CVE-2026-54149 MaxKB MCP tool import validation bypass allows post-authentication remote code execution

MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/serializers/tool.py and MCP referencing mode in apps/application/chatpipeline/step/chatstep/impl/basechatstep.py do not consistently validate MCP transport type, allowing an...

CVE-2026-60086

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are...

MINI-GRP8-2Q2P-VV64

Bulletin has no description...

MINI-VM72-5CF2-7QGR

Bulletin has no description...

CVE-2025-45422

creationtimestamp| type| source ---|---|--- 2026-07-10 13:32:41+00:00| seen| https://infosec.exchange/users/obivan/statuses/116895931383000599 2026-07-10 13:35:59+00:00| seen| https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mqcb5c7v52t2 2026-07-16 19:00:26+00:00| seen|...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provider-tls fixes the following issue...

SUSE-SU-2026:2850-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provider-tls

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provider-tls fixes the following issue -...

CVE-2026-11990

creationtimestamp| type| source ---|---|--- 2026-07-10 12:32:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc5r4f2p52z 2026-07-10 13:23:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcamqmmvf22 2026-07-11 00:44:17+00:00| seen|...

CVE-2026-56690

creationtimestamp| type| source ---|---|--- 2026-07-10 12:32:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqc5qu5luq2o 2026-07-10 12:53:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc6wpo2tm2i 2026-07-10 16:49:16+00:00| seen|...

CVE-2026-41878

creationtimestamp| type| source ---|---|--- 2026-07-10 12:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc5aifyfw2t 2026-07-10 13:21:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcajnnbms2d 2026-07-10 14:21:33+00:00| seen|...

CVE-2026-41876

creationtimestamp| type| source ---|---|--- 2026-07-10 12:15:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4tshgay2k 2026-07-10 13:25:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcaps5qtr2c 2026-07-10 14:20:56+00:00| seen|...

CVE-2026-13010

creationtimestamp| type| source ---|---|--- 2026-07-10 12:12:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4oghyvb2x 2026-07-10 13:19:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcafinug52i 2026-07-10 21:53:44+00:00| seen|...

CVE-2026-13710

creationtimestamp| type| source ---|---|--- 2026-07-10 12:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4f2pvge2x 2026-07-10 13:20:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcagly5kb2e 2026-07-10 14:11:39+00:00| seen|...

CVE-2026-12918

creationtimestamp| type| source ---|---|--- 2026-07-10 12:05:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc4awde3k2x 2026-07-10 13:22:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcakr32w62a...

CVE-2026-6440

creationtimestamp| type| source ---|---|--- 2026-07-10 11:55:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3pxzoud2e 2026-07-10 12:11:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4m2khqd27 2026-07-10 21:17:59+00:00| seen|...

CVE-2026-53363 xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: preserve shared-frag marker in iptfsconsumefrags iptfsconsumefrags transfers paged fragments from one socket buffer to another but fails to propagate the SKBFLSHAREDFRAG flag. This is the same class of bug that was...

CVE-2026-1946

creationtimestamp| type| source ---|---|--- 2026-07-10 11:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc3kha2x42k 2026-07-10 12:13:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqc4purzdp2c 2026-07-10 21:14:43+00:00| seen|...

CVE-2026-21049

creationtimestamp| type| source ---|---|--- 2026-07-10 08:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbqdrqv5w2i 2026-07-10 09:37:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtywpqfv2z 2026-07-10 12:46:57+00:00| seen|...

CVE-2026-21043

creationtimestamp| type| source ---|---|--- 2026-07-10 08:17:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqbpjynmsx2t 2026-07-10 09:37:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbtyglqpd2e...

CVE-2026-40007

Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB. When pipeairgapreceiverenabled=true, the IoTDB AirGap receiver's readLength method calls itself recursively each time it recognises the E-language prefix in socket data, with no depth limit. An unauthenticate...