CVE-2026-48834

creationtimestamp| type| source ---|---|--- 2026-08-05 15:13:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/fcpo4l6tlfssz...

GHSA-3R7G-Q6CG-Q2VX

creationtimestamp| type| source ---|---|--- 2026-08-05 14:31:53+00:00| seen| https://gist.github.com/alon710/33c3bff7f99aec7fdcddc66966d519a0...

CVE-2026-67623

creationtimestamp| type| source ---|---|--- 2026-08-05 14:15:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jze72nb5aends...

CVE-2026-17613 CVE-2026-17613

Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscribe to WebSocket events, enabling full data exfiltration and data poisoning...

MINI-7P39-6M5M-87MV

Bulletin has no description...

MINI-2PFW-V7WP-WXWG

Bulletin has no description...

MINI-MW36-WG87-QP73

Bulletin has no description...

MINI-83GP-X62X-R329

Bulletin has no description...

MINI-Q6MW-VG6J-752W

Bulletin has no description...

MINI-9W2C-228R-887G

Bulletin has no description...

MINI-C5CG-CX46-QFG3

Bulletin has no description...

MINI-8946-2PXP-4753

Bulletin has no description...

MINI-2W8X-V6RM-FJV5

Bulletin has no description...

MINI-4XF7-5CPV-MF2V

Bulletin has no description...

MINI-8VXJ-H938-55C3

Bulletin has no description...

MINI-6MV7-7G54-37J9

Bulletin has no description...

MINI-FQ24-QFJH-6WV4

Bulletin has no description...

CVE-2026-8384

A flaw was found in Eclipse Jetty. An attacker could craft a specially formed HTTP Uniform Resource Identifier URI that, when processed by Jetty, results in an unresolved path. While Jetty itself is not directly affected, web applications relying on Jetty to provide resolved paths may be confused...

CVE-2026-15573 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher

A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies PathMatcher does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick th...

CVE-2026-15573

A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies PathMatcher does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick th...