Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk

Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds...

GHSA-8MXV-9XHP-86H4

creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:14+00:00| seen| https://gist.github.com/alon710/719fff48bd5faded3e0e79faaf3782f6...

CVE-2026-16071

creationtimestamp| type| source ---|---|--- 2026-08-06 13:10:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4hotxsw2a...

CVE-2026-64570

A flaw was found in the Linux kernel's Wi-Fi subsystem mac80211. A double-free vulnerability exists in the handling of FILS Fast Initial Link Setup Discovery frames. When an allocation failure occurs during the update of a FILS Discovery template, the same memory region can be freed twice. This c...

CVE-2026-19035

creationtimestamp| type| source ---|---|--- 2026-08-06 12:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5zzhrkd3qttpp...

CVE-2025-9266

creationtimestamp| type| source ---|---|--- 2026-08-06 12:40:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3vd6jmq75lfr5...

GHSA-8C48-Q9WJ-3W37

creationtimestamp| type| source ---|---|--- 2026-08-06 12:31:36+00:00| seen| https://gist.github.com/alon710/d60715eb4915a2fe25854150e00d6548...

CVE-2026-18656

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:57+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzgtfn5x2y...

CVE-2026-18657

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:57+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzgtfn5x2y...

CVE-2026-18655

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:52+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzgpyqqc2p...

GHSA-2M8M-JHRM-W6J2

creationtimestamp| type| source ---|---|--- 2026-08-06 10:32:49+00:00| seen| https://gist.github.com/alon710/67103eb26c8040be3d1015d9a77a7298...

CVE-2026-5108

creationtimestamp| type| source ---|---|--- 2026-08-06 10:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfsot2xue23...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.95 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.95 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

CVE-2026-19020

creationtimestamp| type| source ---|---|--- 2026-08-06 08:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gbgegon2uzx2u...

GHSA-GX4C-2HQX-CW2R

creationtimestamp| type| source ---|---|--- 2026-08-06 08:31:35+00:00| seen| https://gist.github.com/alon710/8a116e77ebf57ab04c0fd9d4c43203c2...

CVE-2026-19008

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

CVE-2025-13909

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

CVE-2026-6639

creationtimestamp| type| source ---|---|--- 2026-08-06 08:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u...

EUVD-2025-210630

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...

CVE-2025-13909

The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...