CVE-2026-10854

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxies belonging to other organisations. The event template builder loaded all enabled galaxies without applying organisation or distribution-based access restrictions, potentially...

EUVD-2026-34257

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxies belonging to other organisations. The event template builder loaded all enabled galaxies without applying organisation or distribution-based access restrictions, potentially...

CVE-2026-10854 Unauthorized exposure of private galaxies in MISP event template creation

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxies belonging to other organisations. The event template builder loaded all enabled galaxies without applying organisation or distribution-based access restrictions, potentially...

CVE-2026-47319

creationtimestamp| type| source ---|---|--- 2026-06-04 10:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhhjizpk72x...

Security Bulletin: IBM Event Processing is vulnerable to a CRLF injection vulnerability in Netty (CVE-2025-67735)

Summary IBM Event Processing is vulnerable to a CRLF injection vulnerability in Netty io.netty.handler.codec.http.HttpRequestEncoder. An attacker could exploit this vulnerability to perform HTTP request smuggling against affected Event Processing services that use the vulnerable Netty component...

SUSE CVE-2026-46257

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when readcurrenttimer is called on ARM32 platforms where the SP804 is not registered as the schedclock. On SP804, the delay timer shares the same clkevt instance with schedclock. On so...

PT-2026-46224

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxies belonging to other organisations. The event template builder loaded all enabled galaxies without applying organisation or distribution-based access restrictions, potentially...

MISP 安全漏洞

MISP is a set of open-source software solutions developed by MISP. This product is used for collecting, storing, distributing, and sharing network security metrics. It also includes functions such as analysis of threats to network security and malware analysis. MISP has a security vulnerability...

PT-2026-46225

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description An authorization flaw exists in the Event Template Importer overwrite workflow. When importing an event template in overwrite mode, the application verifies if a matching template exists but fai...

Acer M6E 安全漏洞

The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability. This vulnerability stems from a broadcast event that allows malware to overwrite the device’s default mobile device management endpoint address, potentially...

MISP 安全漏洞

MISP is a set of open-source software solutions developed by MISP. This product is used for collecting, storing, distributing, and sharing network security metrics. It also includes functions such as analysis of threats to network security and malware analysis. MISP has a security vulnerability,...

GHSA-2J2X-HQR9-3H42

creationtimestamp| type| source ---|---|--- 2026-06-03 21:10:57+00:00| seen| https://gist.github.com/alon710/c225f7d330b57c3901ac40c39f91bf81 2026-06-25 02:34:06+00:00| seen| https://gist.github.com/konard/fbf16282aa667cba7898796d06c29d42 2026-06-25 02:49:13+00:00| seen|...

CVE-2026-26825

creationtimestamp| type| source ---|---|--- 2026-06-03 20:45:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfy2fprcb2u...

CVE-2026-46257

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when readcurrenttimer is called on ARM32 platforms where the SP804 is not registered as the schedclock. On SP804, the delay timer shares the same clkevt instance with schedclock. On so...

CVE-2026-46257

CVE-2026-46257 concerns the Linux kernel SP804 timer driver on ARM32. The issue occurs when the delay timer shares the same clkevt instance with sched_clock; if sp804_clocksource_and_sched_clock_init runs with use_sched_clock != 1, sched_clkevt may be uninitialized, and read_current_timer() ends ...

CVE-2026-46257 clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registered as the sched_clock.

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when readcurrenttimer is called on ARM32 platforms where the SP804 is not registered as the schedclock. On SP804, the delay timer shares the same clkevt instance with schedclock. On so...

CVE-2026-35081

creationtimestamp| type| source ---|---|--- 2026-06-03 13:10:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6ny6u772v 2026-06-03 21:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfywe2uj72n 2026-06-09 00:37:07+00:00| seen|...

CVE-2026-35085

creationtimestamp| type| source ---|---|--- 2026-06-03 12:51:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf5lbwf2m2m 2026-06-08 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnsib2j5av2e 2026-07-03 23:47:31+00:00| seen|...

CVE-2026-49975

creationtimestamp| type| source ---|---|--- 2026-06-03 12:19:44+00:00| seen| https://bsky.app/profile/hmier.bsky.social/post/3mnf3sod7zs24 2026-06-03 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1898 2026-06-03 21:00:04+00:00| seen| https://t.me/GithubRedTeam/87196...

CVE-2026-47065

creationtimestamp| type| source ---|---|--- 2026-06-03 11:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf24u465g2o 2026-06-04 03:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngn33wfwh2l 2026-06-04 06:58:35+00:00| seen|...