CVE-2026-76838

creationtimestamp| type| source ---|---|--- 2026-08-24 18:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzangtp4vj27 2026-08-24 19:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27...

CVE-2026-71921

creationtimestamp| type| source ---|---|--- 2026-08-24 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttxcd4hst2p 2026-08-24 20:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu47rmww72m 2026-08-25 09:00:04+00:00| published-proof-of-concept|...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-13212

creationtimestamp| type| source ---|---|--- 2026-08-24 16:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jth6z7lrinmlf...

CVE-2026-78247

creationtimestamp| type| source ---|---|--- 2026-08-24 15:53:36+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mttnymbte62n...

CVE-2026-71364

creationtimestamp| type| source ---|---|--- 2026-08-24 15:46:48+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117151262762627704...

CVE-2026-59564

creationtimestamp| type| source ---|---|--- 2026-08-24 14:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttireopgc25 2026-08-24 16:07:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorpc6kx2b 2026-09-24 22:22:31+00:00| seen|...

Exploit for Eval Injection in Tenable Security_Center

C...

CVE-2026-66648

creationtimestamp| type| source ---|---|--- 2026-08-24 12:18:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/giyrj2vmymevx 2026-08-24 13:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttece2jp52e 2026-08-24 14:07:48+00:00| seen|...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftflowoffload: Release dst if direct xmit path is used Direct xmit does not use it because it calls devqueuexmit to send packets; therefore, it calls dstrelease. kmemleak reports: Unreferenced object...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: virtio/vsock: Fixed an uninit-value issue in virtiotransportrecvpkt KMSAN reported the following uninit-value access issues: ===================================================== BUG: KMSAN: uninit-value in...

CVE-2026-69665

creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:28+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 08:44:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ca4jtmqur4f7n 2026-09-24 22:24:10+00:00| seen|...

CVE-2026-78204

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78203

Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...

CVE-2026-78204

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

EUVD-2026-64679

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78204

Ghostwriter through version 7.2.6 is missing per-object authorization on its report template lint endpoints . The underlying cause is that RoleBasedAccessControlMixin.test_func only checks request.user.is_active unless a view explicitly overrides it, and neither the lint endpoint nor the stored-l...