CVE-2026-28849

creationtimestamp| type| source ---|---|--- 2026-07-28 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:39+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:02+00:00| seen|...

CVE-2026-20672

creationtimestamp| type| source ---|---|--- 2026-07-28 04:45:51+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:34+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:04+00:00| seen|...

CVE-2025-43325

creationtimestamp| type| source ---|---|--- 2026-07-28 04:45:41+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:27+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:07+00:00| seen|...

CVE-2026-17572

creationtimestamp| type| source ---|---|--- 2026-07-27 20:15:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17572...

BIT-CERT-MANAGER-2026-62290 cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates. From 1.18.0 until 1.19.6 and 1.20.3, Challenge resources under acme.cert-manager.io can be created directly by namespace...

pwnage24mtk — Updated!

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. Patched. CVE-2023-20696 CVE-2025-20730 There are some issues about architecture detect.Need to be fixed when I am free.Or anyone can make a pull request. This is a vibe-coded...

Fedora 43 : p11-kit (2026-566791181a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-566791181a advisory. - server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit CVE-2026-13757 - fixed confusing error...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: cluster-api-azure-controller, flux-notification-controller, k3s, kyverno-notation-aws, tetragon, kubernetes, flux-helm-controller, hubble-ui, cluster-api-helm-controller, cloud-provider-aws, kubernetes-csi-external-health-monitor, keda, pulumi-kubernetes-operator, zo...

CVE-2026-56391

creationtimestamp| type| source ---|---|--- 2026-07-24 08:15:04+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56391...

CVE-2026-13063

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:33+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13058

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:21+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13055

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:13+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13076

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:00+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13074

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:55+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-9737

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:53+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-13069

creationtimestamp| type| source ---|---|--- 2026-07-24 04:45:43+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

MiracleLinux 9 : openssl-3.5.5-4.el9_8.ML.1 (AXSA:2026-1339:14)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1339:14 advisory. openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing CVE-2026-7383 openssl: OpenSSL: Denial of Service due...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-csi-driver, kuberay-operator, mariadb-operator, cert-manager-webhook-pdns, percona-server-mongodb-operator, step-issuer, cert-manager-cmctl, aws-privateca-issuer...

Alibaba Cloud Linux 3 : 0221: podman (ALINUX3-SA-2026:0221)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0221 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33811: When using LookupCNAME wit...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, athenz-csi-driver, aws-privateca-issuer-fips, step-issuer, mariadb-operator-fips, cert-manager-webhook-pdns-fips, commercial-nginx-ingress, cert-manager-openshift-routes-fips, cert-manager-istio-csr, cert-manager-istio-csr-fips,...