CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

UBUNTU-CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

EUVD-2026-40306

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

CVE-2026-58374 describes a bounds-check vulnerability in hostapd (before 2.12) where an MLO association request can cause an out-of-bounds write due to parsing a link_id value of 15, while the storage only supports IDs 0–14. This unauthenticated, range-limited attacker could trigger a denial of s...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

CVE-2026-58374

In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing allows an unauthenticated attacker within wireless range to send a crafted management frame containing a malformed Multi-Link Element or Per-STA Profile...

EDB-14146

creationtimestamp| type| source ---|---|--- 2026-06-30 11:40:03+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e21c51a4-c763-4cfa-b829-93bd06110368...

CVE-2026-13558

creationtimestamp| type| source ---|---|--- 2026-06-30 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mpiw5w4cb32f...

CVE-2026-54305

creationtimestamp| type| source ---|---|--- 2026-06-30 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpivzdggor26 2026-07-18 03:46:30+00:00| seen| https://bsky.app/profile/lillyn8n.bsky.social/post/3mqve4aq3wk2m 2026-07-18 03:46:31+00:00| seen|...

PHP: PHP-FPM: PHP-FPM: Cross-Site Scripting vulnerability via improper URL sanitation

A flaw was found in PHP, specifically within the PHP-FPM status page. Due to improper sanitation of user data, a remote attacker can craft a malicious URL. When a user views the PHP-FPM status page with this crafted URL, it can lead to the execution of arbitrary JavaScript code Cross-Site Scripti...

CVE-2026-45822

creationtimestamp| type| source ---|---|--- 2026-06-30 10:45:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpit55dn3724 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY 2026-08-29 00:00:09+00:00| seen|...

CVE-2026-56137

creationtimestamp| type| source ---|---|--- 2026-06-30 10:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpisu6uw3z23 2026-06-30 17:05:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpjiepd4r62n 2026-07-01 02:36:21+00:00| seen|...

CVE-2012-2015

creationtimestamp| type| source ---|---|--- 2026-06-30 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpiso2nb5m2v...

CVE-2026-56809

creationtimestamp| type| source ---|---|--- 2026-06-30 10:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpislaghur2n 2026-07-01 02:36:24+00:00| seen| https://jvn.jp/en/jp/JVN48718197 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY...

CVE-2026-12240

creationtimestamp| type| source ---|---|--- 2026-06-30 10:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpis2mbdhh2u 2026-06-30 22:17:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjzrq4vsk2i...

CVE-2025-24815

creationtimestamp| type| source ---|---|--- 2026-06-30 10:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirtvcben2n...

CVE-2026-14164

creationtimestamp| type| source ---|---|--- 2026-06-30 10:16:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpirik6atm2z 2026-08-28 13:00:05+00:00| seen| Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY 2026-08-29 00:00:09+00:00| seen|...