CVE-2026-54052

creationtimestamp| type| source ---|---|--- 2026-07-14 22:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7siy2dj2q 2026-07-15 22:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqppubmqtj2w 2026-07-16 00:34:33+00:00| seen|...

GHSA-7RX3-5WX3-5V76

creationtimestamp| type| source ---|---|--- 2026-07-14 20:42:32+00:00| seen| https://gist.github.com/alon710/e9ace864fd0fc758277cc4aa4cece6b7 2026-07-14 20:43:17+00:00| seen| https://gist.github.com/alon710/69a35e6d85f7f0c43de5276d0ac08d9d...

nebula-mesh: Web UI host creation ignores configured enrollment token TTL and mints 24-hour bearer enrollment tokens

Summary The nebula-mgmt Web UI host-creation path ignores both the server-wide enrollmenttokenttl security setting and per-network networkconfig.enrollmenttokenttl overrides. API host creation and token-regeneration paths use the configured TTL resolver, but POST /ui/hosts hardcodes now.Add24...

CVE-2026-5040

creationtimestamp| type| source ---|---|--- 2026-07-14 20:05:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmyxth4og27...

CVE-2026-15701

creationtimestamp| type| source ---|---|--- 2026-07-14 20:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmyuqumh72z...

GHSA-VVP9-H8P2-XWFC

creationtimestamp| type| source ---|---|--- 2026-07-14 19:42:05+00:00| seen| https://gist.github.com/alon710/553eb2089447345d30a93b1881dc2ee5...

GHSA-G7MM-9VX7-JM7H

creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...

CVE-2026-50141

creationtimestamp| type| source ---|---|--- 2026-07-14 19:11:47+00:00| seen| https://gist.github.com/alon710/97fd87eaf3ecb37ec75f6abd3050d94a...

CVE-2026-50399

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:52+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:04:02+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:32+00:00| seen|...

CVE-2026-50405

creationtimestamp| type| source ---|---|--- 2026-07-14 19:01:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 22:03:54+00:00| seen| https://www.thezdi.com/blog/2026/7/14/the-july-2026-security-update-review 2026-07-15 01:01:12+00:00| seen|...

GHSA-P433-FP4G-PC2C

creationtimestamp| type| source ---|---|--- 2026-07-14 18:51:32+00:00| seen| https://gist.github.com/yuriw/cc567f8b243229aaf1def97d7207ea0d 2026-07-14 18:52:20+00:00| seen| https://gist.github.com/yuriw/be55c19caff2bacad733b7df0c67de08...

CVE-2026-15747

creationtimestamp| type| source ---|---|--- 2026-07-14 17:41:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmquxixea2t 2026-07-15 17:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbfq4srt2w 2026-07-16 09:32:04+00:00| seen|...

CVE-2026-60082

creationtimestamp| type| source ---|---|--- 2026-07-14 17:01:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmongt66t2f 2026-07-15 15:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2lniocx2l 2026-07-16 09:32:03+00:00| seen|...

CVE-2026-11403

creationtimestamp| type| source ---|---|--- 2026-07-14 16:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmnoybfes27...

CVE-2026-15695

creationtimestamp| type| source ---|---|--- 2026-07-14 16:27:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmmsddly72i 2026-07-22 05:04:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kduliog2u...

CVE-2026-60119

Hi.Events through v1.10.0-beta contains an XSS vulnerability in the event title handling. An authenticated user with event creation/edit privileges can inject HTML/JavaScript by placing a malicious title containing , which is not escaped by JSON.stringify when embedded in inline script data. This...

CVE-2026-60118

CVE-2026-60118 affects Hi.Events up to v1.10.0-beta, where a missing server-side visibility enforcement lets unauthenticated attackers purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hi...

CVE-2026-60118 Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint

Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hidd...

CVE-2026-60118 Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint

Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hidd...

CVE-2026-47871

creationtimestamp| type| source ---|---|--- 2026-07-14 15:09:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmifhw5al2k 2026-07-17 16:15:16+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:01:38+00:00| seen|...