CVE-2026-50564

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Environment CRD exposes spec.runtime.podSpec and spec.builder.podSpec, which are merged into the Kubernetes pod specs fo...

CVE-2026-47342

creationtimestamp| type| source ---|---|--- 2026-06-10 17:43:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxb5o5xhv22 2026-06-11 01:36:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny3lqxsss2l...

CVE-2026-53469

creationtimestamp| type| source ---|---|--- 2026-06-10 16:28:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx4xxgkqi2p 2026-06-14 23:16:43+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvnldold2m 2026-06-15 16:31:49+00:00| seen|...

CVE-2026-53698

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set...

CVE-2026-53471

creationtimestamp| type| source ---|---|--- 2026-06-10 16:05:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx3omauls2q 2026-06-18 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mokn2xwxmc2k...

CVE-2026-53471

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

CGA-F896-7F7W-G7R5

Bulletin has no description...

CVE-2026-53471

CVE-2026-53471 affects the migration-planner project, specifically the agent-api middleware. The UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the source_id claim in JWTs against the requested source ID. Root cause: missing validation allows an authenticated attacker with ...

CVE-2026-53471 Migration-planner: agent api ignores jwt source_id claim

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

EUVD-2026-36031

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

CVE-2026-53471 Migration-planner: agent api ignores jwt source_id claim

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

CVE-2026-53471

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

CVE-2026-24067

Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.tool2. The helper validates connecting XPC clients by obtaining the client's process identifier and...

MINI-C3CR-M8H3-95FG

Bulletin has no description...

CVE-2026-8853

creationtimestamp| type| source ---|---|--- 2026-06-10 11:36:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwmo3qbcp27 2026-06-10 21:16:45+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnxn3fbuoc2o 2026-06-11 02:23:34+00:00| seen|...

MINI-V38H-7W55-V6Q3

Bulletin has no description...

CVE-2026-3018

The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpmlsubscriberid’ parameter in all versions up to, and including, 4.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

CVE-2026-9185

The 6Storage Rentals plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 2.22.0 via the userId parameter of the sixstoragegetuserinfo and sixstorageupdateprofile AJAX actions. This is due to the sixstoragegetUserInfo and...

ECHO-86DE-F803-EF79

Bulletin has no description...

EUVD-2026-35997

The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpmlsubscriberid’ parameter in all versions up to, and including, 4.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...