ROS-20260626-73-0041

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and accessibility of the protected...

ROS-20260626-73-0020

The vulnerability of the ngxhttprewritemodule module in NGINX Plus and NGINX Open Source web servers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by sending a specially crafte...

PT-2026-52911

Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 17.3.3 OpenProject versions prior to 17.4.1 Description Cache store poisoning allows for Remote Code Execution RCE, a process where an attacker executes arbitrary code on a remote machine. Recommendations Update t...

CVE-2026-56786

creationtimestamp| type| source ---|---|--- 2026-06-25 23:44:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5mddcyuc2u 2026-06-26 12:10:34+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp6vzhl4h72q 2026-06-27 17:07:07+00:00| seen|...

CVE-2026-56768

creationtimestamp| type| source ---|---|--- 2026-06-25 23:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5m2eudfs2p...

CVE-2026-55958

creationtimestamp| type| source ---|---|--- 2026-06-25 23:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5l7iyoj72k 2026-07-18 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwp6dyokg2m...

CVE-2026-11310

creationtimestamp| type| source ---|---|--- 2026-06-25 23:19:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5kwkjft62b 2026-07-04 06:39:39+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpshb47h7d2m 2026-07-04 06:39:43+00:00| seen|...

CVE-2026-6679

creationtimestamp| type| source ---|---|--- 2026-06-25 23:15:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5koutula2a 2026-06-30 14:37:17+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpja36wkfh2v...

CVE-2026-12921

creationtimestamp| type| source ---|---|--- 2026-06-25 23:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5ki5tddm2o...

CVE-2026-56767

creationtimestamp| type| source ---|---|--- 2026-06-25 23:08:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5kc6oyzd27...

CVE-2026-56769

creationtimestamp| type| source ---|---|--- 2026-06-25 23:05:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5k4slih62z...

CVE-2026-55413

creationtimestamp| type| source ---|---|--- 2026-06-25 23:02:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jxw3m5w2r...

CVE-2026-56771

creationtimestamp| type| source ---|---|--- 2026-06-25 22:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jtglqfg27...

CVE-2026-55412

creationtimestamp| type| source ---|---|--- 2026-06-25 22:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jpc5x2w2b...

CVE-2026-57700

creationtimestamp| type| source ---|---|--- 2026-06-25 22:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jlh6z472w...

CVE-2026-11703

creationtimestamp| type| source ---|---|--- 2026-06-25 22:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5iqs5h7w2z...

CVE-2026-10098

creationtimestamp| type| source ---|---|--- 2026-06-25 22:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5ihtnmhf27...

GO-2026-5756 AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle in github.com/AdguardTeam/AdGuardHome

AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle in github.com/AdguardTeam/AdGuardHome...

GO-2026-5579 Antrea has Missing Encryption of Sensitive Data in antrea.io/antrea

Antrea has Missing Encryption of Sensitive Data in antrea.io/antrea. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest ...

GO-2026-5433 DevSpace UI Server WebSocket CheckOrigin does not validate source in github.com/loft-sh/devspace

DevSpace UI Server WebSocket CheckOrigin does not validate source in github.com/loft-sh/devspace. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...