CVE-2026-27409

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr42kn3nrv2j 2026-07-21 05:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr543jkhw32u 2026-07-21 15:44:10+00:00| seen|...

CVE-2026-36669

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kk5phr2k...

CVE-2025-51677

creationtimestamp| type| source ---|---|--- 2026-07-20 19:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr42kiwv652v...

GHSA-JHMP-MQWM-3GQ8

creationtimestamp| type| source ---|---|--- 2026-07-20 19:31:55+00:00| seen| https://gist.github.com/alon710/406a76bb8aa1f3068e2e86792c104d53...

CVE-2026-44230 RT: Reflected Cross-Site Scripting in search results chart

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...

CVE-2026-44230

RT (Request Tracker) contains a reflected Cross‑Site Scripting (XSS) vulnerability in search results/chart rendering. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 are affected if an authenticated user is induced to visit a crafted URL, enabling arbitrary ...

EUVD-2026-46080

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...

CVE-2026-57366

creationtimestamp| type| source ---|---|--- 2026-07-20 18:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr3x7e2xlx2e 2026-07-21 04:44:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mr4yq7e34e2o 2026-07-21 14:44:09+00:00| seen|...

CVE-2026-64206

creationtimestamp| type| source ---|---|--- 2026-07-20 18:36:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wqxhaly27 2026-08-06 04:47:51+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

GHSA-42H9-826W-CGV3

creationtimestamp| type| source ---|---|--- 2026-07-20 18:32:13+00:00| seen| https://gist.github.com/alon710/cdf2a5ef96b6a707eafe65a3f00899a3 2026-07-21 12:01:34+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r6g7tzv2g...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

CVE-2026-64191

creationtimestamp| type| source ---|---|--- 2026-07-20 18:31:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3wixt7wk2i 2026-08-06 04:47:48+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-62183

creationtimestamp| type| source ---|---|--- 2026-07-20 18:24:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3w3ocrbc2r 2026-07-21 15:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652gyor42j 2026-07-22 17:00:05+00:00| seen|...

CVE-2026-46410

creationtimestamp| type| source ---|---|--- 2026-07-20 18:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vcmpphg2a...

CVE-2026-35048

creationtimestamp| type| source ---|---|--- 2026-07-20 17:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3txiwaon2e...

CVE-2026-57308

creationtimestamp| type| source ---|---|--- 2026-07-20 17:37:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26 2026-07-21 15:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224 2026-07-23 14:11:30+00:00| seen|...

CVE-2026-35198

creationtimestamp| type| source ---|---|--- 2026-07-20 16:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qincwha2e 2026-07-20 17:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rids62y2q 2026-07-20 17:40:41+00:00| seen|...

CVE-2026-16252

creationtimestamp| type| source ---|---|--- 2026-07-20 16:43:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3qhrgx4y2p...

CVE-2026-46428

creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf3yend2i 2026-07-20 18:00:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3uqph73s2o 2026-07-28 16:35:09+00:00| published-proof-of-concept|...

CVE-2026-58414 Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.backup recursively collects files using collectBackupFiles. collectBackupFiles uses statSyncfull, which follows symlinks. If data/ contains a symlink to a directory outside the environment roo...