CVE-2026-59990

creationtimestamp| type| source ---|---|--- 2026-07-17 02:47:35+00:00| seen| https://bsky.app/profile/eed3si9n.com/post/3mqsqe4xchk2e...

CVE-2026-62217

creationtimestamp| type| source ---|---|--- 2026-07-17 02:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqspzu36242e...

CVE-2026-62321

creationtimestamp| type| source ---|---|--- 2026-07-17 02:01:13+00:00| seen| https://bsky.app/profile/slackers.it/post/3mqsnr7xax22x...

GHSA-48QW-824M-86PR

creationtimestamp| type| source ---|---|--- 2026-07-17 00:31:31+00:00| seen| https://gist.github.com/alon710/aa823e4042d20db07abf6864647f71af...

CVE-2026-48045: Allocation of Resources Without Limits or Throttling

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...

CVE-2026-48487: Improper Handling of Length Parameter Inconsistency

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, readcharacterstring and readstring in src/zeroconf/protocol/incoming.py advanced self.offset by attacker-declared RDLENGTH without checking it against self.datalen, allowing unauthenticated hosts on th...

PT-2026-60769

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the organization management component allows a delegated administrator with organization management permissions to bypass security boundaries. The administrator can create an...

TP-Link Archer VX1800v v1 domain name parameter injection vulnerability

The Archer VX1800v v1 is a dual-band Gigabit wireless router produced by TP-Link. The TP-Link Archer VX1800v v1 has a command injection vulnerability. This vulnerability stems from improper cleaning of domain name parameters. Attackers can exploit this vulnerability by accessing relevant HTTP...

CVE-2026-8075: Improper Check for Unusual or Exceptional Conditions

Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...

CVE-2026-47183: Uncontrolled Resource Consumption

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.6, DNSIncoming.logexceptiondebug and the four QuietLogger exception-dedup methods stored an unbounded seenlogs dictionary keyed by attacker-influenced IncomingDecodeError messages, retaining sys.excinfo...

CVE-2026-47180: Uncontrolled Recursion

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.5, DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer, and a single mDNS packet carrying chained pointers can trigger a RecursionError that escapes DNSIncoming.init, causing...

CVE-2026-47184: Allocation of Resources Without Limits or Throttling

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.7, DNSCache.asyncadd inserted every response record into cache, expirations, expireheap, and servicecache without a cap, allowing unauthenticated hosts on the local link over UDP/5353 224.0.0.251 / ff02::f...

CVE-2026-16072: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...

The vulnerability of the DLL file loading mechanism of the SAProuter proxy server allows a hacker to execute arbitrary code.

The vulnerability of the DLL file loading mechanism of the SAProuter proxy server is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

CVE-2026-45368

creationtimestamp| type| source ---|---|--- 2026-07-16 23:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsfii3i6n2h...

CVE-2026-44019

creationtimestamp| type| source ---|---|--- 2026-07-16 23:08:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqse4yoyu52o...

CVE-2026-44175

creationtimestamp| type| source ---|---|--- 2026-07-16 23:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsdw735ai2n...

CVE-2026-59117

creationtimestamp| type| source ---|---|--- 2026-07-16 22:41:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116932062306628938 2026-07-16 23:50:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsghjt65l2u 2026-07-17 14:00:11+00:00| seen|...

CVE-2026-47088

creationtimestamp| type| source ---|---|--- 2026-07-16 20:34:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqs3jia3bi2e...

CVE-2026-52869

creationtimestamp| type| source ---|---|--- 2026-07-16 20:31:08+00:00| seen| https://gist.github.com/alon710/1d517629bc176ae6cad3ee2369704fcb 2026-08-04 06:51:03+00:00| seen| https://gist.github.com/Correctover/36ce05054d457c4fb176b23f08f9962b...