CVE-2026-44848

creationtimestamp| type| source ---|---|--- 2026-05-29 00:28:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxbqmil4d2e 2026-08-20 03:00:05+00:00| seen| Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE 2026-08-21 00:00:11+00:00| published-proof-of-concept|...

CVE-2026-44881

creationtimestamp| type| source ---|---|--- 2026-05-29 00:23:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmxbhnzpaf2w 2026-06-11 19:22:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnzx6hyanz2x 2026-06-11 19:27:32+00:00| seen|...

PT-2026-44932

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.3 Description Dokploy constructs shell commands using JavaScript template literals and executes them via the child process.exec function, which runs through /bin/sh -c. User-supplied data, specifically branch...

CVE-2026-46827

creationtimestamp| type| source ---|---|--- 2026-05-28 23:41:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx74m6puz2p 2026-06-04 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngddmeksl25...

CVE-2026-46828

creationtimestamp| type| source ---|---|--- 2026-05-28 23:33:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6omthyz2j 2026-06-04 01:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnggovmo362s...

CVE-2026-46826

creationtimestamp| type| source ---|---|--- 2026-05-28 23:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6isfqoe2x 2026-06-03 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngbnvoka32o...

CVE-2026-35277

creationtimestamp| type| source ---|---|--- 2026-05-28 22:34:37+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmx3ennnnk23 2026-06-04 01:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mngieinue22s...

CVE-2026-8809 Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability exists due to the aftervalidatesavepost function unconditionally trusting the attacker-controlled acfpostid POST...

DEBIAN-CVE-2026-49299

In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names. The mismatched names evaluate as allowed under the default policy, permitting a project reader to create and update tags...

CVE-2026-9645

creationtimestamp| type| source ---|---|--- 2026-05-28 22:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzi3bahs2w 2026-05-28 23:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6g46htp2v 2026-08-12 08:00:07+00:00| seen|...

CVE-2026-33590

creationtimestamp| type| source ---|---|--- 2026-05-28 21:40:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwydw5s2c2n 2026-06-12 12:43:17+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mo3rd3yvp72n 2026-06-16 00:48:01+00:00| seen|...

CVE-2026-9658

creationtimestamp| type| source ---|---|--- 2026-05-28 21:33:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwxwk62fg2u...

CVE-2026-33462

creationtimestamp| type| source ---|---|--- 2026-05-28 21:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxdlxmtz2e 2026-05-29 14:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmyrmbdqgh2a...

CVE-2026-47336

creationtimestamp| type| source ---|---|--- 2026-05-28 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwzzrkyp2r 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 01:15:42+00:00| seen...

CVE-2026-35277

Vulnerability in Oracle REST Data Services component: Core. Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle REST Data Services. Successful attacks of this vulnerability can...

CVE-2026-47337

creationtimestamp| type| source ---|---|--- 2026-05-28 21:14:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwwuie44e2k 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-02 06:56:24+00:00| seen...

CVE-2026-42998

creationtimestamp| type| source ---|---|--- 2026-05-28 21:13:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmwwsrnh6g2z...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

CVE-2026-44850 Portainer: Bind-mount restriction bypass via HostConfig.Mounts

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, 2.39.2, and 2.41.0, Portainer offers an environment-level Disable bind mounts for...

CVE-2026-49127

creationtimestamp| type| source ---|---|--- 2026-05-28 21:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmww4f2zpy2k 2026-05-28 21:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwyscpvqc2k...