CVE-2026-7656 Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6nbr.c handlerainput, handlensinput, handlenainput used an incorrect boolean expression that combined the RFC 4861 validity checks with the ICMPv6 code check using the wrong operator precedence: the form was length/hop/source/target checks ...

CVE-2026-50750

creationtimestamp| type| source ---|---|--- 2026-06-29 21:51:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphhukusr22j 2026-07-03 10:46:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqemc25z62c...

CVE-2026-8665

creationtimestamp| type| source ---|---|--- 2026-06-29 21:43:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhg2mwpm23...

CVE-2026-8660

creationtimestamp| type| source ---|---|--- 2026-06-29 21:42:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhfgsmbb2d...

CVE-2026-8666

creationtimestamp| type| source ---|---|--- 2026-06-29 21:41:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphhcelqxb2w...

CVE-2026-50229

creationtimestamp| type| source ---|---|--- 2026-06-29 21:40:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphhbocbak2p 2026-06-29 22:19:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjgx4ff32q 2026-06-29 23:32:51+00:00| seen|...

CVE-2026-53434

creationtimestamp| type| source ---|---|--- 2026-06-29 21:39:26+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphh7h4ldu2c 2026-06-29 22:23:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphjomprh623 2026-06-29 23:09:17+00:00| seen|...

CVE-2026-55955

creationtimestamp| type| source ---|---|--- 2026-06-29 21:38:10+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphh57gvy32g 2026-06-29 22:33:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mphkajmopv2z 2026-06-29 23:12:15+00:00| seen|...

CVE-2026-53427

creationtimestamp| type| source ---|---|--- 2026-06-29 21:27:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgkomq3j2e 2026-06-29 21:55:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphi4owxku22...

CVE-2026-57949

creationtimestamp| type| source ---|---|--- 2026-06-29 21:18:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfzm257s23...

CVE-2026-13572

creationtimestamp| type| source ---|---|--- 2026-06-29 20:20:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphcsk7lyc2t...

CVE-2026-54889

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

CVE-2026-13574

creationtimestamp| type| source ---|---|--- 2026-06-29 20:15:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphck3r2sp23...

CVE-2026-57957

creationtimestamp| type| source ---|---|--- 2026-06-29 19:13:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph72vaeiu2n 2026-06-29 21:34:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphgxdxcgj2k...

CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

CVE-2026-54889

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

EEF-CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

Summary Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':to\delta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':default\convert\node/3...

CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

CVE-2026-41991

A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...