CVE-2026-62230

creationtimestamp| type| source ---|---|--- 2026-07-17 03:13:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsrs36hcw2w...

CVE-2026-62223

creationtimestamp| type| source ---|---|--- 2026-07-17 03:05:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsrdon7ah2c...

CVE-2026-62203

creationtimestamp| type| source ---|---|--- 2026-07-17 02:58:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqydgkra2n...

CVE-2026-62209

creationtimestamp| type| source ---|---|--- 2026-07-17 02:56:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqtgyf7t2x...

CVE-2026-62207

creationtimestamp| type| source ---|---|--- 2026-07-17 02:51:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqkt3uoy2m...

CVE-2026-62215

creationtimestamp| type| source ---|---|--- 2026-07-17 02:49:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqgy4pt32i...

CVE-2026-59990

creationtimestamp| type| source ---|---|--- 2026-07-17 02:47:35+00:00| seen| https://bsky.app/profile/eed3si9n.com/post/3mqsqe4xchk2e...

CVE-2026-62217

creationtimestamp| type| source ---|---|--- 2026-07-17 02:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqspzu36242e...

CVE-2026-62321

creationtimestamp| type| source ---|---|--- 2026-07-17 02:01:13+00:00| seen| https://bsky.app/profile/slackers.it/post/3mqsnr7xax22x...

GHSA-48QW-824M-86PR

creationtimestamp| type| source ---|---|--- 2026-07-17 00:31:31+00:00| seen| https://gist.github.com/alon710/aa823e4042d20db07abf6864647f71af...

Converging Safety and Security: IO-Link Wireless and OPC UA over 5G under PrEN 50742

The integration of wireless communication technologies in industrial automation offers greater flexibility, but also exposes safety systems to a broader threat vector. Emerging regulations, such as the draft standard prEN 50742, mandate the convergence of functional safety and cybersecurity by...

TP-Link Archer VX1800v v1 domain name parameter injection vulnerability

The Archer VX1800v v1 is a dual-band Gigabit wireless router produced by TP-Link. The TP-Link Archer VX1800v v1 has a command injection vulnerability. This vulnerability stems from improper cleaning of domain name parameters. Attackers can exploit this vulnerability by accessing relevant HTTP...

CVE-2026-8075: Improper Check for Unusual or Exceptional Conditions

Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...

CVE-2026-48045: Allocation of Resources Without Limits or Throttling

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...

PT-2026-60769

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the organization management component allows a delegated administrator with organization management permissions to bypass security boundaries. The administrator can create an...

CVE-2026-48487: Improper Handling of Length Parameter Inconsistency

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, readcharacterstring and readstring in src/zeroconf/protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self.datalen, allowing unauthenticated hosts on th...

CVE-2026-47184: Allocation of Resources Without Limits or Throttling

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache, expirations, expireheap, and servicecache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 224.0.0.251 / ff02::f...

CVE-2026-47183: Uncontrolled Resource Consumption

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming.logexceptiondebug and the four QuietLogger exception-dedup methods stored an unbounded seenlogs dictionary keyed by attacker-influenced IncomingDecodeError messages, retaining sys.excinfo...

CVE-2026-47180: Uncontrolled Recursion

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

CVE-2026-16072: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...