OESA-2026-2479 postgresql security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

CVE-2026-9243

creationtimestamp| type| source ---|---|--- 2026-05-29 09:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmybmmvksg2k...

CVE-2025-14042

creationtimestamp| type| source ---|---|--- 2026-05-29 09:23:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy7m2nivs2x...

CVE-2026-6275

creationtimestamp| type| source ---|---|--- 2026-05-29 09:17:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy7d45tjm2e...

CVE-2025-11993

creationtimestamp| type| source ---|---|--- 2026-05-29 09:13:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmy73gep4d2e 2026-05-29 12:20:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmyjjk3q7n2y 2026-05-31 03:01:34+00:00| seen|...

CVE-2026-3655

creationtimestamp| type| source ---|---|--- 2026-05-29 09:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmy6e4lrqw2y 2026-05-29 09:00:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116657044700520372 2026-05-29 09:49:06+00:00| seen|...

Bluetooth: hci_conn: fix potential UAF in create_big_sync

...

CVE-2026-49211

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:34+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzgmdwar2x...

CVE-2026-49208

creationtimestamp| type| source ---|---|--- 2026-05-29 07:32:21+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmxzg7aobq2u...

CVE-2026-8732

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

EUVD-2026-33251

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

CVE-2026-8732 WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action

The WP Maps Pro plugin for WordPress is vulnerable to Privilege Escalation via Administrator Account Creation in all versions up to, and including, 6.1.0. This is due to the wpgmptempaccessajax AJAX action being registered with wpajaxnopriv and protected only by a nonce check using the...

CVE-2026-8732

Summary of CVE-2026-8732 : The WP Maps Pro WordPress plugin (≤ 6.1.0) is vulnerable to unauthenticated privilege escalation via Administrator Account Creation. The root cause is the wpgmp_temp_access_ajax action registered for both authenticated and unauthenticated requests, protected only by a p...

CVE-2026-7480

creationtimestamp| type| source ---|---|--- 2026-05-29 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmxka2lxrs2e 2026-05-29 03:00:36+00:00| seen| https://infosec.exchange/users/offseq/statuses/116655628380153994 2026-05-29 05:09:25+00:00| seen|...

CVE-2006-3918

creationtimestamp| type| source ---|---|--- 2026-05-29 03:00:06+00:00| seen| Telegram/6s3VRd-d5V93Kqqbw2bpShp3KD9FSCashxK24K-SibeAsU...

SUSE CVE-2026-46111

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix potential UAF in createbigsync Add hciconnvalid check in createbigsync to detect stale connections before proceeding with BIG creation. Handle the resulting -ECANCELED in createbigcomplete and re-validate...

SUSE CVE-2026-46117

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARNON then go on to corrupt the kernel. Just...

CVE-2026-10057

creationtimestamp| type| source ---|---|--- 2026-05-29 01:15:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10942-2b78b-2.html...

CVE-2026-10058

creationtimestamp| type| source ---|---|--- 2026-05-29 01:15:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10942-2b78b-2.html...

EUVD-2026-33165

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability exists due to the aftervalidatesavepost function unconditionally trusting the attacker-controlled acfpostid POST...