CVE-2026-66421

creationtimestamp| type| source ---|---|--- 2026-07-30 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvk677xxf2y 2026-07-31 01:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvqw2elck2a 2026-07-31 12:44:04+00:00| seen|...

CVE-2026-68502

creationtimestamp| type| source ---|---|--- 2026-07-30 22:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgudm3vn23 2026-07-30 22:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvh244ih32q 2026-07-30 23:04:15+00:00| seen|...

CVE-2026-68500

creationtimestamp| type| source ---|---|--- 2026-07-30 22:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvgu5cuil2l...

CVE-2026-67206

creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o 2026-08-02 08:02:13+00:00| seen| https://t.me/GithubRedTeam/96249 2026-08-03 02:07:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96...

CVE-2026-67594

Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers ca...

CVE-2026-67527

creationtimestamp| type| source ---|---|--- 2026-07-30 20:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dcic74hmkaf3g...

CVE-2026-67208

creationtimestamp| type| source ---|---|--- 2026-07-30 20:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrvadilv6w2e 2026-07-31 12:38:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwxuttciu2q...

CVE-2026-67594

creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7x7eag22 2026-07-30 21:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdib25zu2j...

CVE-2026-12946

creationtimestamp| type| source ---|---|--- 2026-07-30 20:02:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrva7vsnl622...

CVE-2026-65834 Capsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.8, CapsuleConfiguration.Spec.NodeMetadata.ForbiddenLabels.Regex and CapsuleConfiguration.Spec.NodeMetadata.ForbiddenAnnotations.Regex were not validated by the configuration admission webhook, allowing a Cluster...

EUVD-2026-51291

Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController that allows authenticated attackers to create arbitrary PHP files by exploiting missing file extension validation in the createfile and save functions. Attackers with the filemanagermkfile capability...

CVE-2026-66416

Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform state-changing actions on behalf of authenticated users by excluding the Laravel VerifyCsrfToken middleware from the global middleware stack in app/Http/Kernel.php. Attackers can...

CVE-2026-67594

Summary (CVE-2026-67594): Spikster (commit e1cdf8c) contains a missing authentication flaw in the API route group due to the CipiAuth middleware being registered but never applied. This allows unauthenticated remote attackers to access approximately 50 API endpoints, enabling enumeration and prov...

CVE-2026-67594 Spikster Missing Authentication via API Route Group

Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the unattached CipiAuth middleware, which is registered but never applied to any route in the API routing configuration. Attackers ca...

CVE-2026-51268

creationtimestamp| type| source ---|---|--- 2026-07-30 18:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv477ouem2k 2026-07-30 20:01:35+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrva6zooad2n...

CVE-2026-66756

creationtimestamp| type| source ---|---|--- 2026-07-30 18:13:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/cv5imuadgzan6...

CVE-2026-54365

creationtimestamp| type| source ---|---|--- 2026-07-30 18:06:31+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mruzrbg7qk2o...

CVE-2026-13435

creationtimestamp| type| source ---|---|--- 2026-07-30 17:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz32o3ut2z 2026-07-30 20:01:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva7pcn7k2e...

CVE-2026-12940

creationtimestamp| type| source ---|---|--- 2026-07-30 17:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruz2zcjdt2z 2026-07-30 18:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mruzhq4nk622 2026-07-30 18:50:13+00:00| seen|...

EUVD-2026-51199

Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform state-changing actions on behalf of authenticated users by excluding the Laravel VerifyCsrfToken middleware from the global middleware stack in app/Http/Kernel.php. Attackers can...