CVE-2026-62241

creationtimestamp| type| source ---|---|--- 2026-07-17 00:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqsidieaof2d 2026-07-17 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116932727657867490 2026-07-17 01:30:28+00:00| seen|...

CVE-2026-58598

creationtimestamp| type| source ---|---|--- 2026-07-16 23:57:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgtyvkbr2a 2026-07-17 01:36:32+00:00| seen| https://bsky.app/profile/thecircuitry.to/post/3mqsmf2qrzr27 2026-07-17 14:00:11+00:00| seen|...

CVE-2026-15997

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files https://github.Com/bcgit/bc-lts-java/blob/main/nativec/arm/sha/shake.C,...

CVE-2026-15997

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is associated with program files https://github.Com/bcgit/bc-lts-java/blob/main/nativec/arm/sha/shake.C,...

CVE-2026-44019 Docling Core has insufficient validation of image reference URIs

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

CVE-2026-46515

creationtimestamp| type| source ---|---|--- 2026-07-16 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqryzl4r7q2c 2026-07-16 20:01:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrzocxj7w2m...

CVE-2026-50979

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:13+00:00| seen| Telegram/t092y5BgJmODHc3D2a3Ra4fTCXsa-vHp4gQ4JjPUYAbfUJ0 2026-07-16 19:00:13+00:00| seen| Telegram/c-tiQItlsunczDQWBYAXRvkiYxV7bIvmHKFdwaGGudIBj1Y 2026-07-17 00:00:29+00:00| seen|...

CVE-2026-29115

creationtimestamp| type| source ---|---|--- 2026-07-16 19:00:12+00:00| seen| Telegram/vFDO5SwsZ7hIMyqUKVS5e9UBDOzM5D4lILt5pmQlyCTvgM 2026-07-16 19:00:12+00:00| seen| Telegram/vkQwkXUL30u3pRsZtV-s7rMERa3mU1vbncFib7BaHrS3aA 2026-07-17 00:00:27+00:00| seen|...

Malicious code in @whalent/agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a01c1162adb93d3960d9e1b1b67095dcf0a1ea72aefa6d471d0abbbabb5d9a The package installs a whalent CLI daemon that opens a persistent WebSocket connection wss:// to a Whalent Memory gateway and, per its own README,...

CVE-2026-45336

creationtimestamp| type| source ---|---|--- 2026-07-16 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrscyddbi2l 2026-07-16 19:25:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrxndfem52e...

CVE-2026-45568

creationtimestamp| type| source ---|---|--- 2026-07-16 17:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrruonqck2c 2026-07-16 18:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrv3zbe6o2l 2026-07-21 04:37:06+00:00| seen|...

CVE-2026-51380

creationtimestamp| type| source ---|---|--- 2026-07-16 16:34:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930618228870140 2026-07-16 16:40:28+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroftqfcv2u...

CVE-2026-59865

creationtimestamp| type| source ---|---|--- 2026-07-16 16:00:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrm6qrdhu2u 2026-07-16 16:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrou5lqyq2o...

CVE-2026-59864

creationtimestamp| type| source ---|---|--- 2026-07-16 15:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlwrdoo42s 2026-07-16 16:42:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrojfdglg2c...

CVE-2026-59867 Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.5, Kiota resolved OpenAPI $ref values by fetching remote https URLs and reading local absolute or out-of-tree file paths, allowing kiota generate on an attacker-controlled or attacker-influenced description to perform build-time...

CVE-2026-35149

creationtimestamp| type| source ---|---|--- 2026-07-16 14:21:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrgnylq7c2m 2026-07-16 15:00:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqriu5qsbd2x 2026-07-22 11:37:06+00:00| seen|...

CVE-2026-5674

creationtimestamp| type| source ---|---|--- 2026-07-16 14:14:25+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqrgbdys5a2o 2026-07-16 14:25:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930114006202187 2026-07-16 14:49:42+00:00| seen|...

CVE-2026-63305

creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...

CVE-2023-49899

creationtimestamp| type| source ---|---|--- 2026-07-16 10:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqqzttbmtf2d 2026-07-16 11:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr4dovnto2s...

CVE-2026-15013

creationtimestamp| type| source ---|---|--- 2026-07-16 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116928127100536568 2026-07-16 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqqko4sy4f2z 2026-07-16 06:26:05+00:00| seen|...