CVE-2026-18141: Improper Certificate Validation

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

PT-2026-66778

Name of the Vulnerable Software and Affected Versions aap-gateway affected versions not specified Description A flaw in the aap-gateway component of Ansible Automation Platform's Event-Driven Ansible EDA allows an unauthenticated remote attacker to bypass mutual Transport Layer Security mTLS...

CVE-2026-55499: Incorrect Authorization

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

GHSA-QQ9Q-XGM3-XV9G

creationtimestamp| type| source ---|---|--- 2026-07-30 22:32:21+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47 2026-07-31 00:01:11+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47...

CVE-2026-67206

creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o 2026-08-02 08:02:13+00:00| seen| https://t.me/GithubRedTeam/96249 2026-08-03 02:07:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96...

GHSA-4MRV-5P47-P938

creationtimestamp| type| source ---|---|--- 2026-07-30 17:31:24+00:00| seen| https://gist.github.com/alon710/f9483ca84f65ab9c98c78744c876def1...

SUSE CVE-2026-55670

ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to be provisioned under the original...

SUSE CVE-2026-62432

The EVTCHNOPexpandarray hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOPreset, resulting in dereferencing a NULL pointer...

SUSE CVE-2026-64556

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...

CVE-2026-53431

creationtimestamp| type| source ---|---|--- 2026-07-30 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrurapjhtq2v...

GHSA-C9HR-64H3-GXPC

creationtimestamp| type| source ---|---|--- 2026-07-30 15:31:53+00:00| seen| https://gist.github.com/alon710/5c4b46a299dac54e7caa99802f7ad9a8...

CVE-2026-5219

creationtimestamp| type| source ---|---|--- 2026-07-30 15:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jkscrvoddfroi...

CVE-2026-12722

creationtimestamp| type| source ---|---|--- 2026-07-30 14:51:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a42jzl4lwa5jo...

GHSA-PC2W-4MQ8-32QW

creationtimestamp| type| source ---|---|--- 2026-07-30 11:31:05+00:00| seen| https://gist.github.com/alon710/fcc454540fcb39a9b7c00ee410e47a9e...

CVE-2026-51239

creationtimestamp| type| source ---|---|--- 2026-07-30 10:28:14+00:00| seen| https://gist.github.com/programmervuln/83aa0ab12d6e698f6cdd44894988d019 2026-08-03 14:02:19+00:00| seen| https://gist.github.com/programmervuln/1de5553261befc79a74f17f3ab74930c...

CVE-2026-64465

A flaw was found in the Linux kernel's USB xHCI eXtensible Host Controller Interface driver. When a USB device with active stream endpoints is disconnected, the system attempts to free stream resources while holding a lock with interrupts disabled. This can lead to a situation where a function th...

Security update for xen

This update for xen fixes the following issues CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...

CLEANSTART-2026-WL45158 Security fixes in kubernetes-event-exporter 1.7-r0

Package kubernetes-event-exporter version 1.7-r0 fixes 2 vulnerabilities: CVE-2025-47911, CVE-2025-58190...

CLEANSTART-2026-HY96164 Security fixes in kubernetes-event-exporter-fips 1.7-r0

Package kubernetes-event-exporter-fips version 1.7-r0 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...

CLEANSTART-2026-RJ04514 Security fixes in kubernetes-event-exporter 1.7-r1

Package kubernetes-event-exporter version 1.7-r1 fixes 46 vulnerabilities: ghsa-wf45-q9ch-q8gh, ghsa-p77j-4mvh-x3m3, ghsa-gxhx-2686-5h9g, CVE-2026-41602, CVE-2026-33186...