MINI-FFFH-R733-8XMM

Bulletin has no description...

MINI-2HR9-5WPH-X3WJ

Bulletin has no description...

MINI-F6GW-6JFH-9883

Bulletin has no description...

MINI-28H7-MGPJ-9PJQ

Bulletin has no description...

MINI-R2P2-6H9R-4V6J

Bulletin has no description...

CGA-4CC2-C878-8JM9

Bulletin has no description...

CGA-VVQX-MMJR-R467

Bulletin has no description...

CVE-2026-15416

creationtimestamp| type| source ---|---|--- 2026-07-14 11:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5koihty24 2026-07-20 04:40:33+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2i2vucuw2g 2026-07-20 04:40:35+00:00| seen|...

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate user accounts and validate stolen credentials in Microsoft Entra ID environments, without ever...

CVE-2026-15389 Inadequate access control in Sesame Time session management

A vulnerability relating to insufficient access control has been identified in the session management of the Sesame Time web application and its REST v3 API. The flaw lies in the fact that the system uses the session identifier USID as the sole validation mechanism, without verifying whether that...

CVE-2026-15678

creationtimestamp| type| source ---|---|--- 2026-07-14 10:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlx4rhw3f2t 2026-07-19 20:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzmkpfopr2m...

ECHO-A273-202B-9560

Bulletin has no description...

CGA-2WJH-6CCQ-FFGC

Bulletin has no description...

CGA-WW88-C2FM-562F

Bulletin has no description...

CVE-2026-9561

creationtimestamp| type| source ---|---|--- 2026-07-14 08:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlt3z6gnm2e...

ECHO-D213-6CA4-3322

Bulletin has no description...

ECHO-6A06-58A4-E150

Bulletin has no description...

ECHO-D087-E069-12CE

Bulletin has no description...

ECHO-D227-33D7-30BD

Bulletin has no description...

CVE-2026-13699 Databroker 0.6.1 PublishValue missing data_point panic

In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional datapoint field in PublishValueRequest. When a request contains a valid signalid but omits datapoint, the server directly calls unwrap on request.datapoint,...