CVE-2026-36214

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-14 00:00:19+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-15 00:00:31+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-16 12:00:07+00:00| seen|...

GHSA-QV97-83W4-FF86

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92598 2026-07-14 00:00:10+00:00| seen| https://t.me/GithubRedTeam/92598 2026-07-15 00:00:33+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92598 2026-07-16 19:00:15+00:00| seen|...

CVE-2026-52100

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92641 2026-07-15 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/92641 2026-07-16 19:00:15+00:00| seen|...

CVE-2026-56877

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

CVE-2026-56877

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

CVE-2026-58408

creationtimestamp| type| source ---|---|--- 2026-07-13 21:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoajc22s2k...

CVE-2026-26396

creationtimestamp| type| source ---|---|--- 2026-07-13 21:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqklm5ggqj2d...

CVE-2026-55773

creationtimestamp| type| source ---|---|--- 2026-07-13 21:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkllwplkm2l 2026-07-13 21:57:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkoqqunqx2l...

CVE-2026-58410 ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families’ records

ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which allowed low-privileged users to read and modify other families’ records. An authenticated non-admin user with EditSelf access can supply another...

CVE-2026-58410 ChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families’ records

ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which allowed low-privileged users to read and modify other families’ records. An authenticated non-admin user with EditSelf access can supply another...

CVE-2026-55771

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equals has inverted null/self branches which could lead to incorrect equality comparisons. The EntityIdentifier.equals meth...

CVE-2026-57797

creationtimestamp| type| source ---|---|--- 2026-07-13 19:49:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkhl2ahsu2c 2026-07-16 08:09:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrukxm732n...

CVE-2026-14906

creationtimestamp| type| source ---|---|--- 2026-07-13 19:43:18+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqkhap3uhf2c 2026-07-15 14:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovtojixm2h 2026-08-13 13:10:03+00:00| seen|...

GHSA-7XW9-549R-8JRC

creationtimestamp| type| source ---|---|--- 2026-07-13 19:42:25+00:00| seen| https://gist.github.com/alon710/e0411f3e1cdf3980cab9ce593ae8692e...

MINI-8V3H-JHJJ-5PG3

Bulletin has no description...

CVE-2026-57803

creationtimestamp| type| source ---|---|--- 2026-07-13 19:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkgiadrvj2e 2026-07-14 02:26:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql5seep2a22 2026-07-16 08:08:03+00:00| seen|...

CVE-2026-55771

CVE-2026-55771 affects CedarJava prior to 4.9.0, where EntityIdentifier.equals() has inverted null/self-reference checks, causing incorrect equality results in custom integrations. The bug does not alter Cedar’s authorization decisions (computed in Rust from JSON) but could affect external code p...

CVE-2026-55771 CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities

CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equals has inverted null/self branches which could lead to incorrect equality comparisons. The EntityIdentifier.equals meth...

CVE-2026-57363

creationtimestamp| type| source ---|---|--- 2026-07-13 18:51:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkeecjaem2a 2026-07-14 01:19:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql224uclj2w 2026-07-16 08:15:38+00:00| seen|...

CVE-2026-22100

creationtimestamp| type| source ---|---|--- 2026-07-13 18:50:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkecsvgau2c 2026-07-14 03:05:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mql7xs3giy2i 2026-07-16 08:06:24+00:00| seen|...