CVE-2026-18657

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:57+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzgtfn5x2y...

CVE-2026-18655

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:52+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzgpyqqc2p...

GHSA-2M8M-JHRM-W6J2

creationtimestamp| type| source ---|---|--- 2026-08-06 10:32:49+00:00| seen| https://gist.github.com/alon710/67103eb26c8040be3d1015d9a77a7298...

CVE-2026-5108

creationtimestamp| type| source ---|---|--- 2026-08-06 10:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfsot2xue23...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.95 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.95 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

CVE-2026-19020

creationtimestamp| type| source ---|---|--- 2026-08-06 08:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gbgegon2uzx2u...

GHSA-GX4C-2HQX-CW2R

creationtimestamp| type| source ---|---|--- 2026-08-06 08:31:35+00:00| seen| https://gist.github.com/alon710/8a116e77ebf57ab04c0fd9d4c43203c2 2026-08-25 18:39:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117157604721602110...

CVE-2026-19008

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

CVE-2025-13909

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

CVE-2026-6639

creationtimestamp| type| source ---|---|--- 2026-08-06 08:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u 2026-09-22 09:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6639.yaml 2026-09-23...

CVE-2025-13909 Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

CVE-2025-13909

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

CVE-2025-13909

WSO2 Identity Server is reported to have a multi-tenant authentication flaw where requests using Email OTP, SMS OTP, or Magic Link as first factors do not adequately enforce tenant isolation. This can allow an attacker to disclose PII from other tenants (e.g., mobile numbers) due to cross-tenant ...

EUVD-2025-210630

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

GHSA-4VR5-P2GC-H23P

creationtimestamp| type| source ---|---|--- 2026-08-06 07:31:27+00:00| seen| https://gist.github.com/alon710/7cd2b59244b6ec677e9295bd453cf08b...

Vulnerabilities in Cisco Catalyst SD-WAN

Cisco has identified several vulnerabilities in Cisco Catalyst SD-WAN. The identified issues include incorrect input validation, incorrect access control, incorrect link resolution before file access, and the storage of sensitive information in cleartext. Due to these vulnerabilities, the softwar...

CVE-2026-19008

Technical details about CVE-2026-19008 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-19008 mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

EUVD-2026-53766

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

CVE-2026-19008

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...