CVE-2026-28408

creationtimestamp| type| source ---|---|--- 2026-02-28 01:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfv3jchrya2u 2026-02-28 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116146020481643691 2026-02-28 03:00:29+00:00| seen|...

GHSA-6MQ3-XMGP-PJM5

creationtimestamp| type| source ---|---|--- 2026-02-28 01:10:11+00:00| seen| https://gist.github.com/alon710/26ad557fbd4646a04459f43b9aa9e194...

PT-2026-30036

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the dpaa2-switch component that can lead to an interrupt storm. This occurs when an invalid if id is received in the IRQ handler. A range check wa...

GHSA-7JX5-9FJG-HP4M

creationtimestamp| type| source ---|---|--- 2026-02-27 23:10:11+00:00| seen| https://gist.github.com/alon710/0dcef91400c9361c9eb058c2c8a6df3b...

CVE-2026-27582

Further research determined the situation described is not a vulnerability...

CVE-2026-27580

Further research determined the situation described is not a vulnerability...

CVE-2026-27500

Further research determined the situation described is not a vulnerability...

CVE-2026-1305

The CVE-2026-1305 entry concerns the WordPress plugin Japanized for WooCommerce (WooCommerce for Japan) with an authentication bypass vulnerability. The root cause is a flawed paidy_webhook_permission_check that unconditionally returns true when the webhook signature header is omitted, allowing u...

WordPress Fluent Forms Pro Add On Pack plugin <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification vulnerability

Missing Authorization to Unauthenticated Payment Status modification vulnerability discovered by Prickly Cactus in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.1.17...

GHSA-7GCC-R8M5-44QM

creationtimestamp| type| source ---|---|--- 2026-02-27 02:40:18+00:00| seen| https://gist.github.com/alon710/9c24edd6758ed34c527e00be66673a79...

GHSA-VJF3-2GPJ-233V

creationtimestamp| type| source ---|---|--- 2026-02-27 02:10:20+00:00| seen| https://gist.github.com/alon710/ebc773370e1f1607b2bfdb1617822e65 2026-07-06 07:58:49+00:00| seen| https://gist.github.com/alon710/d7446e83b138301fa78ba45ab4a16d68 2026-07-06 07:59:30+00:00| seen|...

CVE-2026-25085 Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass...

CVE-2026-1305: Improper Authentication

The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4. This is due to a flawed permission check in the paidywebhookpermissioncheck function that unconditionally returns true when the webhook signature header is omitted...

GHSA-WPPC-7CQ7-CGFV

creationtimestamp| type| source ---|---|--- 2026-02-26 22:10:19+00:00| seen| https://gist.github.com/alon710/3876c0d5d37ba696379319dc0ea4cb02...

CVE-2026-26979 Discourse: TL4 users are able to change status of restricted topics

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, TL4 users are able to close, archive and pin topics in private categories they don't have access to. Versions 2025.12.2, 2026.1.1, and 2026.2.0 patch the issue. No known workarounds are available...

CVE-2026-2679

creationtimestamp| type| source ---|---|--- 2026-02-26 16:37:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfrmyxkigp2k...

GHSA-42WG-38GX-85RH

creationtimestamp| type| source ---|---|--- 2026-02-26 15:40:19+00:00| seen| https://gist.github.com/alon710/ef8daafa48df3faf43c600dde2331d8a...

CVE-2026-26077

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, several webhook endpoints SendGrid, Mailjet, Mandrill, Postmark, SparkPost in the WebhooksController accepted requests without a valid authentication token when no token was configured. This...

GHSA-76M6-PJ3W-V7MF

creationtimestamp| type| source ---|---|--- 2026-02-26 05:13:40+00:00| seen| https://gist.github.com/rollkoffers-gaston/46391c991c70a7d70cdb0c31d53558a9...

Linux RAID Buffer Overflow DoS

The vulnerability of the raidstatus function in the drivers/md/dm-raid.c module of the Linux device driver for multiple devices RAID and LVM involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...