ALSA-2026:30845 Moderate: mod_md security update

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal. Security Fixes: httpd:...

CVE-2026-11597

creationtimestamp| type| source ---|---|--- 2026-06-27 10:50:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpbbyleuz42q 2026-06-27 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpcbmo3z4j2x 2026-06-27 20:16:09+00:00| seen|...

CVE-2026-12432

The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfsupdatefailedpaymentstatus AJAX action. The handler is registered through both wpajax and wpajaxnopriv hooks and the underlying updatefailedpaymentstatus function...

CVE-2025-60474

creationtimestamp| type| source ---|---|--- 2026-06-27 03:17:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpaipm22hw2v 2026-06-30 00:08:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphpk4cuao27...

[SECURITY] Fedora 44 Update: nginx-mod-vts-0.2.4-11.fc44

Nginx virtual host traffic status module...

[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-11.fc43

Nginx virtual host traffic status module...

CVE-2026-53576

creationtimestamp| type| source ---|---|--- 2026-06-26 22:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7xlajhsm2c 2026-06-27 20:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpcar4z6g52m 2026-06-29 19:25:26+00:00| seen|...

CVE-2026-53304

creationtimestamp| type| source ---|---|--- 2026-06-26 20:31:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116818304806421907 2026-07-06 06:52:38+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:30:18+00:00|...

CVE-2026-12411

creationtimestamp| type| source ---|---|--- 2026-06-26 19:55:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7pzez34222 2026-07-15 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqnghcoj4l25...

GHSA-4C8J-MGM4-QQVP

creationtimestamp| type| source ---|---|--- 2026-06-26 19:42:06+00:00| seen| https://gist.github.com/alon710/89044faa74c1d9de479703a9098fa939 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1745 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1745 2026-08-01 20:00:05+00:00| seen|...

CVE-2026-53308

In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue and fix removal order Use devm interface for allocating workqueue to fix two bugs at the same time: 1. Driver leaks the memory on remove, because the workqueue is not destroyed. 2...

CVE-2026-54557

creationtimestamp| type| source ---|---|--- 2026-06-26 19:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7ns2ae3e2q...

CVE-2026-57655

creationtimestamp| type| source ---|---|--- 2026-06-26 17:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7iejdxaa2x 2026-07-07 12:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2lhk32xz23...

DRUPAL-CONTRIB-2026-064

The Tealium iQ Tag Management module provides Drupal integration with Tealium iQ. tealiumiq stores some data as PHP-serialized strings. In some situations, malicious data can be written directly to the field. This can lead to an Object Injection vulnerability when the data are unserialized. This...

CVE-2026-57588

creationtimestamp| type| source ---|---|--- 2026-06-26 14:40:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp76f4d3ur2c 2026-07-22 17:00:04+00:00| seen| Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw 2026-07-23 00:00:09+00:00| published-proof-of-concept|...

ECHO-4791-4A80-51C8

Bulletin has no description...

CVE-2017-11010

creationtimestamp| type| source ---|---|--- 2026-06-26 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp5qx4u3622n...

EUVD-2026-39578

OCSP CertID serial-number length-confusion in wolfSSLOCSPrespfindstatus allows a same-issuer SingleResponse whose serial is a prefix of the target serial to be reported as the revocation status of a different certificate. The lookup compared serial-number bytes without first requiring the two...

CVE-2026-13283

creationtimestamp| type| source ---|---|--- 2026-06-25 23:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116813263698329595 2026-06-26 09:45:07+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen|...

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked...