CVE-2026-46826

creationtimestamp| type| source ---|---|--- 2026-05-28 23:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6isfqoe2x 2026-06-03 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngbnvoka32o...

CVE-2026-35277

creationtimestamp| type| source ---|---|--- 2026-05-28 22:34:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmx3ennnnk23 2026-06-04 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngieinue22s...

CVE-2026-8809 Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability exists due to the aftervalidatesavepost function unconditionally trusting the attacker-controlled acfpostid POST...

DEBIAN-CVE-2026-49299

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

CVE-2026-9645

creationtimestamp| type| source ---|---|--- 2026-05-28 22:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzi3bahs2w 2026-05-28 23:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6g46htp2v 2026-08-12 08:00:07+00:00| seen|...

CVE-2026-33590

creationtimestamp| type| source ---|---|--- 2026-05-28 21:40:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwydw5s2c2n 2026-06-12 12:43:17+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo3rd3yvp72n 2026-06-16 00:48:01+00:00| seen|...

CVE-2026-9658

creationtimestamp| type| source ---|---|--- 2026-05-28 21:33:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwxwk62fg2u...

CVE-2026-33462

creationtimestamp| type| source ---|---|--- 2026-05-28 21:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxdlxmtz2e 2026-05-29 14:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...

CVE-2026-47336

creationtimestamp| type| source ---|---|--- 2026-05-28 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwzzrkyp2r 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 01:15:42+00:00| seen...

CVE-2026-35277

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-47337

creationtimestamp| type| source ---|---|--- 2026-05-28 21:14:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwuie44e2k 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-02 06:56:24+00:00| seen...

CVE-2026-42998

creationtimestamp| type| source ---|---|--- 2026-05-28 21:13:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwwsrnh6g2z...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

CVE-2026-49127

creationtimestamp| type| source ---|---|--- 2026-05-28 21:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4f2zpy2k 2026-05-28 21:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwyscpvqc2k...

CVE-2026-45058

creationtimestamp| type| source ---|---|--- 2026-05-28 20:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwum6exuo2e...

CVE-2026-44463

creationtimestamp| type| source ---|---|--- 2026-05-28 20:08:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwt7frvk42e 2026-05-28 21:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww6msug72z 2026-06-03 02:37:05+00:00| seen|...

GHSA-2C2J-9GV5-CJ73

creationtimestamp| type| source ---|---|--- 2026-05-28 19:29:34+00:00| seen| https://gist.github.com/lesnargitonga/ded68f9d3d270cc386fe7c2227970ebc...

15,000 WordPress Sites Affected by Administrator Account Creation Vulnerability in WP Maps Pro WordPress Plugin

On March 24th, 2026, we received a submission for an Unauthenticated Administrator Account Creation vulnerability in WP Maps Pro, a WordPress plugin with more than 15,000 sales. This vulnerability makes it possible for unauthenticated attackers to create new administrator accounts on the affected...

CVE-2026-39292

creationtimestamp| type| source ---|---|--- 2026-05-28 19:00:10+00:00| seen| Telegram/AjSHmHRDLOBOpzCV-4U21SLO-NmWFsOh3UaLlMKSyTjmcys 2026-05-29 16:58:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyz3g7nz32x...