the authentication layer, allowing any unauthenticated HTTP client to invoke profiling handlers without credentials. On supported builds...

CVE-2026-44466

creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5ilszt2s 2026-05-28 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwreavbin2t 2026-06-02 22:07:07+00:00| seen|...

CVE-2026-9995

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9989

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9997

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9994

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9982

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-9990

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-48522

creationtimestamp| type| source ---|---|--- 2026-05-28 17:53:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwlnshmtl2k...

compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal

Summary The compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary check to ensure the resolved path stays within the trestle workspace. An attacker can craft a maliciou...

Directory Traversal

Overview compliance-trestle is a Tools to manage & autogenerate python objects representing the OSCAL layers/models Affected versions of this package are vulnerable to Directory Traversal via the profile import mechanism. An attacker can read arbitrary files on the server filesystem by supplying ...

GHSA-MJ4X-VF5C-5XG8 compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal

Summary The compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary check to ensure the resolved path stays within the trestle workspace. An attacker can craft a maliciou...

CVE-2026-48156

creationtimestamp| type| source ---|---|--- 2026-05-28 17:30:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwkejpygx2o...

CVE-2026-48155

creationtimestamp| type| source ---|---|--- 2026-05-28 17:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwk6k2inb2p...

CVE-2026-48524

creationtimestamp| type| source ---|---|--- 2026-05-28 17:18:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjprwno32c 2026-06-15 17:41:21+00:00| seen| https://gist.github.com/alon710/1f95260cf4713d452e9aa65f49fefae4 2026-06-15 23:21:16+00:00| seen|...