CVE-2026-60958

creationtimestamp| type| source ---|---|--- 2026-08-18 22:11:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfadgo37323 2026-08-19 01:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfjqb3fu22t 2026-08-19 17:16:05+00:00| seen|...

CVE-2026-60702

creationtimestamp| type| source ---|---|--- 2026-08-18 22:09:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfa6pevow25 2026-08-18 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfepcqxnr2u 2026-08-19 02:41:57+00:00| seen|...

CVE-2026-70877

A CVSS 8.8 HIGH-severity flaw in Oracle Hyperion Data Relationship Management 11.2.25.0.000 (Access and security component) allows low-privileged, network-authenticated attackers via HTTP to fully compromise the application (C/H/I/A all High). Oracle's August 2026 CPU advisory is the patch refere...

CVE-2026-61696 Forem: Stored XSS in Admin Abuse Report Rendering

Forem is open source software for building communities. In versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c, a malicious value submitted through feedbackmessagemessage is stored without sanitization and rendered in app/views/admin/feedbackmessages/feedbackmessage.html.erb through...

CVE-2026-61696

Forem versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c render unsanitized feedback_message[message] via raw() in app/views/admin/feedback_messages/_feedback_message.html.erb, enabling stored XSS when an admin views an abuse report. The unauthenticated FeedbackMessagesController acc...

CVE-2026-61696 Forem: Stored XSS in Admin Abuse Report Rendering

Forem is open source software for building communities. In versions before commit 92eacd16a82cf9007ba8e16a2258b42e3b53ca9c, a malicious value submitted through feedbackmessagemessage is stored without sanitization and rendered in app/views/admin/feedbackmessages/feedbackmessage.html.erb through...

CVE-2026-13242

creationtimestamp| type| source ---|---|--- 2026-08-18 16:39:14+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mtenqor7h222...

CVE-2026-45124

MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...

EUVD-2026-61018

MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...

CVE-2026-45124 MyBB: Mod CP report resolution missing authorization

MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...

CVE-2026-45124

MyBB (open-source forum software) prior to 1.8.40 contains an authorization flaw in the Mod CP Report Center . The modcp.php?action=do_reports "Mark Selected as Read" handler is reachable with only the canmodcp permission, even when the moderator lacks canmanagereportedcontent or canmanagereporte...

CVE-2026-45124

MyBB is free and open source forum software. Prior to 1.8.40, the Mod CP Report Center does not check permissions consistently, allowing moderators without report-management permission to mark reports as resolved. The modcp.php?action=doreports Mark Selected as Read handler is reachable with...

CVE-2026-73381

creationtimestamp| type| source ---|---|--- 2026-08-18 15:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtekgvdegp2j 2026-08-18 16:10:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem5ds6v52e...

MINI-6VHP-QJHR-W7HM

Bulletin has no description...

CVE-2026-16722

creationtimestamp| type| source ---|---|--- 2026-08-18 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtdnrnb2gl2c...

BELL-CVE-2026-74326 CVE-2026-74326 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-74310

Bulletin has no description...

BELL-CVE-2026-72417 CVE-2026-72417 does not affect BellSoft software

Bulletin has no description...

EUVD-2026-60543

Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...

PT-2026-78242

Name of the Vulnerable Software and Affected Versions Confluence Data Center and Server versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 Description A stored Cross-Site Scripting XSS, privilege escalation, and...