GHSA-6HX8-3WJJ-GR8G

creationtimestamp| type| source ---|---|--- 2026-08-27 23:33:29+00:00| seen| https://gist.github.com/alon710/3f2dc90a23f10e17e098821e66e18187 2026-08-28 00:01:48+00:00| seen| https://gist.github.com/alon710/3f2dc90a23f10e17e098821e66e18187...

CVE-2026-81730

creationtimestamp| type| source ---|---|--- 2026-08-27 22:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vkvq4f4uofm4 2026-08-27 22:59:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3x7he4yh24 2026-08-27 22:59:49+00:00| seen|...

Exploits and vulnerabilities in Q2 2026

The vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of...

CVE-2026-65641

creationtimestamp| type| source ---|---|--- 2026-08-26 08:32:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtxwcgg72o2v 2026-08-26 12:35:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtpmdku2x 2026-08-26 22:58:41+00:00| seen|...

CVE-2026-78619

creationtimestamp| type| source ---|---|--- 2026-08-25 22:12:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/gwzqittmf6hj5...

CVE-2026-59981

creationtimestamp| type| source ---|---|--- 2026-08-25 20:37:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/423m46wxqajap...

CVE-2026-76639

creationtimestamp| type| source ---|---|--- 2026-08-25 11:00:03+00:00| published-proof-of-concept| Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI 2026-08-25 19:00:04+00:00| seen| https://t.me/GithubRedTeam/99549 2026-08-26 00:00:09+00:00| published-proof-of-concept|...

CVE-2026-77141

The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activa...

CVE-2026-74281

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. A remote attacker, acting as a peer node, could exploit this by sending specially crafted PUBLICATION messages with inverted service ranges. This oversight in validating service range bounds allows the...

AZL-96174 CVE-2026-72341 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix publication race for priv-channelstats mlx5echannelstatsalloc publishes a new entry to priv-channelstats and then increments priv-statsnch as a publication token, but neither store carries any memory barrier:...

CVE-2026-68417 RDMA/siw: publish QP after initialization

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siwcreateqp currently calls siwqpadd before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being...

CVE-2026-18037 Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

The Create WordPress plugin before 2.5.4 does not perform an authorization check before rendering content over one of its public REST API routes, and that route additionally publishes the requested content as a side effect, allowing unauthenticated attackers to read unpublished content and to mak...

CVE-2026-16992 Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication

The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning content over one of its REST API routes, and that route additionally publishes the requested content as a side effect, allowing unauthenticated attackers to read unpublished content and to make it...

CVE-2026-16992

CVE-2026-16992 affects the WordPress plugin “Create by Mediavine”

CVE-2026-48047

XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, a potential path traversal vulnerability allow an attacker who manages to get a malicious WebJar extension installed on the wiki to write...

CVE-2026-68742

creationtimestamp| type| source ---|---|--- 2026-08-07 14:05:27+00:00| published-proof-of-concept| https://t.me/bdufstecru/3369 2026-08-08 00:06:20+00:00| published-proof-of-concept| https://t.me/bdufstecru/3369...

CVE-2026-71192

creationtimestamp| type| source ---|---|--- 2026-08-05 17:38:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7mq5ik4363ci5...

GHSA-7PGQ-CR25-XVC8

creationtimestamp| type| source ---|---|--- 2026-08-05 16:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364 2026-08-06 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364...

CVE-2026-71238

creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn2laot2o...

GHSA-69XF-PQRW-596X

creationtimestamp| type| source ---|---|--- 2026-08-04 07:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3360 2026-08-05 00:00:52+00:00| published-proof-of-concept| https://t.me/bdufstecru/3360...