CVE-2026-48769

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted Incus-Image-Hash header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches th...

ROOT-APP-NPM-CVE-2026-6402 CVE-2026-6402 in webpack-dev-server - Patched by Root

Root has patched CVE-2026-6402 in the webpack-dev-server package for Root:npm. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-26007 CVE-2026-26007 in cryptography - Patched by Root

Root has patched CVE-2026-26007 in the cryptography package for Root:PyPI. Multiple fixed versions available...

CVE-2026-15580

creationtimestamp| type| source ---|---|--- 2026-08-21 11:55:28+00:00| seen| https://infosec.exchange/users/edwardk/statuses/117133366257032689 2026-08-21 11:55:58+00:00| seen| https://bsky.app/profile/e-kiledjian.bsky.social/post/3mtlpcvhj4s24 2026-08-21 13:00:40+00:00| seen|...

CVE-2026-18356

The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 contains a bypass in its username denylist mechanism. The plugin fails to compare login attempts against the denylist case-insensitively and does not account for the account's email address , allowing an account that an administrator...

ROOT-OS-DEBIAN-11-CVE-2026-56412 CVE-2026-56412 in expat - Patched by Root

Root has patched CVE-2026-56412 in the expat package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-46147 CVE-2026-46147 in linux - Patched by Root

Root has patched CVE-2026-46147 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-52942 CVE-2026-52942 in linux - Patched by Root

Root has patched CVE-2026-52942 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-53053 CVE-2026-53053 in linux - Patched by Root

Root has patched CVE-2026-53053 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-40030 CVE-2025-40030 in linux - Patched by Root

Root has patched CVE-2025-40030 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-21944 CVE-2025-21944 in linux - Patched by Root

Root has patched CVE-2025-21944 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23351 CVE-2026-23351 in linux - Patched by Root

Root has patched CVE-2026-23351 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2025-37796 CVE-2025-37796 in linux - Patched by Root

Root has patched CVE-2025-37796 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23270 CVE-2026-23270 in linux - Patched by Root

Root has patched CVE-2026-23270 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23447 CVE-2026-23447 in linux - Patched by Root

Root has patched CVE-2026-23447 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-74970

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics component...

MINI-F7XG-MW33-JVWX

Bulletin has no description...

WordPress Clearfy plugin < 2.4.3 - Admin+ PHP Object Injection via Settings Import vulnerability

Admin+ PHP Object Injection via Settings Import vulnerability discovered by Omar Elshopky in WordPress Plugin Clearfy Cache versions 2.4.3...

EUVD-2026-62969

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which deserializes stored da...

cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)

cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting XSS...