CVE-2026-59886

creationtimestamp| type| source ---|---|--- 2026-07-22 17:06:11+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrasnz6yqp2o 2026-07-22 17:06:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mraso4k6za2m...

CVE-2026-50252

creationtimestamp| type| source ---|---|--- 2026-07-22 14:08:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mraiqwpuvy2a 2026-08-30 13:22:20+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mucidnjg5c2o...

CVE-2026-46582

creationtimestamp| type| source ---|---|--- 2026-07-22 13:57:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrai5iob722j...

CVE-2026-50248

creationtimestamp| type| source ---|---|--- 2026-07-22 13:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrai2d5azk2q...

CVE-2026-50045

creationtimestamp| type| source ---|---|--- 2026-07-22 13:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrahxd6giq2b...

CVE-2026-13186 AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is derived from user-controlled input, enabling attacker-controlled deserialization and remote code execution...

PT-2026-63557

Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.2.10 Description Applications using App Router built with Turbopack and a single entry in config.i18n.locales are susceptible to authentication bypass. Specifically, crafted requests can circumvent middleware...

PT-2026-63561

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 15.5.20 Next.js versions 16.0.0 through 16.2.10 Description Requests targeting applications using App Router with at least one Server Action can lead to excessive memory consumption when that Server Action...

PT-2026-63558

Name of the Vulnerable Software and Affected Versions Next.js versions 12.0.0 through 15.5.20 Next.js versions 16.0.0 through 16.2.10 Description Applications using App Router, Server Actions use server, or use cache endpoints may disclose these endpoints, bypassing authentication on the pages...

PT-2026-63556

Name of the Vulnerable Software and Affected Versions Next.js versions 13.0.0 through 15.5.20 Next.js versions 16.0.0 through 16.2.10 Description Crafted requests targeting applications using App Router with at least one Server Action can cause excessive CPU usage, which blocks the processing of...

CVE-2026-64829: Insufficient Session Expiration

Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode field in qa-include/app/users-edit.php...

CVE-2026-60291

creationtimestamp| type| source ---|---|--- 2026-07-21 23:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6ynr2kqk2y 2026-07-23 16:50:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 16:37:06+00:00| seen|...

CVE-2026-60289

creationtimestamp| type| source ---|---|--- 2026-07-21 23:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6yk76zks2j 2026-07-23 16:50:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-25 16:37:06+00:00| seen|...

CVE-2026-55082

creationtimestamp| type| source ---|---|--- 2026-07-21 23:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6x2wlzax2q...

CVE-2026-60204

creationtimestamp| type| source ---|---|--- 2026-07-21 23:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6w72shx722 2026-07-23 16:47:54+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-29 20:07:06+00:00| seen|...

CVE-2026-65315

creationtimestamp| type| source ---|---|--- 2026-07-21 23:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6vyq5ehk2f 2026-09-26 03:38:46+00:00| seen| https://gist.github.com/rafael-arkhe/069fccf27b9b82220745476f1c7d6b22...

CVE-2026-63764

creationtimestamp| type| source ---|---|--- 2026-07-21 21:08:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6pppwq5x2v 2026-07-21 22:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr6snqvcbe2j 2026-07-21 23:23:25+00:00| seen|...

CVE-2026-28314

creationtimestamp| type| source ---|---|--- 2026-07-21 16:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6amsva4r23 2026-07-26 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrkwayrphp26...

CVE-2026-16407

creationtimestamp| type| source ---|---|--- 2026-07-21 13:59:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5xrbvh322s 2026-07-22 04:47:50+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 19:30:05+00:00| seen|...

CVE-2026-47122 Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection

Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After performedStage1Installation = YES, new connections to the...