PT-2026-66836

Name of the Vulnerable Software and Affected Versions Thumbor versions prior to 7.8.0 Description The ALLOWED SOURCES configuration, designed to restrict the hosts from which the HTTP loader fetches images, fails to escape dots when processing plain-string entries. These strings are passed direct...

GHSA-HR7P-WG7R-HG9M

creationtimestamp| type| source ---|---|--- 2026-07-30 23:32:08+00:00| seen| https://gist.github.com/alon710/937397e52a8e0970b2abb603a8f2aff3 2026-07-31 00:01:11+00:00| seen| https://gist.github.com/alon710/937397e52a8e0970b2abb603a8f2aff3...

CVE-2026-18064

creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk7fn6oy23 2026-07-31 09:20:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrwmuh3w7e2j...

CVE-2026-63559

creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk7772zo22...

CVE-2026-66421

creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvk677xxf2y 2026-07-31 01:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqw2elck2a 2026-07-31 12:44:04+00:00| seen|...

CVE-2026-55768

creationtimestamp| type| source ---|---|--- 2026-07-30 22:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i756bnxfs3slr...

GHSA-QQ9Q-XGM3-XV9G

creationtimestamp| type| source ---|---|--- 2026-07-30 22:32:21+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47 2026-07-31 00:01:11+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47...

CVE-2026-11536

creationtimestamp| type| source ---|---|--- 2026-07-30 22:16:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrvhpxhewy2y 2026-08-06 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msgbdb2yns2v...

CVE-2026-67207

creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdiobq3d2q 2026-07-31 12:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuv6omv24...

CVE-2026-67206

creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o 2026-08-02 08:02:13+00:00| seen| https://t.me/GithubRedTeam/96249 2026-08-03 02:07:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96...

CVE-2026-66803

creationtimestamp| type| source ---|---|--- 2026-07-30 20:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvde3fur622 2026-07-30 22:56:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e6ukxlsbup2xn 2026-07-31 01:30:28+00:00| seen|...

GHSA-JX74-CQJV-2C67

creationtimestamp| type| source ---|---|--- 2026-07-30 20:33:08+00:00| seen| https://gist.github.com/alon710/c5ece1b4b71f33d4bb332d0422fd7596...

CVE-2026-48499

creationtimestamp| type| source ---|---|--- 2026-07-30 20:23:53+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbgw5k5s2c 2026-07-30 20:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvdahgdbl23...

CVE-2026-67528

creationtimestamp| type| source ---|---|--- 2026-07-30 20:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/agxcrs77lkn5n...

CVE-2026-67527

creationtimestamp| type| source ---|---|--- 2026-07-30 20:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dcic74hmkaf3g...

CVE-2026-67208

creationtimestamp| type| source ---|---|--- 2026-07-30 20:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvadilv6w2e 2026-07-31 12:38:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuttciu2q...

CVE-2026-67594

creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7x7eag22 2026-07-30 21:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdib25zu2j...

CVE-2026-18140

creationtimestamp| type| source ---|---|--- 2026-07-30 20:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva7bpwl72o...

CVE-2026-64870

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxtesop7dg2u...

CVE-2026-14602

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva4fhjpv2v 2026-08-06 20:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msgu7ogxhb2c...