CVE-2026-11847 Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File Deletion

The iVEC-IEI Virtualization Edge Computer developed by IEI Integration Corp has a Path Traversal vulnerability, allowing authenticated remote attackers to exploit this vulnerability to create directories in unintended system paths...

Exploit for CVE-2026-8809

CVE-2026-8809 Advanced Custom Fields: Extended = 0.9.2.5 -...

CVE-2026-12059

creationtimestamp| type| source ---|---|--- 2026-06-12 07:46:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3araifho2j 2026-06-12 08:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3bju2pkl2i 2026-06-12 09:15:01+00:00| seen|...

CVE-2026-48613

creationtimestamp| type| source ---|---|--- 2026-06-12 07:36:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3a7dmx5p2r...

CVE-2026-9269

creationtimestamp| type| source ---|---|--- 2026-06-12 07:27:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo37opnhz42b...

CVE-2026-9266

creationtimestamp| type| source ---|---|--- 2026-06-12 07:09:11+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-594 2026-06-12 13:00:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mo3sb5ojvv2o 2026-06-12 13:47:00+00:00| seen|...

CVE-2026-44892

creationtimestamp| type| source ---|---|--- 2026-06-12 06:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo32tbuo3h2n 2026-06-12 07:41:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo3aic2bcn23...

CVE-2026-47365

creationtimestamp| type| source ---|---|--- 2026-06-12 05:12:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2y54jypy25 2026-06-12 07:19:28+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo37a36mva2v 2026-06-12 08:01:49+00:00| seen|...

CVE-2026-44250

creationtimestamp| type| source ---|---|--- 2026-06-12 01:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2k2oixus2w...

CVE-2026-11846

creationtimestamp| type| source ---|---|--- 2026-06-12 00:57:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10970-e4b21-2.html 2026-06-12 11:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3ll2uhvd2u 2026-06-12 13:11:57+00:00| seen|...

PT-2026-48972

A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the controller did not remove a user-supplied id field before saving the submitted data. In CakePHP, supplying a primary key in the save data can cause a create followed by save...

PT-2026-49068

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.7 Description An authenticated user can create a public share for an arbitrary path that does not yet exist. The system stores the share record without verifying the file's existence. Consequently, if a file...

PT-2026-48937

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.6.0 through 11.6.1 Mattermost versions 11.5.0 through 11.5.4 Mattermost versions 10.11.0 through 10.11.16 Description An issue exists where the system fails to enforce the PermissionInviteUser check when setting...

PT-2026-48985

Name of the Vulnerable Software and Affected Versions Discourse versions 2026.1.0-latest through 2026.1.3 Discourse versions 2026.3.0-latest through 2026.3.0 Discourse versions 2026.4.0-latest through 2026.4.0 Description Four authorization and information disclosure issues exist within the chat...

CVE-2026-45175

creationtimestamp| type| source ---|---|--- 2026-06-11 22:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2b2ibw7o23...

CVE-2026-53816

creationtimestamp| type| source ---|---|--- 2026-06-11 22:07:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo2afnrmep23...

CVE-2026-47171

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.3, a normal user can create a reminder whose message contains @everyone or @here. When the reminder triggers, the bot sends the stored message back into the channel without suppressing...

CVE-2026-47173

Quest Bot (Discord bot) prior to v1.0.3 is vulnerable: a normal user can create a ticket with a reason containing @everyone/@here, user or role mentions, causing the attacker-controlled reason to be posted in the new ticket channel if mentions are not suppressed. If the bot has permission to use ...

CVE-2026-12029

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 03:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo2qrlmr5g2p 2026-06-12 05:25:16+00:00|...

CVE-2026-12016

creationtimestamp| type| source ---|---|--- 2026-06-11 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260612 2026-06-12 08:01:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo3bluoesw2u 2026-06-15 18:00:00+00:00|...