CVE-2026-48911

CVE-2026-48911 describes an Insufficient Verification of Data Authenticity in Apache Answer (affected up to 2.0.1). The vulnerability arises from a missing authorization check in the external-login email binding flow, enabling unauthenticated attackers to take over arbitrary user accounts by guid...

CVE-2026-71269

creationtimestamp| type| source ---|---|--- 2026-08-05 15:08:37+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043528766793055...

CVE-2026-71278

creationtimestamp| type| source ---|---|--- 2026-08-05 15:02:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdsay4d2z2h...

CVE-2026-16442

CVE-2026-16442 affects Keycloak’s SAML broker component. The IdP-initiated SSO endpoint fails to enforce whether a provider is restricted to account linking, allowing an attacker with control of a linked upstream identity to bypass login restrictions and gain full access to a local user account. ...

CVE-2026-71268

creationtimestamp| type| source ---|---|--- 2026-08-05 14:58:17+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdrzssxzv22...

CVE-2026-18933

creationtimestamp| type| source ---|---|--- 2026-08-05 14:33:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdqom5zgp2c 2026-08-05 17:01:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043971069363515 2026-08-06 11:39:41+00:00| seen|...

CVE-2026-61483

creationtimestamp| type| source ---|---|--- 2026-08-05 14:30:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/jhvy6kzsbsna4...

CVE-2026-12410

CVE-2026-12410 affects CCleaner on Windows, specifically the Uninstaller component prior to version 7.10.1464. The issue is a local privilege escalation where a symlink/junction created during uninstallation can be followed by CCleaner when deleting the application data folder, allowing an attack...

Malicious code in multi-reqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38937963f906d0bf3b4dac24a1a45f574aeb53cd2f268ffb9730d88bedf50bce The package's default export accepts token, password arguments and POSTs them, formatted as a Discord embed titled 'Yeni Hesap Bilgisi' with fields '...

tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...

CVE-2026-71248

creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn3sdny23 2026-08-05 12:37:13+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3msdk5vqh5r2y...

CVE-2026-70588

creationtimestamp| type| source ---|---|--- 2026-08-05 11:31:33+00:00| seen| https://gist.github.com/alon710/98861561e950349ba52fdd407f74f7c8...

CVE-2026-15452

creationtimestamp| type| source ---|---|--- 2026-08-05 10:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hpglrn2nlmpgf...

CVE-2026-7444

creationtimestamp| type| source ---|---|--- 2026-08-05 10:10:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g2qu2owwxt7mn 2026-08-06 13:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msg4qorpbj2g...

CVE-2026-15452 Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query String

The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUESTURI Query String in all versions up to, and including, 6.11.3 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-71207

creationtimestamp| type| source ---|---|--- 2026-08-05 09:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msd7b22cji2a...

CVE-2026-70376

creationtimestamp| type| source ---|---|--- 2026-08-05 09:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msd7aysupv2p...

CVE-2026-18900

creationtimestamp| type| source ---|---|--- 2026-08-05 08:53:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msd5nfsevf2u...

CVE-2026-64574

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

EUVD-2026-53268

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...