CVE-2026-4978

creationtimestamp| type| source ---|---|--- 2026-07-30 16:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvppv5ys2z...

GHSA-VW27-FWJF-5QXM

creationtimestamp| type| source ---|---|--- 2026-07-30 16:49:48+00:00| seen| https://gist.github.com/tu-trinh-scale/6952882fc494bc673397ec58f04a6e92 2026-07-30 19:33:36+00:00| seen| https://gist.github.com/tu-trinh-scale/cdec105f804c8b4962d64774b7f2237d 2026-07-30 19:33:48+00:00| seen|...

SUSE CVE-2026-54089

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Starting with 2.0.0-rc.1, when FileBrowser is configured with proxy authentication auth.method=proxy, any unauthenticated attacker who can reach the server...

CVE-2026-59326

creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:18+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759...

CVE-2026-57862

creationtimestamp| type| source ---|---|--- 2026-07-30 16:15:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ilw4ytaebzud5...

JLSEC-2026-1069 ImageMagick before 7.1.2-26 (and 6.x before 6.9.13-51) contains a memory leak in the TIFF encoder...

ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...

JLSEC-2026-1058 ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or...

ImageMagick before 7.1.2-24 contains an incorrect policy check that allows attackers to create or truncate files disallowed by security policies. Remote attackers can bypass path policy restrictions in sandboxed conversion services to write arbitrary files outside intended boundaries...

CVE-2026-67424

creationtimestamp| type| source ---|---|--- 2026-07-30 15:31:53+00:00| seen| https://gist.github.com/alon710/5c4b46a299dac54e7caa99802f7ad9a8 2026-07-30 16:35:03+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-c9hr-64h3-gxpc...

CVE-2026-57862 Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...

CVE-2026-56428

creationtimestamp| type| source ---|---|--- 2026-07-30 14:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cj3oxkjqienek...

CVE-2026-6879

creationtimestamp| type| source ---|---|--- 2026-07-30 14:20:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrun4lvoax2v...

CVE-2026-16971

creationtimestamp| type| source ---|---|--- 2026-07-30 14:13:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/f23y4hauoujpy...

CVE-2026-18360

creationtimestamp| type| source ---|---|--- 2026-07-30 14:07:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp...

CVE-2026-54363

creationtimestamp| type| source ---|---|--- 2026-07-30 13:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrukgjtuwq2i...

CVE-2026-54365

CentreStack prior to version 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll. An attacker can send a crafted base64-encoded XML via exposed API endpoints (jsonimportuserbyupn, jsonimportuserbyupnex, or japiimportuserbyupn) to trigger InternalImportAdUserByUPN(), ...

EUVD-2026-51101

CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious...

CVE-2026-54365 CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll

CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious...

CVE-2026-16969

creationtimestamp| type| source ---|---|--- 2026-07-30 11:19:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrud2b6bws2m 2026-07-30 14:07:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/blcb3neggfspp...

GHSA-WCHH-9X6H-7F6P

creationtimestamp| type| source ---|---|--- 2026-07-30 08:32:07+00:00| seen| https://gist.github.com/alon710/d12f2b2b8a8eb557d027885a6580665a...

CVE-2026-47858

creationtimestamp| type| source ---|---|--- 2026-07-30 06:51:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4pmcheqhxq63y 2026-07-30 16:15:06+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-759...