EUVD-2026-67909

Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics...

CVE-2026-51660

CVE-2026-51660 is an incorrect access control vulnerability in the getIpPortFilterRules function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 . An unauthenticated remote attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to obtain the device's IP and port filtering rules , ...

PT-2026-83070

Name of the Vulnerable Software and Affected Versions dovecot versions prior to 2.4.5-1.1 Description A host configured as a trusted proxy can send forwarding information containing a NUL byte. This causes the login process to crash during the subsequent login attempt, leading to process...

GHSA-Q7M3-RHXG-7VXR

creationtimestamp| type| source ---|---|--- 2026-08-27 22:31:50+00:00| seen| https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8 2026-08-28 00:01:49+00:00| seen| https://gist.github.com/alon710/796cb46fa1a6e144f351d5ffd2b774d8...

CVE-2026-18885

creationtimestamp| type| source ---|---|--- 2026-08-27 22:08:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3udv6djg2m 2026-08-28 03:02:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mu4eqr6anp2y 2026-08-28 07:50:09+00:00| seen|...

CVE-2026-81934

creationtimestamp| type| source ---|---|--- 2026-08-27 21:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3qk5iz6s2m 2026-08-27 22:09:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3ufoxuoy2p 2026-08-28 08:10:05+00:00| seen|...

CVE-2025-70290

creationtimestamp| type| source ---|---|--- 2026-08-27 20:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu3obvfbwy2m 2026-08-28 00:01:20+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mu42nilght2s 2026-08-28 21:35:41+00:00| seen|...

CVE-2026-81700

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyh2uwf2b 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-27 20:00:58+00:00| seen|...

CVE-2026-81685

creationtimestamp| type| source ---|---|--- 2026-08-27 18:08:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gx25kt32c 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-28 08:40:08+00:00| seen|...

CVE-2026-81698

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

CVE-2026-26897

An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...

CVE-2026-71187

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bqeqavt23 2026-08-29 13:12:09+00:00| seen|...

CVE-2026-73809

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:30+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 12:00:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mu5cu5ndbv2j 2026-08-28 12:01:02+00:00| seen|...

CVE-2026-78037

creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01 2026-08-28 01:00:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3vzeug2g3jhib 2026-08-28 02:00:47+00:00| seen|...

CVE-2026-50787

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ 2026-08-28 00:00:35+00:00| published-proof-of-concept| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ...

CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

EUVD-2026-67054

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

CVE-2026-81698

openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block . The root cause is that untrusted metadata fields (such as pepper_name) are interpolated without quoting, allowing an attacker to craft metadata values containing shell com...

CVE-2026-81698 openssl_encrypt before 1.4.9 Shell Injection via info command

opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...

CVE-2026-81696 openssl_encrypt before 1.4.9 Terminal Injection via info Command

opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...