CVE-2026-62675

creationtimestamp| type| source ---|---|--- 2026-08-21 21:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnsu3qct2m...

CVE-2026-27490

creationtimestamp| type| source ---|---|--- 2026-08-21 21:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnr5f7az2l...

CVE-2026-63462

creationtimestamp| type| source ---|---|--- 2026-08-21 20:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmkfxyxt722 2026-08-22 12:31:57+00:00| seen| https://gist.github.com/alon710/31e18879d387aa16512f599cadd2f7a1...

CVE-2026-75932

creationtimestamp| type| source ---|---|--- 2026-08-21 17:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmaesgokc27 2026-08-21 18:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtme4rxn3l24 2026-08-21 18:14:38+00:00| seen|...

CVE-2026-59279

creationtimestamp| type| source ---|---|--- 2026-08-21 14:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtlwcjfsbk2t...

CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...

GO-2026-6170 WITHDRAWN: Malformed backend frame length causes panic in github.com/lib/pq

This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". github.com/lib/pq trusts the unsigned 32-bit length in every PostgreSQL backend frame and subtracts four without first checking that the wire length is at least four. A backend frame whose...

CVE-2026-75854

ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete data. Attackers can connect to the Redis port and execute arbitrary commands against any database on the server without...

CVE-2026-75852

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

CVE-2026-75854 ArcadeDB Redis Wire-Protocol Plugin Missing Authentication

ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete data. Attackers can connect to the Redis port and execute arbitrary commands against any database on the server without...

CVE-2026-75853

The com.arcadedb:arcadedb-gremlin plugin (≤26.7.3) enforces SASL PLAIN authentication but skips authorization: it never calls canAccessToDatabase or binds the principal, so any valid credential can read, write, and drop data in any database via a traversal-source alias, bypassing all per-type/rea...

EUVD-2026-60614

ArcadeDB's Gremlin wire-protocol plugin com.arcadedb:arcadedb-gremlin in versions = 26.7.3 enforces authentication SASL PLAIN but performs no authorization: it never checks database access permissions canAccessToDatabase and never binds the authenticated principal into the engine. As a result, an...

CVE-2026-75852

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials. CVSS 9.8 (Critical)...

EUVD-2026-60613

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

CVE-2026-75852 ArcadeDB MongoDB wire protocol authentication bypass cross-database

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

CVE-2026-75852 ArcadeDB MongoDB wire protocol authentication bypass cross-database

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

Security Bulletin: Multiple vulnerabilities in third-party Netty libraries affect the IBM Informix Wire Listener.

Summary Multiple vulnerabilities in Netty affect the IBM Informix Wire Listener. IBM Informix has addressed these vulnerabilities by updating the Netty components to their latest versions. Vulnerability Details CVEID:CVE-2026-33871 DESCRIPTION: Netty is an asynchronous, event-driven network...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-mysql, kubernetes-dashboard-web, cluster-api-provider-vsphere, delve, helm-operator, kubernetes-dashboard-auth, dive, ip-masq-agent, kyverno-notation-aws, pluto, helm-set-status, nri-memcached, cluster-api-azure-controller, falcoctl, nri-redis,...

IBM Informix Dynamic Server 12.10.x / 14.10.x < 14.10.xC13W13 / 15.0.x < 15.0.1.13 RCE (7282827)

The version of IBM Informix Dynamic Server installed on the remote host is 12.10.x, or 14.10.x prior to 14.10.xC13W13, or 15.0.x prior to 15.0.1.13. It is, therefore, affected by a remote code execution vulnerability in the IBM Informix Wire Listener as referenced in the 7282827 vendor advisory. ...

CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...