CVE-2026-43619

Rsync

CVE-2026-43619 Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls

Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link, rmdir, and lstat that allow local attackers to redirect operations to files outside the exported rsync module...

PT-2026-42053

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.4.3 Description A symlink race condition exists in path-based system calls, including chmod, lchown, utimes, rename, unlink, mkdir, symlink, mknod, link, rmdir, and lstat. Local attackers with filesystem access can...

CVE-2026-45584

creationtimestamp| type| source ---|---|--- 2026-05-19 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1878 2026-05-20 10:16:09+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-av26-489 2026-05-20 14:10:08+00:00| seen|...

CVE-2026-36829

creationtimestamp| type| source ---|---|--- 2026-05-19 19:02:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mma3cp2l3s2k 2026-05-19 19:02:24+00:00| seen| https://bsky.app/profile/potato.software/post/3mma3cpz45z25 2026-05-19 21:02:48+00:00| seen|...

CVE-2026-47782

creationtimestamp| type| source ---|---|--- 2026-05-19 18:20:00+00:00| seen| https://jvn.jp/en/vu/JVNVU93461473 2026-05-21 02:41:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmdfgatcka2q 2026-06-20 13:27:31+00:00| seen|...

CVE-2026-7504

creationtimestamp| type| source ---|---|--- 2026-05-19 12:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gy7dnug2e 2026-05-19 13:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7hkblcqz2t 2026-06-01 11:03:09+00:00| seen|...

CVE-2026-45434

creationtimestamp| type| source ---|---|--- 2026-05-19 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116600774685376629 2026-05-19 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm76pj6yzv2j 2026-05-19 17:49:26+00:00| seen|...

CVE-2026-27892 FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download

FacturaScripts is an open source accounting and invoicing software. In versions prior to 2026, the Library module stores and serves uploaded images byte-for-byte, without stripping EXIF/XMP/IPTC metadata. Any authenticated user who downloaded an image could extract the uploader's embedded metadat...

CVE-2026-27892

FacturaScripts Library module stores and serves uploaded images without stripping EXIF/IPTC/XMP metadata, allowing any authenticated user who downloads an image to extract GPS coordinates, device information, timestamps, and other PII embedded in metadata. This is a design-level omission affectin...

CERTFR-2026-ACT-022

creationtimestamp| type| source ---|---|--- 2026-05-18 11:39:08+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mm4s3dwvnz2n 2026-05-18 11:39:09+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116595382450086436...

Use Of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Cloudreve is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG. The vulnerability is due to the generation of security-sensitive secrets using math/rand seeded with predictable timestamps, which allows an attacker to recover the secret key, forge JWTs, and gain...

CVE-2026-41933

Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multiple paths lacking proper index directives in .htaccess files. Attackers can access directories such as admin asset path...

CVE-2026-41933 Vvveb < 1.0.8.3 Directory Listing Information Disclosure

Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by accessing multiple paths lacking proper index directives in .htaccess files. Attackers can access directories such as admin asset path...

CVE-2026-44547

creationtimestamp| type| source ---|---|--- 2026-05-13 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116564324244482665 2026-05-13 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mloypqjnid2d 2026-05-13 02:00:45+00:00| seen|...

CVE-2026-7437

creationtimestamp| type| source ---|---|--- 2026-05-12 16:33:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlo7piqk362l 2026-05-12 17:13:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mlobxbow3o2s...

CVE-2026-45214

creationtimestamp| type| source ---|---|--- 2026-05-12 11:59:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqfigyfr2n 2026-05-12 11:59:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnqgkuz7s2g...

CVE-2026-27662

creationtimestamp| type| source ---|---|--- 2026-05-12 11:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnn65y3oa2z 2026-05-12 11:38:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnpbgca5h2r 2026-05-14 10:00:00+00:00| seen|...

CVE-2026-44411

creationtimestamp| type| source ---|---|--- 2026-05-12 10:59:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnn2om35t2z 2026-05-12 11:35:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlnp3h7qgn2v 2026-05-14 10:00:00+00:00| seen|...

CVE-2026-41713

creationtimestamp| type| source ---|---|--- 2026-05-11 09:04:11+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-443 2026-05-11 12:05:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mllabzqe2i2x 2026-05-12 11:59:24+00:00| seen|...