CVE-2026-53245

creationtimestamp| type| source ---|---|--- 2026-07-01 02:43:55+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:51:37+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00| seen|...

CVE-2025-71371

creationtimestamp| type| source ---|---|--- 2026-07-01 02:39:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkihemk3x2u...

CVE-2026-35095

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:46+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-35095...

CVE-2026-44161

creationtimestamp| type| source ---|---|--- 2026-07-01 01:15:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpkdqg3p5g2l 2026-07-01 02:49:09+00:00| seen| https://jvn.jp/en/jp/JVN36011274 2026-07-14 04:03:03+00:00| seen|...

EUVD-2026-40430

Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...

CVE-2026-53861

creationtimestamp| type| source ---|---|--- 2026-07-01 00:01:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mpk7lklwuq2o 2026-07-10 23:07:01+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mqdba7kbfs2a...

CVE-2026-54262: Improper Handling of Insufficient Permissions or Privileges

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, a low-level user with the "Can submit translation" permission can create translations for any page, including those they do not have permissions for. This issue has been fixed in...

CVE-2026-56249

Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...

Directory Traversal

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

CVE-2026-44628

creationtimestamp| type| source ---|---|--- 2026-06-30 22:31:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2kv3ht624 2026-07-01 02:36:49+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01...

CVE-2026-58449

creationtimestamp| type| source ---|---|--- 2026-06-30 22:26:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk2bvcfe326 2026-07-02 20:45:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpovld6x432e...

CVE-2026-58446

creationtimestamp| type| source ---|---|--- 2026-06-30 22:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk227pixu2k...

CVE-2026-9132

creationtimestamp| type| source ---|---|--- 2026-06-30 22:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjzthy3j42u...

CVE-2026-37106

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php. NOTE: this is disputed by the Supplier because this is the intentional behavior when the product is configured for self-registration a non-default feature. Th...

CVE-2026-56320 Capgo - Org/App Scope Mismatch in Device Creation Endpoint

Capgo before 12.128.2 contains an authorization flaw in POST /private/createdevice that accepts a caller-supplied orgid parameter without validating it matches the target app's owner organization. Authenticated attackers can create device records for an application using a foreign organization...

CVE-2026-56320 Capgo - Org/App Scope Mismatch in Device Creation Endpoint

Capgo before 12.128.2 contains an authorization flaw in POST /private/createdevice that accepts a caller-supplied orgid parameter without validating it matches the target app's owner organization. Authenticated attackers can create device records for an application using a foreign organization...

CVE-2026-56320

Capgo before 12.128.2 contains an authorization flaw in POST /private/create_device that accepts a caller-supplied org_id without validating it matches the target app’s owner organization. Authenticated attackers can create device records for an application using a foreign organization identifier...

CVE-2026-56249 Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision

Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...

CVE-2026-56249 Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision

Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...

CVE-2026-56249 Capgo - Unauthorized Channel Overwrite and Ownership Takeover via POST /channel Name Collision

Capgo before 12.128.2 contains an authorization bypass vulnerability in the channel creation endpoint that allows authenticated users to overwrite existing channels by reusing their names. Attackers with app.createchannel permission can exploit a logic mismatch between existence validation and...