CVE-2026-9602

Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...

CVE-2026-62233

creationtimestamp| type| source ---|---|--- 2026-07-17 02:53:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqoxkcre2u...

CVE-2026-62319

creationtimestamp| type| source ---|---|--- 2026-07-17 02:01:12+00:00| seen| https://bsky.app/profile/slackers.it/post/3mqsnr6vyls2w...

PT-2026-60894

Name of the Vulnerable Software and Affected Versions plone.app.textfield versions prior to 2.0.2 plone.app.textfield versions prior to 3.0.2 plone.app.textfield versions prior to 4.0.1 Description A stored Cross-Site Scripting XSS issue affects RichText fields. The RichTextValue.output function...

PT-2026-60742

A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. Affected by this issue is the function CipAppPath::deserialize symbolic of the file source/src/cip/cipepath.cc. Such manipulation leads to out-of-bounds read. The attack may be launched remotely...

CVE-2026-57077

creationtimestamp| type| source ---|---|--- 2026-07-16 23:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgleymol2c 2026-07-17 01:24:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqsloopgpk2p...

CVE-2026-11740

creationtimestamp| type| source ---|---|--- 2026-07-16 23:40:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsfuuixjk2i...

CVE-2026-46336

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. From 0.96.0 until 0.140.0, authenticated users can rename uploaded files with path traversal sequences because app/models/modelfile.rb uses the user-controlled...

CVE-2026-13104

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

EUVD-2026-44977

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-13104

Technical details for CVE-2026-13104 are not publicly available in the provided documents. Monitor for updates from Lenovo and security advisories; current entries only note a local authenticated arbitrary-code risk with elevated privileges.

CVE-2026-13103

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...

CVE-2026-13103

Lenovo App Store (Chinese market) contains a path traversal vulnerability allowing a local authenticated user to execute arbitrary code. The issue affects the package/component handling file paths, with impact on confidentiality, integrity, and availability reported as high. CVSS: from the report...

EUVD-2026-44976

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...

CVE-2026-9046

CVE-2026-9046 describes an insecure-permissions issue affecting Windows deployments of Legion Zone and Lenovo App Store (Chinese market). When installed on a non-system partition, a local user could potentially execute arbitrary code due to insufficient access controls. The vulnerability is class...

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

EUVD-2026-44975

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

CVE-2026-14266

creationtimestamp| type| source ---|---|--- 2026-07-16 16:33:36+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqro25h4we2v 2026-07-17 05:20:54+00:00| seen| https://bsky.app/profile/thecybersecguru.com/post/3mqsywb7tak2d 2026-07-17 05:39:01+00:00| seen|...

CVE-2026-14890

creationtimestamp| type| source ---|---|--- 2026-07-16 15:44:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrlcw3ngt2i 2026-07-16 18:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvrtd76h2w 2026-07-23 12:59:29+00:00| seen|...

CVE-2026-63305

creationtimestamp| type| source ---|---|--- 2026-07-16 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116929896586145034 2026-07-16 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqrdssbvep2z 2026-07-16 13:44:04+00:00| seen|...