CVE-2026-0267

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:23+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmwtg2m2k 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 22:58:09+00:00| seen|...

CVE-2026-49821

creationtimestamp| type| source ---|---|--- 2026-06-10 19:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxflcnabj26...

CVE-2026-11596

In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens...

CVE-2026-20253 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls,...

CVE-2026-20253 Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls,...

CVE-2026-20253

Summary: CVE-2026-20253 affects Splunk Enterprise and Splunk Cloud Platform due to an unauthenticated PostgreSQL sidecar service endpoint that can create or truncate arbitrary files when exposed on the network. Affected software/versions (per sources): Splunk Enterprise < 10.2.4 and < 10.0....

CVE-2026-11596

In ScreenConnect™ versions prior to 26.2, input validation within the Host Pass creation functionality could allow an authenticated user with Host Pass creation privileges the ability to specify a token expiration duration beyond the intended maximum when generating delegated access tokens...

CVE-2026-49840

creationtimestamp| type| source ---|---|--- 2026-06-10 16:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnx5hdfrqi2f...

GHSA-H25M-26QC-WCJF

creationtimestamp| type| source ---|---|--- 2026-06-10 16:20:08+00:00| seen| https://gist.github.com/jmcveen/2d2b8e075a88abf882695479e38437d1...

CVE-2026-11603

creationtimestamp| type| source ---|---|--- 2026-06-10 16:16:17+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnx4c47w5x22...

CVE-2026-49498

creationtimestamp| type| source ---|---|--- 2026-06-10 15:45:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx2kwtz462f 2026-06-11 22:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo2aefrrlq2i...

CVE-2026-52758

creationtimestamp| type| source ---|---|--- 2026-06-10 15:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwz7deg5b2q 2026-06-11 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnziveizyk22...

CVE-2026-53439

creationtimestamp| type| source ---|---|--- 2026-06-10 15:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwyduf4sh2r 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...

CVE-2026-8677

creationtimestamp| type| source ---|---|--- 2026-06-10 14:16:19+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwvllvnkm2o...

CVE-2026-49740

creationtimestamp| type| source ---|---|--- 2026-06-10 13:15:35+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6y5lau2n...

CVE-2026-7542

creationtimestamp| type| source ---|---|--- 2026-06-10 12:16:31+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwovb24k72s...

CVE-2026-47916

creationtimestamp| type| source ---|---|--- 2026-06-10 10:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhd7a6w72n...

CVE-2026-47914

creationtimestamp| type| source ---|---|--- 2026-06-10 10:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwhcppjnh26...

CVE-2026-10731

SQL injection in the ‘twostepsauthcode’ parameter processed by the ‘twoStepsAuthVerification’ function within the ‘/user-login’ endpoint. The two-factor authentication 2FA functionality can be accessed without prior authentication, allowing unauthenticated attackers to execute arbitrary SQL queri...

CVE-2026-26241

creationtimestamp| type| source ---|---|--- 2026-06-10 08:51:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwdhhd6w72p 2026-06-14 23:16:49+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvnrzykg23 2026-06-15 16:31:20+00:00| seen|...