CVE-2026-13584: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module,...

PT-2026-66417

Name of the Vulnerable Software and Affected Versions MELSEC MX Controller MX-R model affected versions not specified MELSEC MX Controller MX-F model affected versions not specified Master/local module affected versions not specified CC-Link IE TSN interface board affected versions not specified...

CVE-2026-57862: Server-Side Request Forgery (SSRF)

Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP addresses through the web link...

PT-2026-66560

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An SSRF Server-Side Request Forgery and local file read issue exists in the multimodal generation endpoint '/v1/chat/completions'. This occurs because the image url variable is not properly...

(Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...

PT-2026-66416

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...

Oracle Linux 10 : kernel (ELSA-2026-45114)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-45114 advisory. - futex: Drop CLONETHREAD requirement for private default hash alloc Audra Mitchell RHEL-193518 CVE-2026-52973 - net: ipv6: fix NOREF dst use in seg6...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-12357

creationtimestamp| type| source ---|---|--- 2026-07-29 22:08:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswspnm622j...

CVE-2026-67437

creationtimestamp| type| source ---|---|--- 2026-07-29 22:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrswdykg4k2w 2026-07-30 16:35:35+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xpxj-f2fm-rqch 2026-07-31...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the Link.filename path handling in pip.internal.models.link and the download path joins in pip.internal.network.download and pip.internal.req.reqinstall. An attacker can place files at arbitrary locations on disk...

CVE-2026-15157

creationtimestamp| type| source ---|---|--- 2026-07-29 21:20:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsu5wdpic2c 2026-08-04 11:32:23+00:00| seen| https://gist.github.com/alon710/3e65ccff71476d14ba3166941f39bd3f 2026-08-04 12:00:59+00:00| seen|...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...

CVE-2026-14643

creationtimestamp| type| source ---|---|--- 2026-07-29 21:11:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrstmoc6mc2c 2026-08-04 12:31:53+00:00| seen| https://gist.github.com/alon710/dbd628dcf4d2ee2986aea22ad7d6f2b4 2026-10-16 13:11:42+00:00| seen|...

CVE-2026-6336

creationtimestamp| type| source ---|---|--- 2026-07-29 21:01:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrst3p5lsr2e 2026-07-30 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...

GHSA-FQ3F-M5QM-99F5

creationtimestamp| type| source ---|---|--- 2026-07-29 20:31:26+00:00| seen| https://gist.github.com/alon710/e40fc20ed683aaeeae74fc5b1a713445...

CVE-2026-13268

G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target...