CVE-2026-58377

creationtimestamp| type| source ---|---|--- 2026-06-30 17:59:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlfnxyxp2d 2026-07-02 05:59:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne2y63yj22...

CVE-2026-49451

creationtimestamp| type| source ---|---|--- 2026-06-30 17:51:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjkwmjvtu2m 2026-07-01 22:04:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116846983714704954 2026-07-03 10:10:00+00:00| seen|...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the ApplyCreate function in controller/model/enrollmentmanager.go. An attacker can gain full administrative control by creating enrollments for any identity, including the default administrator, and redeeming t...

CVE-2026-12349

creationtimestamp| type| source ---|---|--- 2026-06-30 17:17:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjizi73cq2c...

CVE-2026-48286

creationtimestamp| type| source ---|---|--- 2026-06-30 17:02:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji6wod572y 2026-07-01 11:45:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mplgwhlm3fm2 2026-07-...

CVE-2026-58165 OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation

OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, including the default administrator, because the ApplyCreate...

CVE-2026-58165 OpenZiti - Privilege Escalation to Admin via Unauthorized Enrollment Creation

OpenZiti through 2.0.0, fixed in commit 3027fdf, contains a privilege escalation vulnerability that allows authenticated non-admin identities with fine-grained enrollment management permissions to create enrollments for any identity, including the default administrator, because the ApplyCreate...

CVE-2026-58165

OpenZiti (up to v2.0.0) contains a privilege-escalation via Unauthorized Enrollment Creation. The ApplyCreate function in controller/model/enrollment_manager.go validates only that the target identity exists, with no authorization binding the caller to the target. Authenticated non-admin users wi...

CVE-2026-58011

creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjakneukd2m 2026-07-03 12:19:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjrcmvoq2d 2026-07-21 12:00:54+00:00| seen|...

mariadb: mbstream: Unauthorized file creation via path traversal

A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...

CVE-2026-44949

Summary: CVE-2026-44949 pertains to a vulnerability in the Rancher FleetWorkspace mutating webhook handled by the in-cluster rancher-webhook service. Affected versions: 0.7.0–0.7.10, 0.8.0–0.8.7, 0.9.0–0.9.6, and 0.10.0–0.10.7. Impact: An unauthenticated attacker with network access to the webhoo...

CVE-2026-53433

creationtimestamp| type| source ---|---|--- 2026-06-30 14:08:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6i7jyks2z 2026-07-01 02:37:36+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-53432 2026-07-03 12:15:16+00:00| seen|...

CVE-2026-44946

creationtimestamp| type| source ---|---|--- 2026-06-30 13:57:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5usfmcc2z 2026-06-30 23:31:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116841661870307967 2026-07-03 06:07:07+00:00| seen|...

CVE-2026-47105

creationtimestamp| type| source ---|---|--- 2026-06-30 13:51:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj5j4kyvg2z...

mariadb: mbstream: Unauthorized file creation via path traversal

A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...

CVE-2026-57637

creationtimestamp| type| source ---|---|--- 2026-06-30 12:17:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpiyatzvyv2j...

EDB-14146

creationtimestamp| type| source ---|---|--- 2026-06-30 11:40:03+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e21c51a4-c763-4cfa-b829-93bd06110368...

CVE-2026-13558

creationtimestamp| type| source ---|---|--- 2026-06-30 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mpiw5w4cb32f...

OPENSUSE-SU-2026:21182-1 Security update for python-python-engineio

This update for python-python-engineio fixes the following issues: Changes in python-python-engineio: - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through the heartbeat mechanism and cause a DoS bsc1269544 - CVE-2026-48809: size of incoming...

mariadb: mbstream: Unauthorized file creation via path traversal

A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal...