MINI-8QV8-HGG3-845J

Bulletin has no description...

CVE-2026-59548

creationtimestamp| type| source ---|---|--- 2026-08-14 03:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msz6yvxka52j...

Finding Vulnerabilities Via LLM-Augmented Semantics-Aware Type-Checking

Vulnerability detection via static analysis traditionally relies on security experts encoding insecure coding patterns into algorithmic rules. However, this approach often focuses on syntactic patterns and overlooks deeper semantic information in the code, such as the meanings of variable and...

Trust without Boundaries: An Architectural Analysis of Satellite Flight Software

As spacecraft become more software-driven and interconnected, onboard flight software is an increasingly important security boundary. Popular flight software architectures often treat onboard components as trusted peers, simplifying integration while limiting internal isolation and access control...

Uncontrolled Recursion

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Uncontrolled Recursion via the custom analysis definition. An attacker can exhaust the thread stack and terminate the affected nod...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the validation capability of the Observability log analysis feature. An...

speakeasy v2.0.0b6

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

CVE-2026-69108

creationtimestamp| type| source ---|---|--- 2026-08-13 20:25:38+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3msyi2vxzpj22 2026-09-19 12:00:05+00:00| seen| https://t.me/icscert/1438 2026-09-20 00:00:10+00:00| seen| https://t.me/icscert/1438...

CVE-2026-72638

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

dalfox v3.2.1

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy. Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickl...

MINI-GRJ7-P3HH-QV6R

Bulletin has no description...

MINI-2GCG-J3RF-FPWF

Bulletin has no description...

CVE-2026-72638 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

CVE-2026-72638

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

CVE-2026-72667 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...

CVE-2026-72667

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...

CVE-2026-72667 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...

CVE-2026-72667

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. A specially crafted request submitted by an authenticated user with minimal privileges to a validation capability of the Observability log analysis feature...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.4) +4 more potentially affected by CVE-2026-72678 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.4)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.2, =9.4.4 Source cves: CVE-2026-72678 Source advisory: MEND:CVE-2026-72678...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.3) +4 more potentially affected by CVE-2026-72683 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.3)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-72683 Source advisory: MEND:CVE-2026-72683...