CVE-2026-22620

creationtimestamp| type| source ---|---|--- 2026-07-30 11:52:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/d557ukhddnxri 2026-07-30 14:30:38+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrunp7jxzj2o...

CVE-2026-44615

creationtimestamp| type| source ---|---|--- 2026-07-30 11:29:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/boip2imn6yi5k...

CVE-2026-16969

creationtimestamp| type| source ---|---|--- 2026-07-30 11:19:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrud2b6bws2m 2026-07-30 14:07:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp...

GHSA-WCHH-9X6H-7F6P

creationtimestamp| type| source ---|---|--- 2026-07-30 08:32:07+00:00| seen| https://gist.github.com/alon710/d12f2b2b8a8eb557d027885a6580665a...

CVE-2026-18353

PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...

CVE-2026-44101

creationtimestamp| type| source ---|---|--- 2026-07-30 07:58:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtxrdmjwf2e...

CVE-2024-40842

creationtimestamp| type| source ---|---|--- 2026-07-30 07:43:34+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mrtwxdov3525...

CVE-2026-64635

CVE-2026-64635 affects Veeam Service Provider Console. An improper handling of the returnUrl parameter in Forgot Password enables an unauthenticated attacker to hijack the password-reset link domain, causing the reset code to be sent to an attacker-controlled host and potentially take over the us...

CVE-2026-1360

creationtimestamp| type| source ---|---|--- 2026-07-30 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtr7gmx3j2c...

CVE-2026-51297

creationtimestamp| type| source ---|---|--- 2026-07-30 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrtpv7h7o42c...

CVE-2026-17782

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17782

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17941

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17849

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via malicious network traffic. Chromium security severity: Medium...

CVE-2026-45293

creationtimestamp| type| source ---|---|--- 2026-07-30 01:01:13+00:00| seen| https://bsky.app/profile/kitafox.bsky.social/post/3mrtahvnsqn2z 2026-08-18 08:00:03+00:00| seen| Telegram/4XT-JwykIct3xZxWRRH2CZISSgTtNZvfMVYRVt8P8-zCvtWNA 2026-08-18 08:00:03+00:00| seen|...

EUVD-2026-50743

Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66459

Name of the Vulnerable Software and Affected Versions koku-metrics-operator affected versions not specified Description A flaw in the CostManagementMetricsConfig custom resource allows a user with edit permissions to specify an arbitrary upload URL. When the authentication.type is set to token th...

PT-2026-66438

PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...

PT-2026-66529

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is url safe in src/helpers.ts strips the @ userinfo delimiter with remove at symbol in string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-...

PT-2026-66493

Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The Application Layer Policy, which uses Dikastes to enforce HTTP rules, does not perform URL path normalization. This allows HTTP requests containing repeated slashes, encoded slashes, or...