CVE-2026-71848

creationtimestamp| type| source ---|---|--- 2026-08-08 00:34:16+00:00| seen| https://gist.github.com/alon710/b3f3e72bf33c744afdd90509c65dceb1...

CVE-2026-20345

creationtimestamp| type| source ---|---|--- 2026-08-08 00:20:01+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117057021625735486 2026-08-10 12:45:10+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:07+00:00| seen|...

PT-2026-69186

Name of the Vulnerable Software and Affected Versions AI Copilot – Content Generator versions prior to 1.5.7 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Unauthenticated attackers can achieve full site...

GHSA-F23P-VX2J-J53R

creationtimestamp| type| source ---|---|--- 2026-08-07 22:31:14+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378 2026-08-08 00:01:19+00:00| seen| https://gist.github.com/alon710/6634ad7314d99c5586618c1848016378...

CVE-2026-46405

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the GET handler, or when an Authorization: Negotiate header is supplied, the response is includes a logical.Auth object in addition to an error message. This results in...

GHSA-5P4M-2WFM-XMQJ

creationtimestamp| type| source ---|---|--- 2026-08-07 22:06:55+00:00| seen| https://gist.github.com/gomesalexandre/8cd74b41b9830109d823dcb777041502...

CVE-2026-71870

creationtimestamp| type| source ---|---|--- 2026-08-07 20:34:02+00:00| seen| https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7...

GHSA-FP3F-MC75-235C

creationtimestamp| type| source ---|---|--- 2026-08-07 20:34:02+00:00| seen| https://gist.github.com/alon710/51a19d7e4b20307e86a86a2096f8e2e7...

CVE-2026-28144

creationtimestamp| type| source ---|---|--- 2026-08-07 20:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msjeoojgau22...

SUSE-SU-2026:3536-1 Security update for podman

This update for podman fixes the following issues: - CVE-2026-55686: specially crafted image where the WORKDIR path contains a symlink allows for directory creation and ownership modification on the host filesystem bsc1268579. - CVE-2026-57231: specially crafted image can trick podman run into...

GHSA-FWG2-594C-JP42

creationtimestamp| type| source ---|---|--- 2026-08-07 19:36:23+00:00| seen| https://gist.github.com/alon710/81b96826f50cad7313904ff9c7c75f2e...

CVE-2026-71558

creationtimestamp| type| source ---|---|--- 2026-08-07 19:10:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msjb2dlrwh2r...

CVE-2026-17435 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...

CVE-2026-17435

File::Rotate::Simple for Perl

CVE-2026-17435 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files. When the file to be rotated is a symbolic link to a missing file, and the touch option is enabled, then the rotate method assumes that the file is absent since the existence check is...

CVE-2026-67585 Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...

GHSA-WVPP-8HX9-P66J

creationtimestamp| type| source ---|---|--- 2026-08-07 16:40:33+00:00| seen| https://gist.github.com/alon710/7b081fe119ed64f00c308eff03c67cc3...

CVE-2026-17594

CVE-2026-17594 affects Nexus Repository 3 CE/Pro versions 3.0.0–3.94.x. The root cause is an authorization mismatch in the repository-creation UI: a delegated repository-admin (scoped to a specific format) could cause a repository of a different, unauthorized format to be created because authoriz...

CVE-2026-17594 Nexus Repository 3 - Authorization Bypass in Repository Creation

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability CWE-863 in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of...

CVE-2026-17598

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...