CVE-2026-39903: Incorrect Authorization

Simple Machines Forum 2.1 prior to commit 7d048f8 and 3.0 prior to commit a7875e8 contains an authorization bypass vulnerability in Sources/Actions/AttachmentApprove.php where a single-character operator error causes the permission check to always pass regardless of user permissions. An...

CVE-2026-12595

creationtimestamp| type| source ---|---|--- 2026-07-09 23:52:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqatbxlm5v2x 2026-07-10 01:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqax4vap6h2m...

CVE-2026-13253

creationtimestamp| type| source ---|---|--- 2026-07-09 22:36:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqaozyvdmo2y 2026-07-09 22:36:07+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqaozzguty2m...

CVE-2026-58123

creationtimestamp| type| source ---|---|--- 2026-07-09 21:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqamhoqmnr25 2026-07-09 23:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqaqiazrqg2b 2026-07-09 23:19:15+00:00| seen|...

CVE-2026-59928

A flaw was found in Mistune, a Python Markdown parser. A remote attacker could exploit this vulnerability by providing a specially crafted Markdown document containing numerous repeated or distinct reference-link definitions. This can lead to excessive processing, causing CPU exhaustion and a...

CVE-2026-9253

creationtimestamp| type| source ---|---|--- 2026-07-09 11:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7l5x5fd325 2026-07-09 13:30:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116890261952553944 2026-07-09 13:30:53+00:00| seen|...

CVE-2026-44041

creationtimestamp| type| source ---|---|--- 2026-07-09 11:36:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7k6qpavs26 2026-07-09 11:36:58+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mq7k7dycw32s...

BIT-AIRFLOW-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...

CVE-2026-44934

creationtimestamp| type| source ---|---|--- 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mq6ov4q7ot2f 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ov5pniv27...

CVE-2026-15133

creationtimestamp| type| source ---|---|--- 2026-07-09 00:34:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116887208284085207 2026-07-09 01:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hzaaw4x27 2026-07-09 04:46:08+00:00| seen|...

CVE-2026-15129

creationtimestamp| type| source ---|---|--- 2026-07-09 00:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116887076049207813 2026-07-09 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq6dcbdhns2x 2026-07-09 00:20:37+00:00| seen|...

CVE-2026-60104

creationtimestamp| type| source ---|---|--- 2026-07-08 22:12:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65arfuib24 2026-07-08 23:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq6a547swj2z 2026-07-09 16:00:46+00:00| seen|...

CVE-2026-58494

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

UBUNTU-CVE-2026-58494

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite...

CVE-2026-60102

creationtimestamp| type| source ---|---|--- 2026-07-08 17:04:53+00:00| seen| https://bsky.app/profile/hackerfantastic.bsky.social/post/3mq5m2sgh3c2w 2026-07-08 17:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5nehtqw22g 2026-07-09 09:44:04+00:00| seen|...

CVE-2018-20599

creationtimestamp| type| source ---|---|--- 2026-07-08 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5kj5avp323 2026-07-08 16:37:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mq5kj6ilvn2v...

CVE-2026-40215

A flaw was found in OpenVPN that occurs when a connection is being established or updated. A remote attacker could exploit this timing issue to crash the OpenVPN server, causing a temporary service disruption Denial of Service. In some cases, it could also allow an attacker to view fragments of t...

CVE-2026-58480

creationtimestamp| type| source ---|---|--- 2026-07-08 13:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116884598388668562 2026-07-08 13:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq5a3kmqpd2j 2026-07-08 14:12:06+00:00| seen|...

CVE-2026-12378

creationtimestamp| type| source ---|---|--- 2026-07-08 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116883182787896423 2026-07-08 07:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mq4lxt2vde2d 2026-07-08 08:04:39+00:00| seen|...

CVE-2026-12479

A flaw was found in Keras, specifically in the model saving and loading library. This path traversal vulnerability occurs due to improper handling of user-provided layer names, which allows an attacker to craft a malicious Keras model. When this model is saved or loaded, it can escape its intende...