MINI-6988-25GG-F3H8

Bulletin has no description...

MINI-243M-HJQ7-VHJ3

Bulletin has no description...

MINI-XFHX-JP86-5MXM

Bulletin has no description...

CVE-2026-14482

creationtimestamp| type| source ---|---|--- 2026-07-08 07:27:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4lrjxew42l 2026-07-09 00:00:40+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq6dcbzxg52n...

CVE-2026-12936

creationtimestamp| type| source ---|---|--- 2026-07-08 06:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4hspcfea2p...

CVE-2026-9701

creationtimestamp| type| source ---|---|--- 2026-07-08 04:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4d4g7zbx2q 2026-07-08 06:00:09+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq4gw5xwgz2x 2026-07-08 07:22:03+00:00| seen|...

CVE-2026-55427

creationtimestamp| type| source ---|---|--- 2026-07-08 03:26:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq46e2c6zy2t 2026-07-18 10:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqvzexgt5q2v...

GHSA-QCXP-RJ5J-4RR9 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

CVE-2026-53167 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-gcp, linux-qemu-melange, linux-azure, linux-vmware...

CVE-2026-59704

creationtimestamp| type| source ---|---|--- 2026-07-08 01:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3wocgs4626 2026-07-11 00:04:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdeherda22s...

CVE-2026-55438 Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's subdomain-based workspace app proxy allowed the same-owner CORS check to be bypassed. When a workspace-name subdomain segment parsed as a UUID, the...

CVE-2026-55418

creationtimestamp| type| source ---|---|--- 2026-07-08 00:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3t74gzc427...

ECHO-7AFA-B4AA-5D4A

Bulletin has no description...

CVE-2026-12277

creationtimestamp| type| source ---|---|--- 2026-07-08 00:00:21+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq3ssrwtoa2e 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92408 2026-07-14 00:00:18+00:00| seen| https://t.me/GithubRedTeam/92408 2026-07-15 00:00:31+00:00|...

PT-2026-56575

Name of the Vulnerable Software and Affected Versions PAN-OS versions 12.1 PAN-OS versions 11.2 PAN-OS versions 11.1 PAN-OS versions 10.2 Prisma Access affected versions not specified Description Multiple buffer overflow issues exist in the User-ID Terminal Server Agent TSA component of PAN-OS an...

PT-2026-56675

Name of the Vulnerable Software and Affected Versions DSpace versions prior to 7.6.7 DSpace versions 8.0 through 8.3 DSpace versions 9.0 through 9.2 Description When ingesting an aggregated ORE resource by URI using the OAI-ORE Harvester, the ORE Ingestion Crosswalk fails to validate the URI...

PT-2026-56454

Name of the Vulnerable Software and Affected Versions Adalo versions 1 through 2 Description Attackers can extract complete user records and correlate user behavior across multiple applications through the enumeration of the dbId variable. This occurs because the platform lacks data minimization,...

PT-2026-56400

Name of the Vulnerable Software and Affected Versions LatePoint – Calendar Booking Plugin for Appointments and Events versions prior to 5.4.1 Description Improper input validation in the Stripe Connect payment processor allows unauthenticated attackers to pay an arbitrary amount. This occurs...

CVE-2026-55428 Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tailnet coordinator validates that an agent's Addresses derive from its authenticated UUID but applies no equivalent check to AllowedIPs. The coordinato...

CVE-2026-55428

CVE-2026-55428 (Coder) describes a route hijack risk in the tailnet coordinator where an agent’s AllowedIPs are not validated against the agent’s authenticated UUID, unlike the Addresses check. The coordinator forwards adversarially supplied AllowedIPs to WireGuard peers, potentially enabling an ...