CVE-2026-31499

creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x 2026-07-02 07:15:50+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-3473

creationtimestamp| type| source ---|---|--- 2026-05-22 12:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgxuvf5my2h...

CVE-2026-5308

creationtimestamp| type| source ---|---|--- 2026-05-22 12:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgxkrnsjj2k...

CVE-2026-6864

creationtimestamp| type| source ---|---|--- 2026-05-22 07:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgf3hprox2k 2026-05-25 05:49:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnrs6gp4q2l...

CVE-2026-7509

creationtimestamp| type| source ---|---|--- 2026-05-22 06:58:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgeamfjm22k 2026-05-25 04:25:55+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnn56cp2o2s...

CVE-2026-9104

creationtimestamp| type| source ---|---|--- 2026-05-22 06:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgdxnw2x32k...

CVE-2026-9053

creationtimestamp| type| source ---|---|--- 2026-05-22 06:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgcuvhi3j2e...

CVE-2026-6394

creationtimestamp| type| source ---|---|--- 2026-05-22 06:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmgcs2lkaa2a...

CVE-2026-46595

creationtimestamp| type| source ---|---|--- 2026-05-22 06:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgc4lusjl2k 2026-07-15 16:40:07+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mqp5wvyuvz2h 2026-09-03 06:20:04+00:00| seen|...

CVE-2026-46597

creationtimestamp| type| source ---|---|--- 2026-05-22 06:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgbwgulo32c 2026-06-26 13:42:31+00:00| seen| https://gist.github.com/alon710/0234a3b8537da177958a0a725a5f30b9...

CVE-2026-46598

creationtimestamp| type| source ---|---|--- 2026-05-22 06:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgbtjxtaj2k...

GHSA-JQQ5-8PX3-9M6M

creationtimestamp| type| source ---|---|--- 2026-05-22 06:10:50+00:00| seen| https://gist.github.com/alon710/1dd7eb9b2d2403233c4fe934b5852750...

CVE-2026-6391

creationtimestamp| type| source ---|---|--- 2026-05-22 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmg7gqbumh2l...

CVE-2026-8245

creationtimestamp| type| source ---|---|--- 2026-05-22 02:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmfwclbti72p...

EUVD-2026-31380

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.0 with...

GHSA-PCRH-GJ77-J4MW Concrete CMS is vulnerable to Stored XSS via external-link page cvName

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized...

PT-2026-42791

Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attacker-controlled domain via a crafted login link. This issue affects : Devolutions Server 2026.1.6.0 through 2026.1.16.0 Devolutions...

BentoML 后置链接漏洞

BentoML is an open-source model service library developed by BentoML. It is used to build high-performance and scalable artificial intelligence applications using Python. Versions of BentoML prior to 1.4.38 contained a post-link vulnerability. This vulnerability stemmed from the fact that the bui...

PT-2026-42832

Name of the Vulnerable Software and Affected Versions TP-Link range extenders affected versions not specified Description An authentication logic flaw allows an unauthenticated attacker on an adjacent network to reset the administrator password due to insufficient validation of a login parameter...

PT-2026-42752

Name of the Vulnerable Software and Affected Versions Sync-in versions prior to 2.3 Description An issue exists in the URL download feature where the private IP blocklist regex fails to match IPv4-mapped IPv6 addresses, such as ::ffff:127.0.0.1. On dual-stack systems, Node.js may report a socket'...