CVE-2026-50248

creationtimestamp| type| source ---|---|--- 2026-07-22 13:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrai2d5azk2q...

CVE-2026-50045

creationtimestamp| type| source ---|---|--- 2026-07-22 13:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrahxd6giq2b...

PT-2026-63558

Impact In Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these endpoints are usually used. Server Action IDs can be disclosed to unauthenticated users via publicly served client artifacts for...

PT-2026-63561

Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime Workarounds If you cannot upgrade, ensure your hosting provider limits the request's body size. 5 MiB should be...

PT-2026-63556

Impact Crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU usage blocking processing of further requests in the same process. Workarounds No workaround exists besides upgrading. Applications using Pages Router or not using...

PT-2026-63557

Impact Crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/proxy based authentication. Workarounds If you cannot upgrade immediately, enforce authorization in the page's server-side data path instead...

CVE-2026-60291

creationtimestamp| type| source ---|---|--- 2026-07-21 23:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ynr2kqk2y 2026-07-23 16:50:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60289

creationtimestamp| type| source ---|---|--- 2026-07-21 23:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yk76zks2j 2026-07-23 16:50:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 16:37:06+00:00| seen|...

CVE-2026-55082

creationtimestamp| type| source ---|---|--- 2026-07-21 23:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6x2wlzax2q...

CVE-2026-60204

creationtimestamp| type| source ---|---|--- 2026-07-21 23:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6w72shx722 2026-07-23 16:47:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-65315

creationtimestamp| type| source ---|---|--- 2026-07-21 23:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vyq5ehk2f...

CVE-2026-63764

creationtimestamp| type| source ---|---|--- 2026-07-21 21:08:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6pppwq5x2v 2026-07-21 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6snqvcbe2j 2026-07-21 23:23:25+00:00| seen|...

CVE-2026-28314

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amsva4r23 2026-07-26 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkwayrphp26...

CVE-2026-16407

creationtimestamp| type| source ---|---|--- 2026-07-21 13:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xrbvh322s 2026-07-22 04:47:50+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 19:30:05+00:00| seen|...

CVE-2026-1617

creationtimestamp| type| source ---|---|--- 2026-07-21 11:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr5puffh442v 2026-07-21 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr5r4jbqma2l 2026-07-21 13:21:30+00:00| seen|...

CVE-2026-14185

creationtimestamp| type| source ---|---|--- 2026-07-21 10:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kjwyjep2e...

CVE-2026-53594

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...

CVE-2026-53594

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...

CVE-2026-53594 FreeScout has Arbitrary File Read in App Logs Viewer via Forged Encrypted Path

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. FreeScout's Manage - Logs - App Logs feature uses the bundled rap2hpoutre/laravel-log-viewer override to decrypt a user-supplied file identifier and then pass the resolved path to Laravel's download response. Prior...

CVE-2026-53594

Summary: CVE-2026-53594 affects FreeScout (PHP/Laravel) where the App Logs viewer can read arbitrary server files due to a flawed path resolution in the rap2hpoutre/laravel-log-viewer override. Before v1.8.224, the code accepts any existing absolute path prior to applying the storage/logs restric...