cve-2026-59281 - MEDIUM - Spring Framework Cross-site Scripting via EscapedErrors

cve-2026-59281 - MEDIUM - Spring Framework Cross-site Scripting via EscapedErrors...

AlmaLinux 8 : mysql:8.4 (ALSA-2026:56936)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:56936 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

cve-2026-47892 - MEDIUM - Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints

cve-2026-47892 - MEDIUM - Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints...

CVE-2026-76928

creationtimestamp| type| source ---|---|--- 2026-08-19 23:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthwtmuvib2o 2026-08-20 00:02:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gucyun7kfxrze...

CVE-2026-55648

creationtimestamp| type| source ---|---|--- 2026-08-19 23:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthvq4p3uj25 2026-08-20 00:19:19+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxwcub4d2l 2026-08-22 13:20:03+00:00| seen|...

CGA-776P-PVR6-PJJQ

Bulletin has no description...

CGA-3CF3-XR72-QXP6

Bulletin has no description...

CGA-6582-XHGJ-6GGM

Bulletin has no description...

CVE-2026-55193

creationtimestamp| type| source ---|---|--- 2026-08-19 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthv67v2tf2p 2026-08-22 04:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtnf6uq42g25...

CGA-2FQ5-V9PX-8MV6

Bulletin has no description...

CGA-592R-RC5F-Q9FJ

Bulletin has no description...

CVE-2026-55191

creationtimestamp| type| source ---|---|--- 2026-08-19 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthumehjgp2t 2026-08-20 00:19:32+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxwp2rbi2h...

CVE-2026-76395

creationtimestamp| type| source ---|---|--- 2026-08-19 23:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtlnzlfl2l 2026-08-20 00:19:51+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxxar4cl2w 2026-08-22 17:07:07+00:00| seen|...

CVE-2026-76404

creationtimestamp| type| source ---|---|--- 2026-08-19 23:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjphemr2m 2026-08-20 00:10:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthxfqi6lq2t 2026-08-20 03:00:06+00:00| seen|...

ECHO-1FCB-1955-3C69 NULL pointer write in the wget applet's -T/--timeout handling (networking/wget.c): getopt32() is handed NULL as the -T storage only when busybox is built with CONFIG_WGET but WITHOUT CONFIG_FEATURE_WGET_TIMEOUT ("IF_NOT_FEATURE_WGET_TIMEOUT(NULL)"). Every busybox Echo ships is built from Debian's own configs, where that combination never occurs: debian/config/pkg/deb and debian/config/pkg/static (busybox, busybox-static, busybox-syslogd, udhcpc, udhcpd) set CONFIG_FEATURE_WGET_TIMEOUT=y, so -T is stored in G.timeout_seconds, and debian/config/pkg/udeb does not build wget at all. Verified on 1:1.38.0-3: a build from debian/config/pkg/deb and Debian's busybox and busybox-static binaries answer "wget -T 5" and "wget --timeout 5" normally, while the same tree with only FEATURE_WGET_TIMEOUT turned off segfaults on "wget -T 5". The cited "patch" 83a40bf is a commit in a third-party fork, not in upstream busybox, and bundles unrelated applet changes. Debian rates the CVE unimportant ("crash in CLI tool, no security impact").

Bulletin has no description...

CVE-2026-76850

creationtimestamp| type| source ---|---|--- 2026-08-19 22:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i27euqcjrumpx 2026-08-19 23:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjilr6g2r 2026-08-20 00:10:12+00:00| seen|...

CVE-2026-76878

creationtimestamp| type| source ---|---|--- 2026-08-19 22:54:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6fd6alp5tloqk...

CVE-2026-76589

creationtimestamp| type| source ---|---|--- 2026-08-19 22:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fyps7rs64drt 2026-08-19 23:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtjwdbfm2z 2026-08-20 04:30:26+00:00| seen|...

CVE-2026-76590

creationtimestamp| type| source ---|---|--- 2026-08-19 22:42:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eehqrjmoult7l 2026-08-19 23:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtlahsuv2u 2026-08-20 00:00:38+00:00| seen|...

CVE-2026-76832

creationtimestamp| type| source ---|---|--- 2026-08-19 22:36:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ao6zm6lzhma5h 2026-08-19 23:01:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthtlhaea32l...