CVE-2026-66139

OpenStack Zaqar

CVE-2026-66139

OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXTRA-SPEC header when a UUID is known...

SUSE CVE-2026-10050

In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...

CVE-2026-13464

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-15611

creationtimestamp| type| source ---|---|--- 2026-07-24 02:21:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrec5kav6v2p...

GHSA-2X63-GW47-W4MM vulnerabilities

Vulnerabilities for packages: pghero, gitlab-rails-ce, ruby4.0-rails, pghero-fips...

CVE-2026-1673

creationtimestamp| type| source ---|---|--- 2026-07-24 01:45:29+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrea5jo2pq24...

MINI-8X96-FQ98-XJ6M

Bulletin has no description...

MINI-38Q8-PPCR-CFRX

Bulletin has no description...

MINI-CCC9-PW4Q-GQ8M

Bulletin has no description...

MINI-2R5M-HFCH-R5VV

Bulletin has no description...

MINI-8VR2-FV87-7M43

Bulletin has no description...

MINI-MHHM-RWRM-M6GQ

Bulletin has no description...

CVE-2026-50517

creationtimestamp| type| source ---|---|--- 2026-07-24 00:24:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mre3lxvk4l2q 2026-07-24 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116973425505418571 2026-07-24 06:00:28+00:00| seen|...

CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability

...

PT-2026-64319

Name of the Vulnerable Software and Affected Versions lakeFS versions prior to 1.83.0 commit 71a45ee Description An authentication bypass exists in the '/setup comm prefs' endpoint. This allows unauthenticated attackers to overwrite operator metadata, such as email, name, and company, after the...

PT-2026-64233

Name of the Vulnerable Software and Affected Versions OpenStack Zaqar versions prior to 22.0.1 Description An authentication bypass exists when a UUID is known, allowing unauthorized access via the EXTRA-SPEC header. Recommendations Update to a version newer than 22.0.0...

PT-2026-64344

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc3 Description An issue exists in the x86 memory management where broadcast TLB flushing remains enabled on AMD CPUs that support INVLPGB even when the system is booted with the nopcid option. This occurs because th...

PT-2026-64303

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec...

openSUSE 16 Security Update : python-pyasn1 (openSUSE-SU-2026:21392-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21392-1 advisory. - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. - CVE-2026-59885: quadratic complexity in...