MINI-CFR3-HHH4-9HW2

Bulletin has no description...

MINI-XXH3-GCC9-MV7G

Bulletin has no description...

MINI-27G5-2PW4-J2CQ

Bulletin has no description...

MINI-RG2J-C55H-6Q69

Bulletin has no description...

MINI-FXJ2-6453-CR5X

Bulletin has no description...

MINI-5QXQ-MW4F-JRJX

Bulletin has no description...

MINI-7RC6-238M-GFR8

Bulletin has no description...

CVE-2026-76242

creationtimestamp| type| source ---|---|--- 2026-08-19 16:09:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mth4k2xyu52p 2026-08-19 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mth6b55tau2e...

MINI-6WG5-9CM2-QP42

Bulletin has no description...

CVE-2026-71961

creationtimestamp| type| source ---|---|--- 2026-08-19 16:01:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mth44i6w3d2r...

CVE-2026-64850 Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

Grav is a file-based Web platform. Prior to 2.0.7, Grav Blueprint::dynamicData in system/src/Grav/Common/Data/Blueprint.php sends an editor-controlled Class::method provider and arguments to calluserfuncarray without rejecting dangerous callback parameters. An account with admin.pages or...

MINI-9HXC-R5W9-JR2J

Bulletin has no description...

MINI-4678-XH8V-WWXH

Bulletin has no description...

CVE-2026-63408

In Grav API Plugin before 1.0.0-rc.16, JwtAuthenticator::extractBearerToken() accepts a JWT via the ?token= URL query parameter on all /api/v1 routes, exposing valid tokens in Apache/proxy/CDN logs, browser history, and Referer headers. An attacker with access to those records can reuse the token...

MINI-32FH-JR8R-XV9F

Bulletin has no description...

CVE-2026-62673 Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems

Grav is a file-based Web platform. Prior to 2.0.4, the Grav .htaccess and webserver-configs/htaccess.txt security rules omit the Apache NC flag and therefore compare sensitive directory and file-extension patterns case-sensitively. On a case-insensitive filesystem, an unauthenticated requester ca...

MINI-4G62-2847-HF9M

Bulletin has no description...

ROOT-OS-UBUNTU-2404-CVE-2026-45894 CVE-2026-45894 in linux - Patched by Root

Root has patched CVE-2026-45894 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-38714 CVE-2025-38714 in linux - Patched by Root

Root has patched CVE-2025-38714 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-23439 CVE-2026-23439 in linux - Patched by Root

Root has patched CVE-2026-23439 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...