CVE-2026-60807

creationtimestamp| type| source ---|---|--- 2026-07-23 17:47:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60738

creationtimestamp| type| source ---|---|--- 2026-07-23 17:46:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

GO-2026-5987 Insecure enrollment token TTL in nebula-mesh in github.com/forgekeep/nebula-mesh

The nebula-mesh Web UI host creation ignores the configured enrollment token TTL and instead mints 24-hour bearer enrollment tokens. This can lead to tokens remaining valid for longer than intended, increasing the window of opportunity for an attacker to use an intercepted token...

CVE-2026-60653

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:44+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60641

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60639

creationtimestamp| type| source ---|---|--- 2026-07-23 17:22:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60535

creationtimestamp| type| source ---|---|--- 2026-07-23 17:18:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 20:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrg6cyfiqz2y 2026-07-29 10:07:06+00:00| seen|...

CVE-2026-60527

creationtimestamp| type| source ---|---|--- 2026-07-23 17:18:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60440

creationtimestamp| type| source ---|---|--- 2026-07-23 17:16:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60419

creationtimestamp| type| source ---|---|--- 2026-07-23 17:15:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-30 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrudywyihi2y...

CVE-2026-65906

creationtimestamp| type| source ---|---|--- 2026-07-23 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdcvtdw6i2j 2026-08-18 15:50:05+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mtekysg2w624...

CVE-2026-65699 AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target runid in the request body without ownership verification. The AgentCRUD.createtask and...

CVE-2026-65699 AgentGPT 1.0.0 Authorization Bypass via Agent Task Creation

AgentGPT through 1.0.0 contains an authorization bypass through user-controlled key vulnerability that allows authenticated users to attach tasks to another user's agent run by supplying a target runid in the request body without ownership verification. The AgentCRUD.createtask and...

CVE-2026-60302

creationtimestamp| type| source ---|---|--- 2026-07-23 16:51:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrovnxbcnh2y...

CVE-2026-47063

creationtimestamp| type| source ---|---|--- 2026-07-23 16:46:49+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-65916

CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDoma...

CVE-2026-65916 CyberPanel Missing Authorization in cancelBackupCreation Handler

CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDoma...

CVE-2026-65916 CyberPanel Missing Authorization in cancelBackupCreation Handler

CyberPanel through 1.9.1, fixed in commit b198460, contains a missing authorization vulnerability in the cancelBackupCreation handler that allows authenticated users to kill, delete, and corrupt other tenants' backups. Attackers can send crafted POST requests with arbitrary backupCancellationDoma...

K000162387: PostgreSQL vulnerability CVE-2026-6476

Security Advisory Description SQL injection in PostgreSQL pgcreatesubscriber allows an attacker with pgcreatesubscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pgcreatesubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18...

CVE-2026-64813

creationtimestamp| type| source ---|---|--- 2026-07-23 14:58:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrd3xvfemu2e 2026-07-29 03:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrqx232sos2y...