CVE-2026-54475

creationtimestamp| type| source ---|---|--- 2026-06-29 21:41:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphhdvij522x 2026-07-03 02:00:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpph6qinrz2a...

CVE-2026-8666

creationtimestamp| type| source ---|---|--- 2026-06-29 21:41:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhcelqxb2w...

CVE-2026-57952

creationtimestamp| type| source ---|---|--- 2026-06-29 21:28:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgmbvmt32y...

CVE-2026-50734

creationtimestamp| type| source ---|---|--- 2026-06-29 21:23:11+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphgcet34j2s 2026-07-03 10:59:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqfd3inka2b...

CVE-2026-49432

creationtimestamp| type| source ---|---|--- 2026-06-29 21:18:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphfzfgaai23 2026-07-03 10:45:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqejhachu26...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...

GHSA-VWXW-JRG6-9JXV

creationtimestamp| type| source ---|---|--- 2026-06-29 19:31:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116835056501762471...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the alert rule store process. An attacker can read, modify, or delete alert rules belonging to other organizations by supplying a target rule UUID and bypassing multi-tenant access...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the rule ID path parameter of the alert-history endpoints. An attacker can execute arbitrary database queries and access sensitive data by injecting specially crafted input. This may also allow the attacker to perform...

CVE-2026-57956

creationtimestamp| type| source ---|---|--- 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mph725ba3a2w 2026-06-29 19:13:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph725cpjm2n 2026-06-29 21:54:04+00:00| seen|...

CVE-2026-57950

creationtimestamp| type| source ---|---|--- 2026-06-29 18:49:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5pretwz23 2026-06-29 21:57:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphi75nrkv2n 2026-06-29 22:25:35+00:00| seen|...

CVE-2026-56783

creationtimestamp| type| source ---|---|--- 2026-06-29 18:46:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5ky7q3z2g...

CVE-2026-13751

creationtimestamp| type| source ---|---|--- 2026-06-29 17:54:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph2nxm6hf2t 2026-06-29 18:43:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph5feg6v52o 2026-06-29 20:15:46+00:00| seen|...

CVE-2026-12672

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

EUVD-2026-40145

Hi.Events through 1.9.0 public check-in list endpoints use shortid as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and personal information. Attackers with knowledge of the shortid can call GET /api/public/check-in-lists/shortid/attendees t...

CVE-2026-57960 Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short_id

Hi.Events through 1.9.0 public check-in list endpoints use shortid as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and personal information. Attackers with knowledge of the shortid can call GET /api/public/check-in-lists/shortid/attendees t...

CVE-2026-57956 SigNoz 0.130.1 - Cross-Organization Insecure Direct Object Reference in Alert Rules

SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...

EUVD-2026-40141

SigNoz through 0.130.1 contains a broken access control vulnerability that allows authenticated users to access other organizations' alert rules by supplying a target rule UUID, as the alert rule store predicates fail to filter by organization ID. Attackers can read, edit, and delete alert rules...

CVE-2026-57955 SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter

SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...

CVE-2026-57955 SigNoz 0.130.1 - SQL Injection in Alert History Endpoints via Rule ID Parameter

SigNoz through 0.130.1 contains a SQL injection vulnerability that allows authenticated attackers to execute arbitrary ClickHouse queries by injecting URL-encoded quotes into the rule ID path parameter of the alert-history endpoints. Attackers can manipulate the unsanitized rule ID interpolated...