CVE-2026-35096

KTM System e-BOK is vulnerable to Cross‑Site Request Forgery CSRF in both the email-change and password-change functionalities. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged POST request to the application. This allows the...

EUVD-2026-40323

KTM System e-BOK is vulnerable to Cross‑Site Request Forgery CSRF in both the email-change and password-change functionalities. An attacker can craft a malicious website that, when visited by an authenticated user, automatically sends a forged POST request to the application. This allows the...

CVE-2026-35095

KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful login. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session...

CVE-2026-35095

Technical details (affected products/components, root cause, impact, or remediation) are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-40322

KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful login. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session...

CVE-2026-41896

creationtimestamp| type| source ---|---|--- 2026-06-29 23:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mphmhrstrp2h 2026-06-29 23:18:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphmq3627t2n...

CVE-2026-13580

creationtimestamp| type| source ---|---|--- 2026-06-29 16:49:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwyvgzlc25 2026-06-29 17:29:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzarylj723 2026-06-29 22:08:27+00:00| seen|...

CVE-2026-57333

creationtimestamp| type| source ---|---|--- 2026-06-29 16:28:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgvtgfetf2o 2026-06-29 16:59:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgxl4dxci2b 2026-06-29 20:40:15+00:00| seen|...

CVE-2026-40524

creationtimestamp| type| source ---|---|--- 2026-06-29 15:16:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgrs3atsj2j 2026-06-29 15:55:51+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgtz42vwk25 2026-06-29 15:55:52+00:00| seen|...

CVE-2026-49355

creationtimestamp| type| source ---|---|--- 2026-06-29 14:42:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgpvnlgcv2d 2026-06-29 14:42:27+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgpvt4gmd2m...

Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026

Summary In addition to updating many operating system level packages, the following security vulnerabilities are addressed with IBM Business Automation Workflow cumulative fixes. Vulnerability Details CVEID:CVE-2026-29063 DESCRIPTION: Immutable.js provides many Persistent Immutable data structure...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2026.

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation released in June 2026. Vulnerability Details CVEID:CVE-2025-12635 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0 and IBM...

Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.18.0 shipped with IBM Cloud Pak for Business Automation iFixes for June 2026

Summary IBM Cloud Pak for Business Automation includes IBM Cloud Pak foundational services. IBM Cloud Pak for Business Automation June 2026 security fixes update this dependency beyond 4.18.0 to address security vulnerabilities. Vulnerability Details CVEID:CVE-2024-45310 DESCRIPTION: runc is a CL...

CVE-2026-56063

creationtimestamp| type| source ---|---|--- 2026-06-26 17:22:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp7hgtu4kf2c...

CVE-2020-14072

creationtimestamp| type| source ---|---|--- 2026-06-24 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mp2zrn362b2r...

Linux Distros Unpatched Vulnerability : CVE-2026-50574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an...

Important: Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content update

Red Hat Offline Knowledge Portal security fixes & content update This Red Hat Offline Knowledge Portal fixes several Solr-related CVEs. It also includes content updates as of June 16 2026...

CVE-2026-50023

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

DEBIAN-CVE-2026-50023

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, a vulnerability exists in yt-dlp that allows a remote attacker to write arbitrary OS-shortcut files such as .desktop, .url, .webloc to the user's filesystem, bypassing the remediation for CVE-2024-38519. The allowlist explicitl...

UBUNTU-CVE-2026-50574

yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On...