GHSA-3F7W-8RR8-F37F

creationtimestamp| type| source ---|---|--- 2026-08-04 08:31:39+00:00| seen| https://gist.github.com/alon710/e29226c330282c9416a9859028fe2877 2026-08-17 15:00:04+00:00| seen| https://t.me/bdufstecru/3388 2026-08-18 00:00:28+00:00| published-proof-of-concept| https://t.me/bdufstecru/3388...

CVE-2026-054088

creationtimestamp| type| source ---|---|--- 2026-08-04 08:29:03+00:00| seen| https://gist.github.com/Correctover/96443c637dcce0f9133003cf3a10990a...

GHSA-524P-V8JX-3FW6

creationtimestamp| type| source ---|---|--- 2026-08-04 08:29:03+00:00| seen| https://gist.github.com/Correctover/96443c637dcce0f9133003cf3a10990a...

CVE-2026-16881

creationtimestamp| type| source ---|---|--- 2026-08-04 06:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/23foeajdjcf52...

GHSA-P538-C434-8V24

creationtimestamp| type| source ---|---|--- 2026-08-04 06:32:33+00:00| seen| https://gist.github.com/alon710/7c801d57bbc1100bfc82173b2522a257...

CVE-2026-67610

creationtimestamp| type| source ---|---|--- 2026-08-04 06:08:18+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msadx5y3ju2i...

CVE-2026-17614

creationtimestamp| type| source ---|---|--- 2026-08-04 04:10:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bysgnrne72avf...

GHSA-MFX4-HV73-Q22V

creationtimestamp| type| source ---|---|--- 2026-08-04 03:31:26+00:00| seen| https://gist.github.com/alon710/b3523524be79c42fa548f91ed3953ea3...

EUVD-2026-52486

Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requests to the drafts endpoint using only...

CVE-2026-69247

creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...

CVE-2026-69095

creationtimestamp| type| source ---|---|--- 2026-08-04 00:01:21+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3ms7phgudky2g...

Metabase 0.55.0 < 0.58.15.1 / 0.59.x < 0.59.12 / 0.60.x < 0.60.7 / 0.61.x < 0.61.2 / 1.55.0 < 1.58.15.1 / 1.59.x < 1.59.12 / 1.60.x < 1.60.7 / 1.61.x < 1.61.2 RCE (CVE-2026-59826)

The version of Metabase installed on the remote host is 0.55.0 through 0.58.15, 0.59.x prior to 0.59.12, 0.60.x prior to 0.60.7, 0.61.x prior to 0.61.2, 1.55.0 through 1.58.15, 1.59.x prior to 1.59.12, 1.60.x prior to 1.60.7, or 1.61.x prior to 1.61.2. It is, therefore, affected by a remote code...

CVE-2026-48317

creationtimestamp| type| source ---|---|--- 2026-08-03 23:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzx7udf2f 2026-08-06 16:16:14+00:00| seen| https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic...

CVE-2026-67616

Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requests to the drafts endpoint using only...

CVE-2026-66065

creationtimestamp| type| source ---|---|--- 2026-08-03 22:02:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gmxn7ldiwvsva...

GHSA-CQ5V-8Q36-5273

creationtimestamp| type| source ---|---|--- 2026-08-03 21:32:44+00:00| seen| https://gist.github.com/alon710/cb22e8e296a36049522556dbfd0c36bc...

CVE-2026-18736

Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolution enabled. Attackers can submit URLs pointing to public...

CVE-2026-67598

creationtimestamp| type| source ---|---|--- 2026-08-03 20:55:02+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7f2blmgt2q 2026-08-03 21:02:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7fgvrgmd2i 2026-08-07 10:04:24+00:00|...

EUVD-2026-52427

Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolution enabled. Attackers can submit URLs pointing to public...

CVE-2026-18736 Shlink Server-Side Request Forgery via Short URL Title Auto-Resolution

Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a crafted long URL during short URL creation with title auto-resolution enabled. Attackers can submit URLs pointing to public...