CVE-2026-64459

creationtimestamp| type| source ---|---|--- 2026-07-27 06:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmb4icitc2y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-64410

creationtimestamp| type| source ---|---|--- 2026-07-27 06:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmayuss522y 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-64355

creationtimestamp| type| source ---|---|--- 2026-07-27 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmadft45t2v 2026-08-06 04:49:57+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00|...

CVE-2026-64303

creationtimestamp| type| source ---|---|--- 2026-07-27 06:06:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrma4cnjmz2k 2026-08-06 04:48:38+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-09-15 12:46:43+00:00|...

CVE-2026-64232

creationtimestamp| type| source ---|---|--- 2026-07-27 06:02:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrm7v56nxb2k 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-14827 Calendar < 1.3.18 - Contributor+ Stored XSS via event_link Parameter

The Calendar WordPress plugin before 1.3.18 does not properly escape a user-supplied event field before outputting it inside an HTML attribute on a public-facing page, allowing users with the Contributor role to inject arbitrary JavaScript that executes in the browser of anyone viewing the calend...

BIT-DOTNET-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

BIT-DOTNET-SDK-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-49854

creationtimestamp| type| source ---|---|--- 2026-07-27 03:17:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrlwolwo4i2m...

Linux Distros Unpatched Vulnerability : CVE-2026-64540

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usbnet: gl620a: fix out-of-bounds read in genelinkrxfixup genelinkrxfixup splits an aggregated RX frame into its individual packets, using a per-packet length...

UBUNTU-CVE-2026-64219

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...

CVE-2026-12001: Use of Hard-coded Credentials

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...

CVE-2026-64223

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211tidtolinkmapsizeok validates negotiated TTLM elements against the number of link-map entries indicated by linkmappresence. ieee80211parsenegttlm must consume the...

PT-2026-65105

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

CVE-2026-61953: Server-Side Request Forgery (SSRF)

Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...

CVE-2026-56748: UNIX Symbolic Link (Symlink) Following

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

CVE-2026-43765: Improper Link Resolution Before File Access

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to modify protected parts of the file system...

CVE-2026-66825: Improper Neutralization of Input During Web Page Generation

Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with link-like properties, such as url, uri, href, link, website, or homepage, were rendered as hyperlinks without validating their URL scheme. An attacker able to supply or influence...

PT-2026-65117

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis...

PT-2026-65314

Name of the Vulnerable Software and Affected Versions Simple Link Directory Pro versions prior to 15.0.7 Description An unauthenticated Server Side Request Forgery SSRF exists in the plugin. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an...