CVE-2026-54096 File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.7, POST /api/share/ accepts an authenticated request for an arbitrary path and stores a public share record without checking whether the target fi...

CVE-2026-55439

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download endpoint allows authenticated administrators to read arbitrary files from the server filesystem. The backup download endpoint GET...

CVE-2026-13350

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create...

CVE-2026-20175

creationtimestamp| type| source ---|---|--- 2026-06-25 16:45:33+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116811755148604719...

CVE-2026-56049

creationtimestamp| type| source ---|---|--- 2026-06-25 16:06:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4sqncaw42x 2026-08-01 01:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrydsh5bxw2n...

CVE-2026-13350

CVE-2026-13350 involves incorrect permission checks during room creation, enabling an attacker to create room types they should not be allowed to create. Documented impact is limited to creation of restricted room types; CVSS v4.0 base score is 2.3 (LOW) with network attack vector and high comple...

CVE-2026-13350

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create...

EUVD-2026-39468

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create...

CVE-2026-55439

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download endpoint allows authenticated administrators to read arbitrary files from the server filesystem. The backup download endpoint GET...

EUVD-2026-39465

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download endpoint allows authenticated administrators to read arbitrary files from the server filesystem. The backup download endpoint GET...

CVE-2026-54836

creationtimestamp| type| source ---|---|--- 2026-06-25 15:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4qf6ns552t 2026-07-21 06:00:07+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54836.yaml 2026-07-22...

CVE-2026-56053

creationtimestamp| type| source ---|---|--- 2026-06-25 15:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4pv42j7s2j 2026-07-07 05:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpztyiy63o24...

CVE-2026-0864

creationtimestamp| type| source ---|---|--- 2026-06-25 12:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mp4eyb6hgs2o...

CVE-2026-53271

creationtimestamp| type| source ---|---|--- 2026-06-25 10:44:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4ariqlag2a...

CVE-2026-53269

creationtimestamp| type| source ---|---|--- 2026-06-25 10:29:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp47wn22bc27 2026-07-06 06:52:05+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-07-09 07:45:41+00:00| seen...

CVE-2026-53276

creationtimestamp| type| source ---|---|--- 2026-06-25 10:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp46wbvo422b 2026-06-25 19:32:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116812411984634049...

CVE-2020-7610

creationtimestamp| type| source ---|---|--- 2026-06-25 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp46nrvwb42h...

CVE-2026-53261

creationtimestamp| type| source ---|---|--- 2026-06-25 09:53:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp45vwr3iz2a...

CVE-2026-53160

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free race in fastrpcmapcreate fastrpcmaplookup returns a raw pointer after releasing fl-lock. The caller fastrpcmapcreate then calls fastrpcmapget krefgetunlesszero on this unprotected pointer. A...

UBUNTU-CVE-2026-53160

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix use-after-free race in fastrpcmapcreate fastrpcmaplookup returns a raw pointer after releasing fl-lock. The caller fastrpcmapcreate then calls fastrpcmapget krefgetunlesszero on this unprotected pointer. A...