EUVD-2026-44577

An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local network to retrieve geolocation-related da...

CVE-2026-9770 Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices. An attacker with access to the firmware image can extract the embedded key. Successful exploitation may allow an unauthenticated attacker on the same...

CVE-2026-9770

Affected products: TP-Link Kasa EC70 v4 and EC71 v4 firmware. Issue: a static cryptographic private key is stored in a read-only filesystem shared across devices, allowing extraction from the firmware image. Impact: an unauthenticated attacker on the same network could use the embedded key in the...

CVE-2026-15751

creationtimestamp| type| source ---|---|--- 2026-07-15 00:20:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnh6iiwsk2l 2026-07-27 09:03:41+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmjztw76g25 2026-07-27 09:03:41+00:00| seen|...

CVE-2025-56364

creationtimestamp| type| source ---|---|--- 2026-07-15 00:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqng325btt2z 2026-07-27 08:48:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmj6r7uog2m 2026-07-27 08:53:06+00:00| seen|...

PT-2026-58866

Name of the Vulnerable Software and Affected Versions TP-Link Kasa EC70 v4 TP-Link Kasa EC71 v4 Description An information disclosure issue exists in the local discovery mechanism. This flaw allows an unauthenticated attacker on the same local network to retrieve sensitive geolocation information...

PT-2026-60145

Name of the Vulnerable Software and Affected Versions grav-plugin-api versions prior to 1.0.4 Description An unauthenticated attacker can cause a password reset email to contain a link pointing to a server under their control. This occurs because the sanitizeHttpUrl function fails to verify the...

The vulnerability in the net/core/skbuff.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-15769

creationtimestamp| type| source ---|---|--- 2026-07-14 23:43:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnf5nd2jx2e 2026-07-16 04:45:18+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260716 2026-07-17 21:37:06+00:00| seen|...

CVE-2026-48334

creationtimestamp| type| source ---|---|--- 2026-07-14 23:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndbdebps2z 2026-07-15 04:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116922110851046198 2026-07-15 04:30:28+00:00| seen|...

CVE-2026-48352

creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqncsmovb22l...

CVE-2026-15738

creationtimestamp| type| source ---|---|--- 2026-07-14 23:01:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqncsl2fl42i 2026-07-15 17:07:09+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hcc4fo2b...

CVE-2026-15772

creationtimestamp| type| source ---|---|--- 2026-07-14 22:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbqvwgy52z 2026-07-15 23:02:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926482748057348 2026-07-16 04:45:25+00:00| seen|...

GHSA-9HC2-HJX8-Q6PV

creationtimestamp| type| source ---|---|--- 2026-07-14 22:42:05+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337 2026-07-15 00:00:00+00:00| seen| https://gist.github.com/alon710/2e36d4018e71382099203c9d78e54337...

UBUNTU-CVE-2026-54572

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an...

CVE-2026-15750

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...

CVE-2026-15643

creationtimestamp| type| source ---|---|--- 2026-07-14 22:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqna5acr362r 2026-07-15 17:07:13+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mqp7hgmo632m...

CVE-2026-48259

creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w3ijbo2f 2026-07-15 10:18:27+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimj2ktr27 2026-07-18 03:37:06+00:00| seen|...

CVE-2026-48359

creationtimestamp| type| source ---|---|--- 2026-07-14 22:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7w2btli2t 2026-07-15 10:18:21+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoimczvq22q 2026-07-18 03:07:07+00:00| seen|...

CVE-2026-15750

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...