CVE-2026-45336

creationtimestamp| type| source ---|---|--- 2026-07-16 17:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrscyddbi2l 2026-07-16 19:25:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrxndfem52e...

CVE-2026-45568

creationtimestamp| type| source ---|---|--- 2026-07-16 17:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrruonqck2c 2026-07-16 18:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrv3zbe6o2l 2026-07-21 04:37:06+00:00| seen|...

CVE-2026-51380

creationtimestamp| type| source ---|---|--- 2026-07-16 16:34:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930618228870140 2026-07-16 16:40:28+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroftqfcv2u...

CVE-2026-59865

creationtimestamp| type| source ---|---|--- 2026-07-16 16:00:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrm6qrdhu2u 2026-07-16 16:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrou5lqyq2o...

CVE-2026-59864

creationtimestamp| type| source ---|---|--- 2026-07-16 15:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlwrdoo42s 2026-07-16 16:42:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrojfdglg2c...

CVE-2026-59867 Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota resolved OpenAPI $ref values by fetching remote https URLs and reading local absolute or out-of-tree file paths, allowing kiota generate on an attacker-controlled or attacker-influenced description to perform...

CVE-2026-35149

creationtimestamp| type| source ---|---|--- 2026-07-16 14:21:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqrgnylq7c2m 2026-07-16 15:00:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqriu5qsbd2x 2026-07-22 11:37:06+00:00| seen|...

CVE-2026-5674

creationtimestamp| type| source ---|---|--- 2026-07-16 14:14:25+00:00| seen| https://bsky.app/profile/suriq.io/post/3mqrgbdys5a2o 2026-07-16 14:25:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116930114006202187 2026-07-16 14:49:42+00:00| seen|...

CVE-2026-63305

creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...

EUVD-2026-44911

An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...

CVE-2026-11386

An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...

CVE-2026-11386 ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution

An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...

CVE-2026-11386 ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution

An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client constructs APT source files such as /etc/apt/sources.list.d/ubuntu-.list or their DEB822 equivalents using data received directly from the contract server response via...

CVE-2023-49899

creationtimestamp| type| source ---|---|--- 2026-07-16 10:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqqzttbmtf2d 2026-07-16 11:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr4dovnto2s...

CVE-2026-15013

creationtimestamp| type| source ---|---|--- 2026-07-16 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116928127100536568 2026-07-16 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqqko4sy4f2z 2026-07-16 06:26:05+00:00| seen|...

PT-2026-60591

Name of the Vulnerable Software and Affected Versions BC-LTS versions 2.73.0 through 2.73.12.0 Description An out-of-bounds write issue in the bcprov-lts8on component on ARM architecture can lead to buffer overflows. This occurs when an application accepts memoable SHA3 or SHAKE states from...

PT-2026-60459

Name of the Vulnerable Software and Affected Versions ubuntu-pro-client affected versions not specified Description An input validation and injection issue exists where the client constructs APT source files using data from the contract server response via the directives.suites and...

Linux Distros Unpatched Vulnerability : CVE-2026-11386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An input validation and injection vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu- advantage-tools. The client constructs APT source files...

CVE-2026-46709

creationtimestamp| type| source ---|---|--- 2026-07-15 23:10:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqptrql7f623 2026-07-15 23:11:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116926517721073292...

CVE-2026-46485

creationtimestamp| type| source ---|---|--- 2026-07-15 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj5fzol22x 2026-07-15 21:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnlvlhdp2m...