CVE-2026-7228

creationtimestamp| type| source ---|---|--- 2026-07-24 18:00:04+00:00| seen| Telegram/M-3cLQvPgI-qMEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw 2026-07-25 00:00:09+00:00| seen| Telegram/M-3cLQvPgI-qMEcWYT-wWAA2JFIhIDN85UPqM1dZ7X-wCw 2026-08-10 15:00:03+00:00| published-proof-of-concept|...

CVE-2026-65710

sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINKCREATE profile flag to trigger unauthorized decryption and persistent storage of any vault account's password by exploiting the absence of AccountAcl checks in the publ...

CVE-2026-8789

creationtimestamp| type| source ---|---|--- 2026-07-24 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftciba3h2q...

CVE-2026-66027

creationtimestamp| type| source ---|---|--- 2026-07-24 16:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftaqlx4w2w...

CVE-2024-21265

creationtimestamp| type| source ---|---|--- 2026-07-24 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrfrxuu2xf2u...

EUVD-2026-48716

sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINKCREATE profile flag to trigger unauthorized decryption and persistent storage of any vault account's password by exploiting the absence of AccountAcl checks in the publ...

CVE-2026-65710 sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINKCREATE profile flag to trigger unauthorized decryption and persistent storage of any vault account's password by exploiting the absence of AccountAcl checks in the publ...

CVE-2026-65710 sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINKCREATE profile flag to trigger unauthorized decryption and persistent storage of any vault account's password by exploiting the absence of AccountAcl checks in the publ...

CVE-2026-57106

creationtimestamp| type| source ---|---|--- 2026-07-24 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfpdryc7w2y 2026-07-24 17:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftcvc72z2j 2026-07-25 06:14:27+00:00| seen|...

CVE-2026-16800

CVE-2026-16800 affects Devolutions PowerShell Universal (versions up to 2026.2.2). The issue is improper control of code generation (Code Injection) in the schedule feature. An authenticated user with schedule creation permission can cause arbitrary PowerShell code to execute by crafting schedule...

EUVD-2026-48607

Improper control of generation of code 'Code Injection' in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with schedule creation permission to execute arbitrary PowerShell code via crafted schedule parameter names concatenated into a...

GHSA-6VXP-GFWF-HCR9 ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

When a temporary file can not be created a small memory leak will happen in the TIFF encoder...

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

When a temporary file can not be created a small memory leak will happen in the TIFF encoder...

CVE-2026-53402

creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhb3ikw42o 2026-08-06 04:46:30+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-45816

creationtimestamp| type| source ---|---|--- 2026-07-24 13:21:59+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfh2xds3522 2026-07-25 08:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrhflxks6w2l...

CVE-2026-12981

creationtimestamp| type| source ---|---|--- 2026-07-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973779458861264 2026-07-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mretgfvnq42h 2026-07-24 21:52:27+00:00| seen|...

CVE-2026-1673

creationtimestamp| type| source ---|---|--- 2026-07-24 01:45:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrea5jo2pq24...

PT-2026-64377

Name of the Vulnerable Software and Affected Versions sysPass versions prior to 3.2.12 Description Authenticated users possessing the PUBLICLINK CREATE profile flag can trigger unauthorized decryption and persistent storage of any vault account password. This occurs due to missing AccountAcl chec...

CVE-2026-48546

creationtimestamp| type| source ---|---|--- 2026-07-23 23:00:03+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s 2026-07-24 00:00:07+00:00| seen| Telegram/3IdoSx-1lpc2iHoFvsp2wYXyVxuQva2z1gsDIpvcW15f6s...

CVE-2026-16807

creationtimestamp| type| source ---|---|--- 2026-07-23 22:42:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116971701809054544 2026-07-24 02:05:03+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrebai6xxb2l 2026-07-24 12:45:38+00:00| seen|...