TP-Link Archer C20 - Authentication Bypass

A vulnerability in the TP-Link Archer C20 router with firmware version V6.6230412 and earlier permits unauthorized individuals to bypass authentication on interfaces under the /cgi directory. When adding a Referer header with value "http://tplinkwifi.net" to requests, the router will recognize th...

CVE-2026-56264

creationtimestamp| type| source ---|---|--- 2026-07-01 03:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpklg64alo25 2026-07-07 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpzmrtboah2b...

SUSE CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-56278

creationtimestamp| type| source ---|---|--- 2026-07-01 02:59:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkjkz7hy72o 2026-07-07 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpzl46bhfg2b...

CVE-2026-56247

creationtimestamp| type| source ---|---|--- 2026-07-01 02:53:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkj7o4hmo2k...

CVE-2026-53209

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:32+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 17:18:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr2iibhyb2c 2026-07-06 06:50:45+00:00| seen|...

CVE-2026-52913

creationtimestamp| type| source ---|---|--- 2026-07-01 02:46:53+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:23:55+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-10-01 18:00:00+00:00| seen|...

CVE-2025-71374

creationtimestamp| type| source ---|---|--- 2026-07-01 02:45:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkis5vjna2i...

CVE-2025-71350

creationtimestamp| type| source ---|---|--- 2026-07-01 02:41:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkikqadfi26...

CVE-2025-71352

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkie7csbt25...

Exploit for CVE-2026-55488

CVE-2026-5548...

CVE-2026-57149

creationtimestamp| type| source ---|---|--- 2026-07-01 00:05:24+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpk7teoycm2k 2026-09-22 20:12:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mw4zxpbs3p2r 2026-09-22 20:14:52+00:00| seen|...

CVE-2026-53861

creationtimestamp| type| source ---|---|--- 2026-07-01 00:01:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mpk7lklwuq2o 2026-07-10 23:07:01+00:00| seen| https://bsky.app/profile/vulny-app.bsky.social/post/3mqdba7kbfs2a...

CVE-2026-41121: Improper Link Resolution Before File Access

Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access 'Link Following’ vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

Pix-Link LV-WR21Q DoS

The vulnerability of the final point /goform/getHomePageInfo of the Pix-Link LV-WR21Q router’s microprogramming system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CentOS 9 : kernel-5.14.0-719.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-719.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use after free of parentport in cxldetachep cxldetach...

ROS-20260701-73-0051

The vulnerability of the functions hcilinkkeysclear, hcismpltksclear, hcismpirksclear, and hciblockedkeysclear in the net/bluetooth/hcicore.c module of the Linux operating system’s Bluetooth subsystem is related to the reallocation of previously freed memory. Exploiting this vulnerability could...

PT-2026-55218

Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.0.10 Description A race condition exists in the ShareHandler when processing share-link redemptions. The system reads the DownloadLimit of a share token using a read lock, releases it to serve the file, and only then...

PT-2026-54761

Name of the Vulnerable Software and Affected Versions Dell Device Management Agent versions prior to 26.05 Description An Improper Link Resolution Before File Access Link Following issue exists where a low privileged attacker with local access could potentially exploit the flaw to achieve Elevati...

PT-2026-55134

Share-link ?token=… redemption races past download limit Ecosystem: Go Package: goshs.de/goshs/v2 github.com/patrickhener/goshs Affected: 0 || entry.DownloadLimit == -1 // ...serve file... // = current.DownloadLimit deletefs.SharedLinks, token fs.sharedLinksMu.Unlock Between line 978 RUnlock and...