66522 matches found
CVE-2026-5108
creationtimestamp| type| source ---|---|--- 2026-08-06 10:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfsot2xue23...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.95 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.95 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
CVE-2026-19020
creationtimestamp| type| source ---|---|--- 2026-08-06 08:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gbgegon2uzx2u...
GHSA-GX4C-2HQX-CW2R
creationtimestamp| type| source ---|---|--- 2026-08-06 08:31:35+00:00| seen| https://gist.github.com/alon710/8a116e77ebf57ab04c0fd9d4c43203c2 2026-08-25 18:39:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117157604721602110...
CVE-2026-19008
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...
CVE-2025-13909
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
CVE-2026-6639
creationtimestamp| type| source ---|---|--- 2026-08-06 08:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msflycfq5a2u...
EUVD-2025-210630
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
CVE-2025-13909
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
CVE-2025-13909
WSO2 Identity Server is reported to have a multi-tenant authentication flaw where requests using Email OTP, SMS OTP, or Magic Link as first factors do not adequately enforce tenant isolation. This can allow an attacker to disclose PII from other tenants (e.g., mobile numbers) due to cross-tenant ...
CVE-2025-13909 Information Disclosure via Multi-Tenant Authentication Flows in WSO2 Identity Server Allows Cross-Tenant PII Exposure
The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators. This failure to adequately separate user data between tenants can lead to the exposure of personally identifiable...
GHSA-4VR5-P2GC-H23P
creationtimestamp| type| source ---|---|--- 2026-08-06 07:31:27+00:00| seen| https://gist.github.com/alon710/7cd2b59244b6ec677e9295bd453cf08b...
CVE-2026-19008 mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...
EUVD-2026-53766
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...
CVE-2026-19008
A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...
CVE-2026-19008
Technical details about CVE-2026-19008 are not publicly available in the provided documents. Monitor for updates.
GHSA-HXVH-4H3W-PRP9
creationtimestamp| type| source ---|---|--- 2026-08-06 05:31:22+00:00| seen| https://gist.github.com/alon710/75a8da6231b4389c07987c60b53a1e91...
CVE-2025-58486
creationtimestamp| type| source ---|---|--- 2026-08-06 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117046681751967940...
CVE-2026-17624
creationtimestamp| type| source ---|---|--- 2026-08-06 04:00:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf5r3poxb2g 2026-08-07 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msirs6gned2t...