CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service. Mitigation To mitigate this issue, restrict network access to TC...

CVE-2026-17662

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:54+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730...

CVE-2026-48448

creationtimestamp| type| source ---|---|--- 2026-07-30 04:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtki7wira23 2026-08-01 11:00:24+00:00| seen| https://bsky.app/profile/hendryadrian.bsky.social/post/3mrzcv5vr7s2e...

CVE-2026-64370

A flaw was found in the Linux kernel's posix-cpu-timers component. This vulnerability allows a local user to trigger a resource leak within the docpunanosleep function. The issue occurs because a process identifier PID reference is not properly released if a timer creation operation fails. This...

Linux Distros Unpatched Vulnerability : CVE-2026-16531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary...

CVE-2026-67595

creationtimestamp| type| source ---|---|--- 2026-07-29 22:50:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsz5fry6g2u 2026-07-29 23:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrt52dd6wg2c 2026-07-30 00:00:38+00:00| seen|...

CVE-2026-12436

creationtimestamp| type| source ---|---|--- 2026-07-29 22:09:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswusxhll2v 2026-07-30 04:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:30+00:00| seen|...

CVE-2026-63119

creationtimestamp| type| source ---|---|--- 2026-07-29 21:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsuhri6me23 2026-07-30 16:35:27+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-7683-3w9x-ch42 2026-07-31...

CVE-2026-67431

creationtimestamp| type| source ---|---|--- 2026-07-29 21:21:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsu6t2mfx2q 2026-07-30 16:35:20+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-5p9g-j988-pcwv 2026-07-31...

CVE-2026-5487

creationtimestamp| type| source ---|---|--- 2026-07-29 21:04:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsta6necs2q 2026-07-30 05:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtnulah2a2l...

CVE-2026-54693

creationtimestamp| type| source ---|---|--- 2026-07-29 17:31:36+00:00| seen| https://gist.github.com/alon710/122d827ca97ab8457c12647e94a1482c 2026-07-29 18:18:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjxpyzb222...

CVE-2026-41939

creationtimestamp| type| source ---|---|--- 2026-07-29 17:13:53+00:00| seen| https://gist.github.com/VAMorales/95874f23e27e17362b87133013834c0a 2026-07-29 18:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrslmpdake2k...

CVE-2026-54735

creationtimestamp| type| source ---|---|--- 2026-07-29 16:32:11+00:00| seen| https://gist.github.com/alon710/fffec7ff7a3f093df17d5e871ff03c84 2026-07-29 16:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsezo76df2q 2026-07-29 17:53:00+00:00| seen|...

CVE-2026-60112

AMMOS Instrument Toolkit AIT GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands by calling Sessions.create without any credential check. Attackers can exploit the...

CVE-2026-15228

Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets across all watched namespaces using a label selector alone, without ingress-class or namespace...

CVE-2026-15144

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsd4ilqss2c 2026-07-29 19:43:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsopqnc4r2l...

CVE-2026-65886

creationtimestamp| type| source ---|---|--- 2026-07-29 15:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsbdnfbk224 2026-07-29 17:54:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsindtlqe2q...

CVE-2026-60112

AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 has a missing authentication flaw in Sessions.create(), enabling an unauthenticated network attacker to obtain a valid session and issue arbitrary spacecraft commands. After session issuance, handle_cmd() can forward commands to the AIT command bus ...

CVE-2026-56848

creationtimestamp| type| source ---|---|--- 2026-07-29 15:29:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrsakcypyy2r 2026-07-30 04:46:32+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260730 2026-07-30 14:15:24+00:00| seen|...

CVE-2026-16543

Kong Operator’s embedded Kong Kubernetes Ingress Controller (KIC) is vulnerable. A user with namespace-scoped Secret creation privileges can cause a cluster-wide denial of service by collecting CA-certificate Secrets across watched namespaces using only a label selector, with no ingress-class or ...