CVE-2026-50745

creationtimestamp| type| source ---|---|--- 2026-06-26 02:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vzs2zui2q...

CVE-2026-50744

creationtimestamp| type| source ---|---|--- 2026-06-26 02:24:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5vawkgdf2o 2026-06-29 22:08:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphitkayhs27...

CVE-2026-34916

creationtimestamp| type| source ---|---|--- 2026-06-26 02:22:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5v53loia2n 2026-06-26 03:00:22+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mp5xbndij62h 2026-06-26 05:02:42+00:00| seen|...

CVE-2026-9221

creationtimestamp| type| source ---|---|--- 2026-06-26 01:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5tqjbnne2b...

CVE-2025-71338

creationtimestamp| type| source ---|---|--- 2026-06-26 01:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5snqz3t32a 2026-07-01 23:33:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmoiwv4gv22 2026-07-02 03:37:45+00:00| seen|...

CVE-2026-50549

creationtimestamp| type| source ---|---|--- 2026-06-26 01:27:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5s4fr4f42x 2026-06-27 18:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpc2fwtsnn2g 2026-07-01 19:00:56+00:00| seen|...

PT-2026-52990

Name of the Vulnerable Software and Affected Versions H.View HV-500S6 IP cameras affected versions not specified Description An authenticated user can supply unsanitized XML fields to the certificate generation interface. These fields are incorporated into a backend certificate creation command...

CVE-2026-56771

creationtimestamp| type| source ---|---|--- 2026-06-25 22:59:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jtglqfg27...

CVE-2026-55412

creationtimestamp| type| source ---|---|--- 2026-06-25 22:57:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5jpc5x2w2b...

GO-2026-5703 OpenMeter: SQL injection through meter creation in github.com/openmeterio/openmeter

OpenMeter: SQL injection through meter creation in github.com/openmeterio/openmeter...

GO-2026-5584 Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule

Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability in github.com/projectcapsule/capsule...

GO-2026-5479 goshs has CSRF in state-changing GET routes enables authenticated file deletion and directory creation in github.com/patrickhener/goshs

goshs has CSRF in state-changing GET routes enables authenticated file deletion and directory creation in github.com/patrickhener/goshs...

CVE-2026-11800

creationtimestamp| type| source ---|---|--- 2026-06-25 22:17:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5hhhr7qa2r 2026-06-29 13:15:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkzuo7ml25 2026-07-01 02:46:32+00:00| seen|...

CVE-2025-71327

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API...

CVE-2025-71327 Flowise - Authentication Bypass via Unprotected Registration Endpoint

Flowise contains an authentication bypass vulnerability in the unprotected /api/v1/account/register endpoint that allows unauthenticated attackers to create user accounts. Remote attackers can exploit this endpoint to register arbitrary accounts and authenticate to the system, gaining full API...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication via the proxy authentication process. An attacker can gain unauthorized access and impersonate any user, including administrative accounts, by sending a forged HTTP header directly to the server. Additionally,...

CVE-2026-56779

MaxKB before 2.10.0 contains a server-side request forgery vulnerability in tool creation and update endpoints that allows authenticated users to make arbitrary server requests by supplying unvalidated downloadCallbackUrl and downloadurl parameters. Attackers with default workspace USER role can...

CVE-2026-54089

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Starting with 2.0.0-rc.1, when FileBrowser is configured with proxy authentication auth.method=proxy, any unauthenticated attacker who can reach the server...

CVE-2026-2299 Improper Access Control in Mattermost Google Drive Plugin File Creation Endpoint

The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Google Drive files to unauthorized private channels and disclose private channel membership...

CVE-2026-2299

CVE-2026-2299 affects the Mattermost Google Drive plugin prior to version 1.1.0. The file creation endpoint does not validate channel membership, allowing authenticated users with a connected Google account to share Google Drive files into unauthorized private channels and disclose private channe...