CVE-2026-26249

creationtimestamp| type| source ---|---|--- 2026-02-13 11:40:23+00:00| seen| https://gist.github.com/alon710/c13997a3281275228dd587b840ca0c56...

CVE-2025-61879

creationtimestamp| type| source ---|---|--- 2026-02-13 08:19:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meq32yrkao25...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...

GHSA-XX7M-69FF-9CRP

creationtimestamp| type| source ---|---|--- 2026-02-13 01:10:24+00:00| seen| https://gist.github.com/alon710/db853e0a605e11003bf240d589bebc01 2026-02-13 02:07:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mepgcmwkc6o2...

SUSE SLES15 Security Update : nodejs20 (SUSE-SU-2026:0457-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0457-1 advisory. - Update to 20.20.0: - CVE-2026-22036: Updated undici to 6.23.0 bsc1256848 - CVE-2025-59465: Add TLSSocket default error handler...

PT-2026-25679

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.10 Mattermost versions 11.2.0 through 11.2.2 Mattermost versions 11.3.0 Description Mattermost does not properly filter invite IDs based on user permissions. This allows regular users to bypass access...

PT-2026-25810

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.2.0 through 11.2.2 Mattermost versions 11.3.0 Description The software does not properly verify the run create permission when a playbookId is empty. This allows team members to create unauthorized runs through the...

CVE-2026-26185

creationtimestamp| type| source ---|---|--- 2026-02-12 22:40:23+00:00| seen| https://gist.github.com/alon710/416bd4c6e882d4c4ca94fe2714e150bc...

GHSA-JR94-GJ3H-C8RF

creationtimestamp| type| source ---|---|--- 2026-02-12 22:40:23+00:00| seen| https://gist.github.com/alon710/416bd4c6e882d4c4ca94fe2714e150bc...

WordPress FastDup - Fastest WordPress Migration & Duplicator plugin <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download vulnerability

WordPress FastDup - Fastest WordPress Migration & Duplicator plugin = 2.7.1 - Missing Authorization to Authenticated Contributor+ Backup Creation and Download vulnerability discovered by WordFence in WordPress Plugin FastDup versions = 2.7.1...

CVE-2026-21434

creationtimestamp| type| source ---|---|--- 2026-02-12 22:10:25+00:00| seen| https://gist.github.com/alon710/55922433a77df7de86cea2e1123888c8...

Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC

Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC This vulnerability exists in the Air Traffic Controller ATC component of Yoke, a Kubernetes deployment tool. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller...

CVE-2026-26056

CVE-2026-26056 affects Yoke ATC in 0.19.0 and earlier. A vulnerability in the ATC controller allows users with create/update permissions to inject a malicious URL via the overrides.yoke.cd/flight annotation, causing the ATC controller to download and execute an arbitrary WASM module without prope...

CVE-2026-26056 Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC

Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a...

GHSA-89P3-4642-CR2W

creationtimestamp| type| source ---|---|--- 2026-02-12 20:10:23+00:00| seen| https://gist.github.com/alon710/d04c9ed716c8cbccbfced51ccf8ca09b...

GHSA-G966-83W7-6W38

creationtimestamp| type| source ---|---|--- 2026-02-12 19:40:23+00:00| seen| https://gist.github.com/alon710/ddfcc9ce61b90942fef47df753b076d0 2026-02-25 01:08:02+00:00| seen| https://gist.github.com/alon710/b23e84fd74b0099ad7b9c6587db73222...

CVE-2026-21438

webtransport-go is an implementation of the WebTransport protocol. Prior to 0.10.0, an attacker can cause unbounded memory consumption repeatedly creating and closing many WebTransport streams. Closed streams were not removed from an internal session map, preventing garbage collection of their...

CVE-2026-21438

creationtimestamp| type| source ---|---|--- 2026-02-12 19:10:24+00:00| seen| https://gist.github.com/alon710/65570bea1d8bf7bce8ccfbb01e9a80b6...

CVE-2026-26081

creationtimestamp| type| source ---|---|--- 2026-02-12 18:15:59+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3meolxfmees2c 2026-02-13 15:05:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrmhjz42e...

CVE-2025-61879

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism...