CVE-2026-82746

creationtimestamp| type| source ---|---|--- 2026-09-01 09:19:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117195038757565072...

CVE-2026-77189

creationtimestamp| type| source ---|---|--- 2026-09-01 07:53:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7p55mag5jypmt...

CVE-2026-80709

A flaw was found in the Linux kernel's s390/zcrypt component. An incorrect upper limit check for the domain value when processing an EP11 Cryptographic Coprocessor Request Block CPRB can allow a local user on custom device nodes to access heap memory. This could lead to information disclosure or...

CVE-2026-19948

The Cozy Blocks WordPress plugin (all versions up to and including 2.2.17 ) is vulnerable to authorization bypass . Multiple block renderers unconditionally emit the sidebarNonce value into public page HTML with no login gate, allowing unauthenticated visitors to harvest a valid nonce and pass th...

CVE-2026-82735

creationtimestamp| type| source ---|---|--- 2026-09-01 04:20:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dxuowsh3junbh...

CVE-2026-81704

creationtimestamp| type| source ---|---|--- 2026-09-01 04:04:51+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mugk4ncenb2s 2026-09-04 09:07:08+00:00| seen| https://bsky.app/profile/potato.software/post/3muomfwb6ip2l 2026-09-04 09:07:08+00:00| seen|...

CVE-2026-75865

creationtimestamp| type| source ---|---|--- 2026-09-01 03:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mugjttrvhg2u 2026-09-01 04:04:34+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mugk44tbld2w 2026-09-01 04:07:10+00:00| seen|...

EEF-CVE-2026-82739 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in...

CVE-2026-82739 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in lib/ash/resource/validation/confirm.ex...

CVE-2026-77950

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. applyerrorhandler/3 in...

CVE-2026-82733 Route handler return value echoed into AshTypescript error response

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal application data from an HTTP 500 response body. When a typed-controller route handler returns anything other than a %Plug.Conn, dispatch/3 i...

EEF-CVE-2026-82733 Route handler return value echoed into AshTypescript error response

Summary Generation of Error Message Containing Sensitive Information vulnerability in ash-project ashtypescript allows an unauthenticated attacker to read internal application data from an HTTP 500 response body. When a typed-controller route handler returns anything other than a %Plug.Conn,...

CVE-2026-76957

creationtimestamp| type| source ---|---|--- 2026-09-01 00:01:22+00:00| seen| https://bsky.app/profile/slackers.it/post/3mug4jap4or2n...

PT-2026-84077

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash typescript allows an unauthenticated attacker to receive unredacted internal error data by provoking an error shape the configured error handler does not match. apply error handler/3 in lib/ash...

PT-2026-84223

Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to trigger static information reporting to the configured master via sending a crafted MQTT message to the cs broker component...

PT-2026-84187

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 Description An issue exists within the Profile Backup component. Recommendations Update Firefox to version...

ASB-A-484928416

In getQueryBuilderInternal of MediaProvider.java, there is a possible way to retrieve location metadata due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-84188

Name of the Vulnerable Software and Affected Versions Firefox Focus for Android versions prior to 155 Description An issue exists in Firefox Focus for Android. Recommendations Update to version 155...

PT-2026-84181

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description Privilege escalation exists in the WebDriver BiDi component. WebDriver BiDi is a protocol that allows for bidirectional communication between the browser and the...

CVE-2026-82393

creationtimestamp| type| source ---|---|--- 2026-08-31 23:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mufz4nnl6z2o 2026-09-02 16:35:40+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-vq4v-j7r6-jq4m...