CVE-2026-9611

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2026-68576

Reserved via standalone CLI outside the OSIM flaw workflow; releasing so the CVE ID can be properly reserved and linked through OSIM when the flaw is worked...

CVE-2026-11770

creationtimestamp| type| source ---|---|--- 2026-07-31 10:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4264s2zafk3mq 2026-07-31 12:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrwvrz7cro2l...

CVE-2026-65313

creationtimestamp| type| source ---|---|--- 2026-07-31 10:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4qkw6nkrnga2r 2026-07-31 14:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrx4jayjxi2a 2026-07-31 14:35:13+00:00| seen|...

CVE-2026-65311

creationtimestamp| type| source ---|---|--- 2026-07-31 10:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dabbdkvhdeq2o...

CVE-2026-65310

creationtimestamp| type| source ---|---|--- 2026-07-31 09:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7a4bpwbxcymga 2026-07-31 14:34:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrx6em7wg22g...

CVE-2026-51248

creationtimestamp| type| source ---|---|--- 2026-07-31 08:58:36+00:00| seen| https://gist.github.com/programmervuln/e87d48c8a9e36ddf43cc02db54f5151f...

EUVD-2026-51420

The FluentCart A New Era of eCommerce WordPress plugin before 1.5.3 does not perform any authorization or ownership check before rendering customer order documents keyed on a sequential numeric identifier, allowing unauthenticated visitors to enumerate and disclose customer personal data names,...

EUVD-2026-51416

The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions, allowing any authenticated user with Subscriber-level access and above to disclose the payment details of any member by enumerating the payment...

GHSA-RCR6-4JQH-J84M

creationtimestamp| type| source ---|---|--- 2026-07-31 06:00:03+00:00| seen| https://t.me/cyberwarehouse/1178 2026-08-01 00:00:39+00:00| published-proof-of-concept| https://t.me/cyberwarehouse/1178...

CVE-2026-66408

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:30+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-66410

creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:16+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...

CVE-2026-14541

creationtimestamp| type| source ---|---|--- 2026-07-31 04:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jjkywoers73sy 2026-07-31 12:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwygrbhhl2y...

CVE-2026-6889

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

ECHO-3904-34E5-511A

Bulletin has no description...

CVE-2026-16407 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16401 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-XJFQ-6RHW-XJ37 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-16376 vulnerabilities

Vulnerabilities for packages: firefox...

EUVD-2026-51381

An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService is initialized with mcpEnabled: true but lacks an explicitly defined audience or clientId, the ValidateMCPAuth pipeline for...