CVE-2026-13061

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

CVE-2026-13061 Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

CVE-2026-60799

creationtimestamp| type| source ---|---|--- 2026-07-22 11:14:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mra6z3whu22o 2026-07-22 11:14:30+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116963335733043048 2026-07-23 17:47:18+00:00| seen|...

PT-2026-63465

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user can access session metadata of other users via the $listSessions aggregation stage. This data, which includes active session identifiers,...

CVE-2026-8982

creationtimestamp| type| source ---|---|--- 2026-07-21 22:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6smnnedl2e 2026-07-21 22:42:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6uxxgmvf23...

CVE-2026-65057

creationtimestamp| type| source ---|---|--- 2026-07-21 21:58:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6sj4w4ol24 2026-07-21 22:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6snk32vq2f 2026-07-21 22:55:16+00:00| seen|...

CVE-2026-63800

creationtimestamp| type| source ---|---|--- 2026-07-21 18:20:13+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr6gdhfccq23 2026-07-21 18:20:16+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr6gdkrifk2u 2026-07-21 18:20:19+00:00| seen|...

CVE-2026-28317

creationtimestamp| type| source ---|---|--- 2026-07-21 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6aqfnokm2v 2026-07-21 17:02:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr6byq6dsr2o 2026-07-26 15:37:07+00:00| seen|...

CVE-2026-64608

creationtimestamp| type| source ---|---|--- 2026-07-21 15:16:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr643e6ng22o 2026-07-21 15:36:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr655ygjqd22 2026-07-21 17:06:49+00:00| seen|...

CVE-2026-63107

creationtimestamp| type| source ---|---|--- 2026-07-20 23:09:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr4g2l2kq52l 2026-07-20 23:09:55+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116954824349658240...

CVE-2026-44509

Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, previous bug fixes for symlink races in open calls missed races in other path based system calls like chmod and chown. For rsync daemons with "use chroot = no" this...

CVE-2026-44509

...

CVE-2026-64619

creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43hx6opo2q 2026-07-20 21:34:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4apjiiwy22...

CVE-2026-16242

creationtimestamp| type| source ---|---|--- 2026-07-20 08:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e 2026-07-20 08:31:04+00:00| seen| https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u 2026-07-20 09:25:32+00:00| seen|...

CVE-2026-13142

creationtimestamp| type| source ---|---|--- 2026-07-20 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116951130173651435 2026-07-20 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr2rkpgosv2t 2026-07-20 08:10:24+00:00| seen|...

CVE-2026-42566

creationtimestamp| type| source ---|---|--- 2026-07-20 01:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr23r6goaq2o 2026-07-20 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116949714689412114 2026-07-20 01:30:29+00:00| seen|...

CVE-2026-16228

creationtimestamp| type| source ---|---|--- 2026-07-19 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946529537967968 2026-07-19 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r 2026-07-19 12:39:59+00:00| seen|...

CVE-2026-16209

creationtimestamp| type| source ---|---|--- 2026-07-19 08:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqye452ogs2g 2026-07-19 08:30:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mqyegoqwk22f...

DEBIAN-CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...