CVE-2026-13716

creationtimestamp| type| source ---|---|--- 2026-08-11 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117075701139213523 2026-08-11 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mss3szlkbn2n...

CVE-2026-44763

creationtimestamp| type| source ---|---|--- 2026-08-11 03:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msrmrdxyuk25 2026-08-13 08:48:49+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-44758

creationtimestamp| type| source ---|---|--- 2026-08-11 01:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msrhducgo52v 2026-08-11 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117074285629016309 2026-08-11 01:30:32+00:00| seen|...

CVE-2025-13293

creationtimestamp| type| source ---|---|--- 2026-08-10 20:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqwsk5rud2y...

CVE-2026-49008

creationtimestamp| type| source ---|---|--- 2026-08-10 17:59:21+00:00| seen| https://gist.github.com/digitalgangst4r/e56a1a1494c1ac4d81a87fddc57a712a...

CVE-2026-66738

creationtimestamp| type| source ---|---|--- 2026-08-10 16:15:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/53mnn22alhix4 2026-08-10 17:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msql7pnmsx27 2026-08-10 23:01:49+00:00| seen|...

CVE-2026-72751

creationtimestamp| type| source ---|---|--- 2026-08-10 15:03:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4sfasrwwnf2px...

CVE-2026-71959

creationtimestamp| type| source ---|---|--- 2026-08-10 15:01:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2fohbmglkugmk...

CVE-2026-4793

creationtimestamp| type| source ---|---|--- 2026-08-10 13:20:33+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6w2kqjg2n 2026-08-13 08:45:48+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0988...

CVE-2026-59899

creationtimestamp| type| source ---|---|--- 2026-08-10 13:20:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o 2026-08-13 08:46:23+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991...

CVE-2026-66699

creationtimestamp| type| source ---|---|--- 2026-08-10 13:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msq6o746ds2i 2026-08-11 09:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mssbpvsqdj2l...

CVE-2023-54385

Erroneously reserved under wrong year by automation defect; never assigned...

CVE-2026-66412

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. Attackers can enumerate integer milesto...

CVE-2026-66412

Leantime vulnerability CVE-2026-66412 affects all versions prior to 3.6.2. A broken access control flaw in the tickets.getMilestone JSON-RPC endpoint allows authenticated users to read milestone data from projects they aren’t assigned to by supplying arbitrary integer milestone IDs. Attackers can...

EUVD-2026-49063

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. Attackers can enumerate integer milesto...

CVE-2026-66412 Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. Attackers can enumerate integer milesto...

CVE-2026-66412 Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. Attackers can enumerate integer milesto...

PT-2026-64852

Name of the Vulnerable Software and Affected Versions Leantime versions prior to 3.6.3 Description Authenticated users can access milestone data from projects to which they are not assigned. This is possible by providing arbitrary integer milestone IDs to the 'tickets.getMilestone' JSON-RPC...

CVE-UNASSIGNED-2022-HIKVISION-MANAGEMENT-PLATFORM-RCE-01

creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:36+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98553c66-c0b0-453f-8325-37efb35aaa5b...

CVE-UNASSIGNED-2022-RUIJIE-RCE-01

creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:32+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bc64bc47-5865-48a1-ab28-b41f86f52766...