58554 matches found
CVE-2026-12691
creationtimestamp| type| source ---|---|--- 2026-07-17 19:29:20+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mquidevwe72g 2026-07-19 09:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyg4jrq442l...
CVE-2026-63101
creationtimestamp| type| source ---|---|--- 2026-07-17 19:23:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquhyemnbm2s 2026-07-19 07:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqy7ggzcb72m...
CVE-2026-9135
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow versions up to 1.9.2 commit 94981c443d4918517b9e8163d70fc598dc33a32d contain a code injection vulnerability in the Policies component's ToolGuard integration that bypasses the allowcustomcomponents=false security control. The vulnerability exists...
CVE-2026-51082
creationtimestamp| type| source ---|---|--- 2026-07-17 18:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquegvziv52i...
CVE-2026-9202
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEWUSERISACTIVE=true documented deployment option, newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need...
CVE-2026-48008
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an integration with admin: true through the Sync API POST /api/action/sync; the regular integration endpoint POST...
CVE-2026-51081
creationtimestamp| type| source ---|---|--- 2026-07-17 18:08:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudskgx3r24...
CVE-2026-16072
creationtimestamp| type| source ---|---|--- 2026-07-17 18:05:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqudn6gv5x2s...
CVE-2026-14871
creationtimestamp| type| source ---|---|--- 2026-07-17 17:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqud7ma5eq2g...
CVE-2026-48010 Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, UserController::upsertUser in src/Core/Framework/Api/Controller/UserController.php writes raw user data in SYSTEMSCOPE without filtering the admin field, so a non-admin API user with user:create or user:update ACL permission...
CVE-2026-48008 Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an integration with admin: true through the Sync API POST /api/action/sync; the regular integration endpoint POST...
EUVD-2026-45237
Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, a non-admin API user with integration:create ACL privilege can escalate to full administrator by creating an integration with admin: true through the Sync API POST /api/action/sync; the regular integration endpoint POST...
EUVD-2026-45235
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited user accounts on any Langflow instance; when NEWUSERISACTIVE=true documented deployment option, newly created accounts are immediately active and can authenticate to reach RCE endpoints, bypassing the need...
CVE-2026-8297
creationtimestamp| type| source ---|---|--- 2026-07-17 17:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquav5hp4i2y 2026-07-17 18:58:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqugmuo42o2e 2026-07-19 08:00:51+00:00| seen|...
CVE-2026-51080
creationtimestamp| type| source ---|---|--- 2026-07-17 17:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mquav44jac2z 2026-07-17 17:46:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquclsxilq2x 2026-07-19 11:00:30+00:00| seen|...
CVE-2026-9537
creationtimestamp| type| source ---|---|--- 2026-07-17 16:14:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqu5gsgzgx2n...
CVE-2026-38753
creationtimestamp| type| source ---|---|--- 2026-07-17 16:03:14+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqu4stvt3e2e...
CVE-2026-16008
creationtimestamp| type| source ---|---|--- 2026-07-17 14:50:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqtyr7zbnw2q...