23665 matches found
CVE-2026-59863
creationtimestamp| type| source ---|---|--- 2026-07-16 16:45:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqroonmn3q2m...
CVE-2026-59866
creationtimestamp| type| source ---|---|--- 2026-07-16 15:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrluxqhxd2c 2026-07-16 16:50:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqroxp5a7c2p...
CVE-2026-15103
creationtimestamp| type| source ---|---|--- 2026-07-16 11:11:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr42qdens2n...
CVE-2026-2945
creationtimestamp| type| source ---|---|--- 2026-07-16 08:34:05+00:00| seen| https://gist.github.com/this1slwl/d975073bb5feaafd09d9383e8351fb55...
CVE-2026-15306
creationtimestamp| type| source ---|---|--- 2026-07-16 07:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqdhqwci2a...
CVE-2026-15697
A flaw was found in svgdotjs svg.js. A remote attacker could exploit a vulnerability in the EventTarget.on function, which improperly controls modifications to object prototype attributes. This could allow an attacker to manipulate object properties, potentially leading to unintended behavior or...
CVE-2026-13005
creationtimestamp| type| source ---|---|--- 2026-07-16 04:04:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqe6qijht22...
CVE-2026-15336
creationtimestamp| type| source ---|---|--- 2026-07-16 03:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqdexyob522...
CVE-2026-45533
creationtimestamp| type| source ---|---|--- 2026-07-16 00:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzaxejrl2h...
Linux Distros Unpatched Vulnerability : CVE-2026-49459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitizeroot, INPLACE: true could preserve...
CVE-2026-40956
creationtimestamp| type| source ---|---|--- 2026-07-15 22:00:32+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mqpptvxfo62x...
CVE-2026-8055
creationtimestamp| type| source ---|---|--- 2026-07-15 20:35:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl3db3ao22...
CVE-2026-52881
creationtimestamp| type| source ---|---|--- 2026-07-15 18:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpey6zobs2c...
CVE-2026-12382
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...
CVE-2026-12382 Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...
EUVD-2026-44739
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...
CVE-2026-12382 Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...
CVE-2026-12382
The CVE-2026-12382 issue affects the AAP Gateway Envoy proxy. The non-mTLS route to EDA event streams fails to remove the Subject header despite requestHeadersToRemove, allowing an unauthenticated attacker to spoof a Subject header that matches a legitimate client certificate DN and bypass mTLS t...
CVE-2026-12382
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed...