Linux Distros Unpatched Vulnerability : CVE-2026-72387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Fix potential invalid pointer deref in groupprocesstileroom If heaps is an ERRPTR, panthorheappoolput will deref an invalid pointer. Make sure we s...

Linux Distros Unpatched Vulnerability : CVE-2026-75002

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privile...

Linux Distros Unpatched Vulnerability : CVE-2026-74259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: remove all cifs files before kill super Cifs files may be put into fileinfoputwq during umounting cifs. After umount done, cifsFileInfoputfinal is called,...

CVE-2026-74234

creationtimestamp| type| source ---|---|--- 2026-08-17 20:51:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtclemsxsi2t 2026-08-17 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtclvcn4ep2r 2026-08-18 14:02:22+00:00| seen|...

MINI-CX5G-QF7F-W9H6

Bulletin has no description...

MINI-773X-7HFG-M6X9

Bulletin has no description...

MINI-CPJ6-238R-672C

Bulletin has no description...

CVE-2026-74238

creationtimestamp| type| source ---|---|--- 2026-08-17 20:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtcilctdkz2b 2026-08-17 20:42:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dvtsf5aqf67o4...

MINI-45R5-F2MW-JVF5

Bulletin has no description...

MINI-CH28-JXFQ-4V8X

Bulletin has no description...

MINI-H5QV-73XP-48R6

Bulletin has no description...

CVE-2026-68518

creationtimestamp| type| source ---|---|--- 2026-08-17 17:46:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/b25kju3vqmpku 2026-08-17 18:02:50+00:00| seen| https://gist.github.com/alon710/890ba60aaa0a307f816165987f5ce246...

CVE-2026-73488

creationtimestamp| type| source ---|---|--- 2026-08-17 16:45:25+00:00| seen| https://www.acn.gov.it/portale/w/flowise-disponibili-poc-per-lo-sfruttamento-di-nuove-vulnerabilita...

CVE-2025-27770

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...

CVE-2025-27772 Uptrain vulnerable to remote code execution via `/new_run` endpoint

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...

CVE-2025-27772 Uptrain vulnerable to remote code execution via `/new_run` endpoint

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...

EUVD-2025-210736

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...

CVE-2025-27771

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...

CVE-2026-74945

creationtimestamp| type| source ---|---|--- 2026-08-17 15:43:53+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtc26sf6cu2k 2026-08-18 01:00:04+00:00| published-proof-of-concept| Telegram/idIOBRrg4VzKcTwjdY2a29HXXP5ypVWeuPQHuHGKT56HHBs 2026-08-19 00:00:27+00:00|...

CVE-2025-27770 UpTrain vulnerable to Remote code execution at `/create_project`

UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...