CVE-2026-47086

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. GENURLAUTH-issued tokens can bypass ACLs. Any authenticated user could mint a URLAUTH token via the GENURLAUTH command for any mailbox they could name, even without read access on it. This would allow reading mail from mailboxes...

CVE-2026-47999

creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kexd524...

CVE-2026-30623

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling...

CVE-2026-40954

creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:34+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptyijcs2m...

CVE-2026-40958

creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:30+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqppttx5vr2w...

CVE-2026-33443

creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:27+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptrjhnh2e...

CVE-2026-12997

creationtimestamp| type| source ---|---|--- 2026-07-15 20:57:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpmceqwmg2m 2026-07-16 06:01:01+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mqqkp3t52c2u...

CVE-2026-15746

creationtimestamp| type| source ---|---|--- 2026-07-15 20:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpls3eges2s...

CVE-2026-55954

creationtimestamp| type| source ---|---|--- 2026-07-15 20:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqplor74bq2v...

CVE-2026-62350

creationtimestamp| type| source ---|---|--- 2026-07-15 20:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqplfhvrnj2i...

CVE-2026-8055

creationtimestamp| type| source ---|---|--- 2026-07-15 20:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl3db3ao22...

CVE-2026-46485

creationtimestamp| type| source ---|---|--- 2026-07-15 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj5fzol22x 2026-07-15 21:20:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnlvlhdp2m...

CVE-2026-62349

creationtimestamp| type| source ---|---|--- 2026-07-15 20:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj4yfdnr2e 2026-07-15 20:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpm4f6fxh2n...

CVE-2026-20296

creationtimestamp| type| source ---|---|--- 2026-07-15 19:10:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpgdzh2ib22 2026-07-16 02:11:53+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i 2026-07-16 06:26:56+00:00| seen|...

CVE-2026-62389

creationtimestamp| type| source ---|---|--- 2026-07-15 19:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpftgvi3n2h 2026-07-15 19:34:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqphpekd522l...

GHSA-36QX-FR4F-26G5

creationtimestamp| type| source ---|---|--- 2026-07-15 19:00:46+00:00| seen| https://gist.github.com/rodrigo-arias/52b0854a2e57501b04c4c8d6728a34ea...

SUSE CVE-2026-61863

ImageMagick before 7.1.2-26 and 6.x before 6.9.13-51 contains a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak...

Use of Non-Canonical URL Paths for Authorization Decisions

Overview Affected versions of this package are vulnerable to Use of Non-Canonical URL Paths for Authorization Decisions in the cleanUsername process. An attacker can gain unauthorized access to another user's files by registering a username that normalizes to the same home directory as an existin...

Use of Non-Canonical URL Paths for Authorization Decisions

Overview Affected versions of this package are vulnerable to Use of Non-Canonical URL Paths for Authorization Decisions in the cleanUsername process. An attacker can gain unauthorized access to another user's files by registering a username that normalizes to the same home directory as an existin...

Use of Non-Canonical URL Paths for Authorization Decisions

Overview Affected versions of this package are vulnerable to Use of Non-Canonical URL Paths for Authorization Decisions in the cleanUsername process. An attacker can gain unauthorized access to another user's files by registering a username that normalizes to the same home directory as an existin...