CVE-2026-12073: Authorization Bypass Through User-Controlled Key

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.9.9.5. This is due to the plugin not validating a userlogin on registration forms that don't contain this parameter, and...

PT-2026-53860

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

CVE-2026-34592

creationtimestamp| type| source ---|---|--- 2026-06-29 23:43:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpho4kfo3b2t 2026-06-30 02:42:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mphy4l7znf2i...

CVE-2026-57498

creationtimestamp| type| source ---|---|--- 2026-06-29 22:37:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphkgkb5nx2y 2026-06-29 23:03:43+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mphlw6ku5s2x 2026-06-29 23:28:36+00:00| seen|...

CVE-2026-55276

creationtimestamp| type| source ---|---|--- 2026-06-29 22:28:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjxl65jr27 2026-06-29 22:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphlo2ck6t24 2026-06-29 23:11:34+00:00| seen|...

CVE-2026-13758

creationtimestamp| type| source ---|---|--- 2026-06-29 22:12:19+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphj2b3ym623 2026-06-29 22:53:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphleohj6h2v 2026-06-29 23:32:10+00:00| seen|...

CVE-2026-13593

creationtimestamp| type| source ---|---|--- 2026-06-29 21:46:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphhllqbix2z 2026-06-29 23:40:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphnxisglw2k 2026-06-29 23:56:39+00:00| seen|...

CVE-2026-3472

creationtimestamp| type| source ---|---|--- 2026-06-29 21:43:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhgs6dm723 2026-06-29 21:43:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mphhguw4wr26...

EUVD-2026-40162

PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user endpoints. Attackers can exploit the missing session-to-user identifier validation in the PU...

CVE-2026-57330

creationtimestamp| type| source ---|---|--- 2026-06-29 16:13:55+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpguzf6j6j2g 2026-06-29 16:13:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguzfc7bf2d...

CVE-2026-57329

creationtimestamp| type| source ---|---|--- 2026-06-29 16:11:52+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguvpeeku2d 2026-06-29 16:11:55+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpguvtbqfo2w...

CVE-2026-56457

creationtimestamp| type| source ---|---|--- 2026-06-29 16:04:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgujdz3qn2w 2026-06-29 16:04:57+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgujdy5vf2t 2026-06-29 20:13:24+00:00| seen|...

CVE-2026-46817

creationtimestamp| type| source ---|---|--- 2026-06-29 13:46:37+00:00| seen| https://bsky.app/profile/bleepingcomputer.com/post/3mpgmrwrd2525 2026-06-29 14:01:32+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3mpgnmnxscm2c 2026-06-29 14:03:49+00:00| seen|...

CVE-2026-13553

creationtimestamp| type| source ---|---|--- 2026-06-29 11:51:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpggeworr225 2026-06-29 14:06:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpgnuv2el52b...

CVE-2026-13539

creationtimestamp| type| source ---|---|--- 2026-06-29 07:55:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfz6rgc6q2y 2026-06-29 08:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpfzhmjhwp26 2026-06-29 10:53:23+00:00| seen|...

MAL-2026-6582 Malicious code in openai-agents-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 768ddf82a7644f1678a27f3037c8a3fc4fae5f00b6181d6507a49892d20a7fda On npm install, scripts/postinstall.js automatically reads a broad set of installer-side identity and cloud-configuration files — /.gitconfig and the...

PT-2026-53670

Name of the Vulnerable Software and Affected Versions Mythic versions prior to 3.4.0.60 Description An authorization bypass exists in four REST endpoints: 'c2profile config check webhook', 'c2profile redirect rules webhook', 'c2profile get ioc webhook', and 'c2profile sample message webhook'. The...

CVE-2026-58056

creationtimestamp| type| source ---|---|--- 2026-06-28 06:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpdcc7bsyx2g 2026-06-28 06:08:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdcpy326n2s 2026-06-29 14:53:42+00:00| seen|...

CVE-2026-10646

creationtimestamp| type| source ---|---|--- 2026-06-28 06:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpdcbiet3q2v 2026-06-28 06:23:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpddktd5em27 2026-06-28 06:57:36+00:00| seen|...

CVE-2026-11356

creationtimestamp| type| source ---|---|--- 2026-06-27 05:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mparafvfd52d 2026-06-27 06:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpasolpaii2i 2026-06-29 19:25:55+00:00| seen|...