CVE-2026-67436 Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* plugins

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In 6.0.0 and earlier, the redfish- plugins built request URLs by concatenating an operator-supplied base URL with response-supplied @odata.id links, allowing a malicious or...

CVE-2026-65888

creationtimestamp| type| source ---|---|--- 2026-07-29 15:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsbha6yr42v 2026-07-29 18:00:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiy5n5mo24...

MINI-6JXQ-QV9R-6QV4

Bulletin has no description...

MINI-P4QQ-WG77-H3FV

Bulletin has no description...

CVE-2026-65923

creationtimestamp| type| source ---|---|--- 2026-07-29 14:00:04+00:00| seen| https://t.me/truesecator/8453 2026-07-29 18:26:43+00:00| seen| https://gist.github.com/KenjiChao/6ccd539d859069efbde44630121c5669...

MINI-99QP-VCGR-9VWQ

Bulletin has no description...

MINI-VXRC-V8CQ-GXMJ

Bulletin has no description...

MINI-JPPF-P7PV-MVQ4

Bulletin has no description...

MINI-Q2R2-G28F-472X

Bulletin has no description...

MINI-3CR8-PM43-MJ5G

Bulletin has no description...

MINI-5QGR-GF32-J4P5

Bulletin has no description...

MINI-R6FV-C4G8-2W72

Bulletin has no description...

MINI-27XV-37H4-HWMQ

Bulletin has no description...

MINI-J893-P86C-J2QQ

Bulletin has no description...

ECHO-2055-6C03-D4B2

Bulletin has no description...

CVE-2026-44943

CVE-2026-44943 is a path traversal in open-iscsi up to commit 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e, allowing remote MITM attackers to create root-owned files outside the database and inject lines into the record. Affected product: open-iscsi. Root cause: improper limitation of a pathname to a...

CVE-2026-5060

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14. This is due to the stmlmsdeletecover function lacking ownership validation on the fileid parameter before...

CVE-2026-64357

No description is available for this CVE...

CVE-2026-59309

creationtimestamp| type| source ---|---|--- 2026-07-29 10:28:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrpp2orks23 2026-07-29 12:48:21+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrrxjfggfg2z 2026-07-29 13:00:55+00:00| seen|...

CVE-2026-5060

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14. This is due to the stmlmsdeletecover function lacking ownership validation on the fileid parameter before...