CVE-2026-74361

creationtimestamp| type| source ---|---|--- 2026-08-17 14:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbx6lw5ym2y...

MINI-5C48-F38R-M9PX

Bulletin has no description...

MINI-JQ7P-FJWG-CWV3

Bulletin has no description...

MINI-VP8V-8G2J-3PJM

Bulletin has no description...

MINI-PHPC-8WC3-JHMX

Bulletin has no description...

MINI-63MX-FFXC-2W68

Bulletin has no description...

MINI-XF25-2926-3C7J

Bulletin has no description...

MINI-GXCW-2F9H-Q89X

Bulletin has no description...

CVE-2026-19821

creationtimestamp| type| source ---|---|--- 2026-08-14 13:29:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt2bbfjm642h...

CVE-2026-67990

creationtimestamp| type| source ---|---|--- 2026-08-13 04:36:15+00:00| seen| https://gist.github.com/Zykis1024/cec690012eecac53f408e78d2b569f06...

CVE-2026-73405 Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup

An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events SSE streams through the /pubsub/subscribe/ endpoint. The tokenrequired decorator used by the Pub/Sub interface authenticated requests solely by matching the...

CVE-2026-73405 Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup

An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events SSE streams through the /pubsub/subscribe/ endpoint. The tokenrequired decorator used by the Pub/Sub interface authenticated requests solely by matching the...

CVE-2026-73405

CVE-2026-73405 describes an authorization bypass in Vulnerability-Lookup where the Pub/Sub SSE interface allowed unconfirmed/inactive accounts to subscribe to /pubsub/subscribe/ due to token_required only validating the API key, not is_active/is_confirmed. This created a boundary mismatch with th...

BELL-CVE-2026-68118

Bulletin has no description...

CVE-2026-62899

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2026-72872

creationtimestamp| type| source ---|---|--- 2026-08-10 19:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtryv6kf2u 2026-08-10 20:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqvc435em2t 2026-08-11 17:11:40+00:00| seen|...

CVE-2026-72868

creationtimestamp| type| source ---|---|--- 2026-08-10 19:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtog6fbv25...

CVE-2026-68083

creationtimestamp| type| source ---|---|--- 2026-08-10 12:33:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117071228818236939...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: perform a shared-unconfirmed check before segmentation. Ulrich reports a regression with nfqueue: If an application does not set the ‘FGSO’ capability flag, and a gso packet with an unconfirmed nfconn...

Linux Distros Unpatched Vulnerability : CVE-2026-53394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner...