CVE-2026-47703

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-47703 AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

AdGuard Home is a network-wide software for blocking ads and tracking. Prior to 0.107.75, AdGuard Home's client-triggered DoQ forwarding path to a udp:// upstream reduced backend UDP DNS state by producing dnsid=0 or txid=0 and exposed a quoted-port ICMP source-port oracle, weakening DNS response...

CVE-2026-56339

creationtimestamp| type| source ---|---|--- 2026-07-15 15:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp2o7cnt32o...

CVE-2026-42533

A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a non-cacheable variable i...

CVE-2026-59841

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-07-15 16:02:43+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0240...

CVE-2026-59838

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-07-15 16:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp64klyui2s...

CVE-2026-53566

creationtimestamp| type| source ---|---|--- 2026-07-15 14:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovu3ew4h2c 2026-07-15 16:15:13+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-702...

CVE-2026-53565

creationtimestamp| type| source ---|---|--- 2026-07-15 14:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovu3ew4h2c 2026-07-15 16:15:15+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-702...

K000161837: Out-of-band Security Notification (July 15, 2026)

Security Advisory Description On July 15, 2026, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your F5 devices. You can find the details of each issue in the associated articles. Article CVE|...

CVE-2026-48808

A flaw was found in Twig, a template language for PHP. The column filter in Twig fails to properly forward the active sandbox state, specifically the current Source to the SandboxExtension::checkPropertyAllowed function. This oversight results in the loss of SourcePolicyInterface decisions,...

CVE-2026-40633

creationtimestamp| type| source ---|---|--- 2026-07-15 12:42:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqoqokvbcy2b 2026-07-15 13:45:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqou66ize32w...

CVE-2026-61451

creationtimestamp| type| source ---|---|--- 2026-07-15 12:36:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoqcmrt352o 2026-07-15 16:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp4sg2vjg2n...

CVE-2026-56699

creationtimestamp| type| source ---|---|--- 2026-07-15 12:36:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqoqclj6ai2j 2026-07-15 15:55:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqp3god4i42i...

CVE-2026-61433

PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressions through the deploy.api.host and agentsfile configuration parameters that execute when the generated server starts or...

EUVD-2026-44625

n8n before 2.19.3 contains a file path restriction bypass in the legacy ExecuteWorkflow node's localFile source option, which reads workflow files from disk without the file-access checks enforced by other file-reading nodes. Although hidden from the UI since v1.2, it remains reachable via the RE...

CVE-2026-59837

creationtimestamp| type| source ---|---|--- 2026-07-15 10:13:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116923458848771348 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n...

CVE-2026-15804

creationtimestamp| type| source ---|---|--- 2026-07-15 08:45:09+00:00| seen| https://www.twcert.org.tw/en/cp-139-11036-986ec-2.html 2026-07-15 09:08:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqoepmbuhp2i...

CVE-2026-42936

creationtimestamp| type| source ---|---|--- 2026-07-15 08:33:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqocr3ocif2c 2026-07-15 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN59875262...

CVE-2026-11579

creationtimestamp| type| source ---|---|--- 2026-07-15 08:28:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqoci4zafs2x...

CVE-2026-12281

creationtimestamp| type| source ---|---|--- 2026-07-15 08:23:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqoc76djrl22 2026-07-15 12:00:16+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqoockgock2y...