CVE-2026-15587

Improper Privilege Management in Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version...

CVE-2026-9193 Privilege escalation in Progress MarkLogic Server Hadoop integration

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database...

EUVD-2026-53422

An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with an administrative REST role to escalate privileges. This can result in unauthorized disclosure of sensitive server-si...

EUVD-2026-53341

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

WordPress Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin <= 6.11.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Tarcísio Luchesi De Almeida Silva Poystick in WordPress Plugin Instagram Feed versions = 6.11.3...

CLSA-2026-1785932316 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.1.21-tuxcare.8...

CVE-2026-71254

creationtimestamp| type| source ---|---|--- 2026-08-05 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msdi4bhzi62l 2026-08-05 12:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/117042788884411144 2026-08-05 12:40:04+00:00| seen|...

RHSA-2026:50065 Red Hat Security Advisory: python3 security update

Bulletin has no description...

RHSA-2026:50064 Red Hat Security Advisory: python3 security update

Bulletin has no description...

CVE-2026-10090

creationtimestamp| type| source ---|---|--- 2026-08-05 10:18:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gzht5h26j6cgw 2026-08-05 10:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdcme5m4p2o 2026-08-05 11:31:08+00:00| seen|...

CVE-2026-10059

creationtimestamp| type| source ---|---|--- 2026-08-05 10:16:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bxonml2lzenjs 2026-08-05 10:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdcmcvyui2l 2026-08-05 11:30:28+00:00| seen|...

CVE-2026-15452

The CVE covers the Smash Balloon Social Photo Feed – Easy Social Feeds Plugin for WordPress. Affected software: WordPress plugin versions up to 6.11.3. Vulnerability: Reflected Cross-Site Scripting via REQUEST_URI Query String caused by insufficient input sanitization and output escaping. Impact:...

CVE-2026-4431

creationtimestamp| type| source ---|---|--- 2026-08-05 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117042081155295833 2026-08-05 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msd62grcf32o 2026-08-05 09:20:04+00:00| seen|...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, apache-beam-python-3.13-sdk, openstack-glance-2025.2, openstack-glance-2026.1, openstack-nova-2025.1, openstack-nova-2025.2, apache-beam-python-3.12-sdk, openstack-glance-2025.1, openstack-nova-2026.1...

CVE-2026-11977 WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection

The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpmametaboxauthorslist' parameter in all versions up to, and including, 3.9.1 due to insufficient escaping on the user supplied parameter and lack...

CVE-2026-4431 Easy Post Submission <= 2.3.0 - Missing Authorization

The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createpost function in all versions up to, and including, 2.3.0. This is due to the rbsmsubmitpost AJAX action being registered for unauthenticated users via...

CVE-2026-9273

creationtimestamp| type| source ---|---|--- 2026-08-05 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/117041373701599609 2026-08-05 06:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msctyppdsc2t 2026-08-05 07:04:04+00:00| seen|...

CVE-2026-55707

In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not verify ownership of the target subnets. An authenticated user can onboard subnets from another project's shared network into their own subnetpool, mutating the victim's subnet state and altering L3 routing and address scop...

EUVD-2026-53030

A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine. The attack may be launched remotely. The exploit has been disclosed publicly and may be used...

EUVD-2026-53029

A weakness has been identified in H3C NX15 V100R017. This impacts the function file.exec of the file /api/esps of the component Backend RPC. This manipulation of the argument File causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public...