CVE-2026-61122

creationtimestamp| type| source ---|---|--- 2026-07-23 18:15:05+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrn7zczya523...

CVE-2026-61094

creationtimestamp| type| source ---|---|--- 2026-07-23 17:52:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-63765 Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation

Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blobs in any tenant account. Attackers can exploit missing authentication checks to resolve any account and conversation,...

CVE-2026-63765

CVE-2026-63765 affects Chatwoot

CVE-2026-63765 Chatwoot < 4.16.0 Unauthenticated ActiveStorage Direct Upload Arbitrary Blob Creation

Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blobs in any tenant account. Attackers can exploit missing authentication checks to resolve any account and conversation,...

CVE-2026-60904

creationtimestamp| type| source ---|---|--- 2026-07-23 17:49:00+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60807

creationtimestamp| type| source ---|---|--- 2026-07-23 17:47:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60738

creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

GO-2026-5987 Insecure enrollment token TTL in nebula-mesh in github.com/forgekeep/nebula-mesh

The nebula-mesh Web UI host creation ignores the configured enrollment token TTL and instead mints 24-hour bearer enrollment tokens. This can lead to tokens remaining valid for longer than intended, increasing the window of opportunity for an attacker to use an intercepted token...

CVE-2026-60653

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:44+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60641

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60639

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60535

creationtimestamp| type| source ---|---|--- 2026-07-23 17:18:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 20:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6cyfiqz2y 2026-07-29 10:07:06+00:00| seen|...

CVE-2026-60527

creationtimestamp| type| source ---|---|--- 2026-07-23 17:18:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60440

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60419

creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrudywyihi2y...

CVE-2026-65906

creationtimestamp| type| source ---|---|--- 2026-07-23 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvtdw6i2j 2026-08-18 15:50:05+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mtekysg2w624...

CVE-2026-65699

AgentGPT 1.0.0 is affected by an authorization bypass where authenticated users can attach tasks to another user’s agent run by supplying a target run_id. The vulnerability arises because AgentCRUD.create_task and validate_task_count look up the target AgentRun using the client-supplied run_id wi...

CVE-2026-65699 AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target runid in the request body without ownership verification. The AgentCRUD.createtask and...

CVE-2026-65699 AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target runid in the request body without ownership verification. The AgentCRUD.createtask and...