CVE-2026-63086

creationtimestamp| type| source ---|---|--- 2026-07-16 19:04:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrwhp7yyy22...

CVE-2026-14371

creationtimestamp| type| source ---|---|--- 2026-07-16 18:54:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrvvrteqy22...

CVE-2026-63085

creationtimestamp| type| source ---|---|--- 2026-07-16 18:49:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrvo47kg32s...

CVE-2026-45576

creationtimestamp| type| source ---|---|--- 2026-07-16 18:46:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrvhepsbd2n 2026-07-21 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr6car56u322...

CVE-2026-13401

creationtimestamp| type| source ---|---|--- 2026-07-16 18:09:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqrtfkoup52p...

EUVD-2026-44998

BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation could be bypassed when a presentationUploadExternalUrl parameter was supplied to API request handling in CreateMeeting.java and ValidationService.java, allowing a user to send valid requests to some...

CVE-2026-46353 BigBlueButton API checksum bypass via presentationUploadExternalUrl

BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation could be bypassed when a presentationUploadExternalUrl parameter was supplied to API request handling in CreateMeeting.java and ValidationService.java, allowing a user to send valid requests to some...

CVE-2026-46404 BigBlueButton: Presentation URL Security Hardening

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, the presentation URL validation did not properly restrict access to site local and link local addresses. The redirect following logic now pins resolved IPs. This issue is fixed in version 3.0.23...

CVE-2026-45695

creationtimestamp| type| source ---|---|--- 2026-07-16 16:42:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrojgm4yj2p 2026-09-11 11:00:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7ae70118-bb20-4e14-a01c-cfb2d14d7491 2026-10-...

CVE-2026-59861

creationtimestamp| type| source ---|---|--- 2026-07-16 16:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqro4qey2p2h...

CVE-2026-14254

creationtimestamp| type| source ---|---|--- 2026-07-16 16:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrntrqz3a2w...

CVE-2026-59859

creationtimestamp| type| source ---|---|--- 2026-07-16 16:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrnktbz6e22...

CVE-2026-12379

An Open Redirect vulnerability CWE-601 exists in the OAuth/OIDC authentication implementation of the Axivion Dashboard. The login flow did not properly restrict the post-authentication redirect to the application's own origin, so a user who follows a crafted login link can be sent to an untrusted...

CVE-2026-61378

creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:23+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04...

CVE-2026-59860

creationtimestamp| type| source ---|---|--- 2026-07-16 16:11:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrmthsmaf2l 2026-07-24 17:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrftsuervb2e...

CVE-2026-53598

creationtimestamp| type| source ---|---|--- 2026-07-16 16:02:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrmda6exv2n...

CVE-2026-53597

creationtimestamp| type| source ---|---|--- 2026-07-16 15:58:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrm2mckfi2c 2026-07-17 20:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqulfcqcj62i...

CVE-2026-35147

creationtimestamp| type| source ---|---|--- 2026-07-16 15:05:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrj54hrth22 2026-07-22 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mra6lx5u262s...

CVE-2026-30618

creationtimestamp| type| source ---|---|--- 2026-07-16 14:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrhlnjf2q2a...

golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the Root.Chmod function is replaced with a symbolic link during execution, specifically after Root.Chmod checks the target but before acting, the chmod operation will be performed on the file the...