CVE-2026-47827

creationtimestamp| type| source ---|---|--- 2026-08-21 13:08:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtlteoepai2z...

CVE-2026-77086

creationtimestamp| type| source ---|---|--- 2026-08-21 12:07:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtlpwyfnmd2c 2026-08-21 20:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtmn5zpi5e2b...

CVE-2026-77755

creationtimestamp| type| source ---|---|--- 2026-08-21 10:41:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/afpvlr4q5ds2o...

CVE-2026-55015

creationtimestamp| type| source ---|---|--- 2026-08-21 08:45:08+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2027 2026-08-21 13:40:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtlv5etjr726 2026-08-21 21:41:30+00:00| seen|...

CVE-2026-55013

creationtimestamp| type| source ---|---|--- 2026-08-21 08:45:06+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2027 2026-08-21 13:40:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtlv5etjr726...

CVE-2026-19435

creationtimestamp| type| source ---|---|--- 2026-08-21 08:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gsonz3z7eagiq...

EUVD-2026-63754

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...

CVE-2026-17136

creationtimestamp| type| source ---|---|--- 2026-08-20 23:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtkgqxy7rx25 2026-08-21 00:08:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtkhrv6zpk2e...

Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

Summary SingleBase64Image::uploadFiles — the uploader bound to image-typed fields via withFiles — only verifies that the submitted value starts with the string data:image. The MIME subtype and the base64-decoded bytes are never inspected or validated. A related bug in FileNameGenerator causes the...

CVE-2026-66787

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...

EEF-CVE-2026-53425 Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses

Summary Insufficient Verification of Data Authenticity vulnerability in dropbox samly allows an attacker to establish an authenticated session using a SAML response the service provider never requested. Samly.SPHandler.validate\authresp/3 in lib/samly/sp\handler.ex validates a SAML response for t...

CVE-2026-77176

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2026-77176 Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

EUVD-2026-63432

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2025-62306

HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...

CVE-2025-62307

HCL IntelliOps Event Management IEM is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing...

EUVD-2025-210751

HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...

CVE-2025-62306

HCL IntelliOps Event Management (IEM) lacks sufficient logging, breaking auditability and observability of workflows. If an attacker gains application access, the missing audit trail could hinder incident response. CVSS 3.1 scores this MEDIUM (5.0) with network attack vector and low privileges re...

CVE-2025-62306 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response...

CVE-2025-62307

HCL IntelliOps Event Management (IEM) suffers from insufficient logging, weakening accountability, obscuring attack detection, and enabling privilege probing. CVSS 3.1 scores it MEDIUM (5.4) with network attack vector, low privileges required, and low confidentiality/integrity impact. No exploita...