EUVD-2026-52659

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

CVE-2026-59639

creationtimestamp| type| source ---|---|--- 2026-08-04 09:28:18+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117036528234088485...

CVE-2026-46600

creationtimestamp| type| source ---|---|--- 2026-08-04 08:52:34+00:00| seen| https://gist.github.com/sherine-k/eeebb5de0dc45167d6be9ddd7b51d2ef 2026-08-05 22:37:18+00:00| seen| https://gist.github.com/cwayne18/5a965b20d5d77b66faec2e6e18802a48 2026-08-06 00:00:17+00:00| seen|...

GHSA-3F7W-8RR8-F37F

creationtimestamp| type| source ---|---|--- 2026-08-04 08:31:39+00:00| seen| https://gist.github.com/alon710/e29226c330282c9416a9859028fe2877 2026-08-17 15:00:04+00:00| seen| https://t.me/bdufstecru/3388 2026-08-18 00:00:28+00:00| published-proof-of-concept| https://t.me/bdufstecru/3388...

CVE-2026-054088

creationtimestamp| type| source ---|---|--- 2026-08-04 08:29:03+00:00| seen| https://gist.github.com/Correctover/96443c637dcce0f9133003cf3a10990a...

GHSA-524P-V8JX-3FW6

creationtimestamp| type| source ---|---|--- 2026-08-04 08:29:03+00:00| seen| https://gist.github.com/Correctover/96443c637dcce0f9133003cf3a10990a...

CVE-2026-16881

creationtimestamp| type| source ---|---|--- 2026-08-04 06:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/23foeajdjcf52...

GHSA-P538-C434-8V24

creationtimestamp| type| source ---|---|--- 2026-08-04 06:32:33+00:00| seen| https://gist.github.com/alon710/7c801d57bbc1100bfc82173b2522a257...

CVE-2026-67610

creationtimestamp| type| source ---|---|--- 2026-08-04 06:08:18+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadx5y3ju2i...

CVE-2026-17614

creationtimestamp| type| source ---|---|--- 2026-08-04 04:10:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bysgnrne72avf...

GHSA-MFX4-HV73-Q22V

creationtimestamp| type| source ---|---|--- 2026-08-04 03:31:26+00:00| seen| https://gist.github.com/alon710/b3523524be79c42fa548f91ed3953ea3...

EUVD-2026-52486

Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requests to the drafts endpoint using only...

CVE-2026-69247

creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...

CVE-2026-69095

creationtimestamp| type| source ---|---|--- 2026-08-04 00:01:21+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3ms7phgudky2g...

Metabase 0.55.0 < 0.58.15.1 / 0.59.x < 0.59.12 / 0.60.x < 0.60.7 / 0.61.x < 0.61.2 / 1.55.0 < 1.58.15.1 / 1.59.x < 1.59.12 / 1.60.x < 1.60.7 / 1.61.x < 1.61.2 RCE (CVE-2026-59826)

The version of Metabase installed on the remote host is 0.55.0 through 0.58.15, 0.59.x prior to 0.59.12, 0.60.x prior to 0.60.7, 0.61.x prior to 0.61.2, 1.55.0 through 1.58.15, 1.59.x prior to 1.59.12, 1.60.x prior to 1.60.7, or 1.61.x prior to 1.61.2. It is, therefore, affected by a remote code...

CVE-2026-48317

creationtimestamp| type| source ---|---|--- 2026-08-03 23:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzx7udf2f 2026-08-06 16:16:14+00:00| seen| https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic...

CVE-2026-67616

Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requests to the drafts endpoint using only...

CVE-2026-66065

creationtimestamp| type| source ---|---|--- 2026-08-03 22:02:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gmxn7ldiwvsva...

GHSA-CQ5V-8Q36-5273

creationtimestamp| type| source ---|---|--- 2026-08-03 21:32:44+00:00| seen| https://gist.github.com/alon710/cb22e8e296a36049522556dbfd0c36bc...

CVE-2026-18736

Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolution enabled. Attackers can submit URLs pointing to public...