CVE-2026-64881

creationtimestamp| type| source ---|---|--- 2026-07-21 22:22:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6tvcb7l422...

CVE-2026-60219

creationtimestamp| type| source ---|---|--- 2026-07-21 22:18:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tmuxvf424 2026-07-23 16:48:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 05:07:07+00:00| seen|...

CVE-2026-10675

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer subsys/bluetooth/mesh/pbadv.c, provmsgrecv rescheduled the provisioning protocol watchdog timer unconditionally at the top of the function, before the FCS check and before the ADVLINKINVALID check. Once a provisioning attempt fails, provfailed...

CVE-2026-60216

creationtimestamp| type| source ---|---|--- 2026-07-21 22:16:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tjcsbem24 2026-07-23 16:48:22+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 04:37:06+00:00| seen|...

CVE-2026-65058

creationtimestamp| type| source ---|---|--- 2026-07-21 22:12:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6tdf67cb2q 2026-08-06 06:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96851 2026-08-07 00:30:17+00:00| published-proof-of-concept|...

CVE-2026-60197

creationtimestamp| type| source ---|---|--- 2026-07-21 22:12:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6tc5xjkc2k 2026-07-23 16:47:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 08:07:06+00:00| seen|...

CVE-2026-47056

creationtimestamp| type| source ---|---|--- 2026-07-21 22:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6t6ksyuu2s 2026-07-22 16:15:08+00:00| seen| https://www.ncsc.nl/alerts/update-oracle-fusion-middleware-direct-vanwege-kritieke-kwetsbaarheden 2026-07-23...

CVE-2026-47036

creationtimestamp| type| source ---|---|--- 2026-07-21 22:08:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6t2yu4ol2s 2026-07-23 16:46:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-46982

creationtimestamp| type| source ---|---|--- 2026-07-21 22:04:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6sttqniu23 2026-07-23 16:45:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-46924

creationtimestamp| type| source ---|---|--- 2026-07-21 22:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6strnk6b2k 2026-07-23 16:45:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-26 09:07:07+00:00| seen|...

CVE-2026-10675 Bluetooth Mesh PB-ADV: invalidated provisioning link kept alive indefinitely, blocking (re)provisioning (DoS)

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer subsys/bluetooth/mesh/pbadv.c, provmsgrecv rescheduled the provisioning protocol watchdog timer unconditionally at the top of the function, before the FCS check and before the ADVLINKINVALID check. Once a provisioning attempt fails, provfailed...

CVE-2026-10675

Zephyr Project Bluetooth Mesh PB-ADV vulnerability (CVE-2026-10675) in prov_msg_recv() reschedules the provisioning watchdog timer unconditionally at the top of the function, before FCS and ADV_LINK_INVALID checks. If a provisioning attempt fails (ADV_LINK_INVALID set), a malicious, unauthenticat...

EUVD-2026-46445

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer subsys/bluetooth/mesh/pbadv.c, provmsgrecv rescheduled the provisioning protocol watchdog timer unconditionally at the top of the function, before the FCS check and before the ADVLINKINVALID check. Once a provisioning attempt fails, provfailed...

CVE-2026-10675 Bluetooth Mesh PB-ADV: invalidated provisioning link kept alive indefinitely, blocking (re)provisioning (DoS)

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer subsys/bluetooth/mesh/pbadv.c, provmsgrecv rescheduled the provisioning protocol watchdog timer unconditionally at the top of the function, before the FCS check and before the ADVLINKINVALID check. Once a provisioning attempt fails, provfailed...

CVE-2026-46579

creationtimestamp| type| source ---|---|--- 2026-07-21 21:12:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mr6pwovtyj2u 2026-08-02 14:02:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms45jn2yky22...

CVE-2026-16359

creationtimestamp| type| source ---|---|--- 2026-07-21 20:56:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6p27frgc24 2026-07-22 04:45:58+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 09:40:04+00:00| see...

CVE-2026-65056 mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering

mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or cloud metadata addresses to the visitpage tool, which only validates the URL protocol without filtering private or reserved IP...

EUVD-2026-41608

Gitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write...

CVE-2026-46556

The CVE describes a Server-Side Request Forgery (SSRF) in FlaskBB prior to 2.2.1, where get_image_info(url) passes the supplied URL directly to requests.get without validating scheme/host/IP. This allows any authenticated user to cause the server to access internal endpoints and cloud metadata se...

CVE-2026-59146

Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via unvalidated bucket, link and free-list indices in sphwalkcell and sphallocslot. The attach-time validator sphvalidateheader checks the header scalars and region layout against the file size, but does...