PT-2026-53673

SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...

CVE-2026-57955: Improper Neutralization of Special Elements used in an SQL Command

SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...

PT-2026-53674

Name of the Vulnerable Software and Affected Versions SigNoz versions prior to 0.130.2 Description Broken access control allows authenticated users to access alert rules of other organizations. This occurs because the alert rule store predicates fail to filter by organization ID, resulting in a...

CVE-2026-52782

creationtimestamp| type| source ---|---|--- 2026-06-26 23:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpa54vks5o2c 2026-06-28 20:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mper7mwwdo2x 2026-06-29 14:42:42+00:00| seen|...

CVE-2026-57922

creationtimestamp| type| source ---|---|--- 2026-06-26 14:03:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp74dkh5tj2c...

CVE-2026-55667

creationtimestamp| type| source ---|---|--- 2026-06-26 14:01:48+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mp74aezucd2b 2026-07-20 22:37:35+00:00| published-proof-of-concept| https://github.com/filebrowser/filebrowser/security/advisories/GHSA-fmm7-x4gx-8jhr...

CVE-2026-46331

creationtimestamp| type| source ---|---|--- 2026-06-26 13:26:58+00:00| seen| https://bsky.app/profile/infosecbriefly.bsky.social/post/3mp72c3a6uv2w 2026-06-26 13:35:18+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mp72qywylh2d 2026-06-26 13:38:12+00:00| seen|...

CVE-2017-7321

creationtimestamp| type| source ---|---|--- 2026-06-26 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp6u5nezsu2k...

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

EUVD-2025-210348

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

CVE-2026-13281

creationtimestamp| type| source ---|---|--- 2026-06-26 09:45:05+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1937 2026-06-26 14:40:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp76fcsqgb2j 2026-06-28 22:30:18+00:00| seen|...

BELL-CVE-2026-53035

Bulletin has no description...

CVE-2017-14507

creationtimestamp| type| source ---|---|--- 2026-06-26 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp6bpkzf2u2y...

CVE-2025-7958: Improper Control of Generation of Code

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

PT-2026-52689

Name of the Vulnerable Software and Affected Versions Trellix Network Security CM affected versions not specified Trellix Network Security NX affected versions not specified Description A code injection issue allows a locally authenticated admin user to execute arbitrary code via the web interfac...

GO-2026-5645 Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks (no ownership check) in github.com/nezhahq/nezha

Nezha Monitoring: RoleMember can fire other users' cron tasks via AlertRule.FailTriggerTasks no ownership check in github.com/nezhahq/nezha...

CVE-2025-52465

creationtimestamp| type| source ---|---|--- 2026-06-25 15:43:14+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mp4rgsnbo32d 2026-06-25 19:09:33+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mp54xqzyzc2i 2026-07-14 01:00:05+00:00| seen|...