MINI-PW95-9C6F-7CW9

Bulletin has no description...

MINI-VGJR-R4VX-GC3F

Bulletin has no description...

MINI-PQ8P-6WRV-G8XV

Bulletin has no description...

MINI-V55G-2RF5-RJVV

Bulletin has no description...

MINI-5Q59-9V2C-J79H

Bulletin has no description...

EUVD-2026-70532

MISP contains a session fixation vulnerability in the CustomAuth authentication a custom configuration flow. When a user was successfully authenticated through CustomAuth, MISP stored the authenticated user identity in the existing session without first rotating the session identifier. As a resul...

MINI-38W3-GVM4-F4RX

Bulletin has no description...

GHSA-4Q39-2JHR-7QX8

creationtimestamp| type| source ---|---|--- 2026-09-02 23:38:43+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mul46lxbqp2y 2026-09-03 10:32:33+00:00| seen| https://gist.github.com/alon710/b49a4882cbb663c91159acdfe34ae468...

MINI-FHX7-W4PG-Q695

Bulletin has no description...

MINI-X73V-4FGG-7GR9

Bulletin has no description...

MINI-P85J-JCM9-J5X5

Bulletin has no description...

CGA-MQQ4-FQW4-4WQC

Bulletin has no description...

MINI-HPCC-7GRH-J32X

Bulletin has no description...

MINI-MXGQ-3F49-JCGJ

Bulletin has no description...

MINI-396R-XM56-4JMX

Bulletin has no description...

MINI-56F2-GF53-C692

Bulletin has no description...

EUVD-2026-70063

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

CVE-2026-84702

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

EUVD-2026-69793

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...