CVE-2026-15206

CVE-2026-15206 affects the SMS Alert WordPress plugin (before 3.9.8). The vulnerability arises because the plugin does not bind the mobile verified session flag to the actually verified phone number. After an attacker verifies an OTP on their own number, the signup/login handler reads an attacker...

CVE-2026-15206

The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to the phone number that was actually verified: after an attacker verifies an OTP sent to their own phone, the signup/login handler reads a fresh, attacker-supplied phone number to select the account and...

CVE-2026-55825

creationtimestamp| type| source ---|---|--- 2026-08-01 00:15:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-55825...

CVE-2026-38711

creationtimestamp| type| source ---|---|--- 2026-08-01 00:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-38711...

CVE-2026-52856

creationtimestamp| type| source ---|---|--- 2026-07-31 19:51:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrxq3akldl23 2026-08-02 07:02:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms3fwwqe6w2e...

CVE-2026-58048

creationtimestamp| type| source ---|---|--- 2026-07-31 17:56:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxjnjuke42b 2026-07-31 18:00:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jdwwbzeerzdry 2026-08-01 09:22:36+00:00| seen|...

CVE-2026-51245

creationtimestamp| type| source ---|---|--- 2026-07-31 03:49:01+00:00| seen| https://gist.github.com/programmervuln/12500283acf6ad983a381750f485794a...

CVE-2026-51270

creationtimestamp| type| source ---|---|--- 2026-07-31 00:01:25+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrvnlus5te2e...

CVE-2026-66415

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva57i7jh2o 2026-07-30 20:22:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrvbe4xv6v2d...

SUSE CVE-2026-47120

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 1.4.0 to before version 2.0.8, a RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks no ownership check. This issue has been patched in version 2.0.8...

CVE-2026-51238

creationtimestamp| type| source ---|---|--- 2026-07-30 10:53:28+00:00| seen| https://gist.github.com/programmervuln/00a0ff0ca36d73e9b57a1f3c3f72cfa9 2026-08-03 14:14:17+00:00| seen| https://gist.github.com/programmervuln/04c10eaee3d6e7370dcaa75337073c4b...

CVE-2026-17782

creationtimestamp| type| source ---|---|--- 2026-07-30 04:51:21+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 09:52:50+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

CVE-2026-66051

creationtimestamp| type| source ---|---|--- 2026-07-29 20:15:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-66051...

CVE-2026-54082

creationtimestamp| type| source ---|---|--- 2026-07-29 20:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54082...

CVE-2026-54081

creationtimestamp| type| source ---|---|--- 2026-07-29 20:15:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54081...

CVE-2026-20316

creationtimestamp| type| source ---|---|--- 2026-07-29 19:35:50+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mrsoc3g26k2u 2026-07-29 20:00:01+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8dc30cfa-6d78-4c95-8f53-cf5195768d7e...

GHSA-JR45-8VMC-QM54

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:07+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2lvynu25 2026-08-04 12:31:53+00:00| seen| https://gist.github.com/alon710/dbd628dcf4d2ee2986aea22ad7d6f2b4...

CVE-2026-21655

creationtimestamp| type| source ---|---|--- 2026-07-29 14:30:31+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrs5a3ujze2r 2026-08-11 20:10:20+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgbpylkc2z 2026-08-13 08:49:15+00:00| seen|...

CVE-2026-56390

creationtimestamp| type| source ---|---|--- 2026-07-29 12:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56389...

CVE-2020-28248

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:02+00:00| seen| https://t.me/reverseame/655 2026-07-30 00:02:50+00:00| seen| https://t.me/reverseame/655 2026-08-03 14:00:04+00:00| published-proof-of-concept| https://t.me/reverseame/655 2026-08-04 00:00:37+00:00|...