CVE-2026-8209

creationtimestamp| type| source ---|---|--- 2026-05-09 05:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e...

Authorization Bypass

com.arcadedb, arcadedb-server is vulnerable to Authorization Bypass. The vulnerability is due to improper initialization of access controls and missing security configuration during database creation, which allows an attacker to bypass database and record-level authorization restrictions...

CVE-2026-25077

creationtimestamp| type| source ---|---|--- 2026-05-09 05:06:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfhw52n2w2g...

CVE-2025-66171

creationtimestamp| type| source ---|---|--- 2026-05-09 04:41:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfgjejuxq2i...

CVE-2026-42174 Kirby: User avatar creation, replacement and deletion are not gated by user update permissions

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This issue has been patched in versions 4.9.0 and 5.4.0...

CVE-2026-42174

Kirby CMS (CVE-2026-42174) is vulnerable prior to updates 4.9.0 and 5.4.0: user avatars could be created, replaced, or deleted without proper user.update/users.update permission checks. The root cause is missing authorization gating for avatar actions, allowing users with only file permissions to...

CVE-2026-42174 Kirby: User avatar creation, replacement and deletion are not gated by user update permissions

Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and deletion are not gated by user update permissions. This issue has been patched in versions 4.9.0 and 5.4.0...

CVE-2026-44987

creationtimestamp| type| source ---|---|--- 2026-05-09 03:04:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfb5itfpr2n...

CVE-2026-45130

creationtimestamp| type| source ---|---|--- 2026-05-09 02:44:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf7zonifu2i 2026-05-10 22:05:10+00:00| seen| https://bsky.app/profile/intel.overresearched.net/post/3mljrdev7bc27 2026-06-08 09:19:26+00:00| seen|...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-016789)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016789 advisory. A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform pat...

CVE-2026-42213

creationtimestamp| type| source ---|---|--- 2026-05-08 23:24:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleuu7yjok2o...

CVE-2026-42298

creationtimestamp| type| source ---|---|--- 2026-05-08 23:24:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleuu5h24l2e 2026-05-09 01:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf2wfsfch2p 2026-05-09 03:00:31+00:00| seen|...

CVE-2026-42354

creationtimestamp| type| source ---|---|--- 2026-05-08 23:22:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleupkgzli2z 2026-05-09 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116541675237436780 2026-05-09 00:00:42+00:00| seen|...

CVE-2026-25199

creationtimestamp| type| source ---|---|--- 2026-05-08 22:29:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlerqoxyid2w 2026-05-09 05:01:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfhn5uh3l2v...

CVE-2026-42193

creationtimestamp| type| source ---|---|--- 2026-05-08 22:28:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlerpeba2u2n 2026-05-08 22:36:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mles67hmih2p 2026-05-09 07:30:30+00:00| seen|...

CVE-2026-42287

Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...

CVE-2026-42291 SysReptor: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional

SysReptor is a fully customizable pentest reporting platform. From version 2026.4 to before version 2026.27, the endpoints for reading and creating sharing links for personal notes is not properly authorized. This allows authenticated attackers who obtain the note ID of victim users to list and...

CVE-2026-42287

Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...

EUVD-2026-28842

Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...

CVE-2026-32743

creationtimestamp| type| source ---|---|--- 2026-05-08 21:00:04+00:00| seen| Telegram/L06xv0vmv9B-lUjnDANUtY1-6vQFMFDzrcYuiA5m0MAZkY 2026-06-11 18:40:48+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3mnzuth3bkmi2 2026-06-11 19:45:32+00:00| see...