CVE-2026-86451

creationtimestamp| type| source ---|---|--- 2026-09-07 13:35:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccxurbhumciz6...

CVE-2026-56740

A flaw was found in the JLine3 Telnet server remote-telnet module. An unauthenticated remote attacker can exploit this vulnerability by injecting an excessive number of environment variables through the Telnet NEW-ENVIRON option. This action causes the server to store numerous variable pairs,...

CVE-2022-24734

PoC de CVE-2022-24734 Se puede obtener una RCE en el Panel de Administración de MyBB en Configuración - Añadir Nuevo Ajuste. El usuario debe tener derechos para añadir o actualizar un ajuste. Esto está probado en MyBB 1.8.29. Fuentes: https://github.com/mybb/mybb/...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Bypass crítico de autenticación remota en GNU Inetutils telnetd El fantasma de 2015 ha vuelto para apoderarse de todo lo que todavía ejecuta telnet. Cero autenticación. Una variable de entorno. Shell root instantánea. ⚠️ Resumen CVE-2026-24061 es una vulnerabilidad...

CVE-2026-86238

creationtimestamp| type| source ---|---|--- 2026-09-07 01:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c3nfrfbmymhgh...

CVE-2026-86259

creationtimestamp| type| source ---|---|--- 2026-09-06 14:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p 2026-09-06 14:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f...

PT-2026-86570

A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel set params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer hostname leads to off-by-one. The attack may be...

CVE-2026-86166

creationtimestamp| type| source ---|---|--- 2026-09-05 18:05:50+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117219757253901773 2026-09-06 05:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7vnlfkoyzfdv2...

CVE-2026-86121

creationtimestamp| type| source ---|---|--- 2026-09-05 10:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3murc33ejhe2f 2026-09-05 11:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murdarm3sf2w 2026-09-05 11:03:00+00:00| seen|...

CVE-2026-85769

creationtimestamp| type| source ---|---|--- 2026-09-05 07:00:03+00:00| seen| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0 2026-09-06 00:00:53+00:00| published-proof-of-concept| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0...

ROOT-OS-UBUNTU-2204-CVE-2026-64464 CVE-2026-64464 in linux - Patched by Root

Root has patched CVE-2026-64464 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

PT-2026-86468

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A remote buffer overflow exists in the formURL function within the /boaform/admin/formURL endpoint. This issue occurs when the Keywd/urlFQDN argument is manipulated, potentially allowing a...

CVE-2026-85654

creationtimestamp| type| source ---|---|--- 2026-09-04 22:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnu7m6m2m 2026-09-08 18:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muznq5uzq42v 2026-09-08 18:30:05+00:00| seen|...

CVE-2026-80119

creationtimestamp| type| source ---|---|--- 2026-09-04 20:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupqxskiz62g 2026-09-10 04:20:45+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv577dvbel2x 2026-09-10 04:20:47+00:00| seen|...

AZL-99669 CVE-2026-80806 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-85625

sift sift.js 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSPENABLED is set not set by default. As a result, if a...

CVE-2026-85625

sift (sift.js) 17.1.3 is vulnerable to remote code execution due to its use of for...in to enumerate query keys, which walks the object prototype chain and dispatches any matched operator key including $where . The $where operator compiles a string value into a function via new Function unless CS...

CVE-2026-85625 sift 17.1.3 Prototype Pollution Remote Code Execution via $where

sift sift.js 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSPENABLED is set not set by default. As a result, if a...

CVE-2026-80180

creationtimestamp| type| source ---|---|--- 2026-09-04 07:30:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czqz7xgy32jwi...

CVE-2026-85146

creationtimestamp| type| source ---|---|--- 2026-09-04 03:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munyzd4jpt2y 2026-09-04 04:02:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muo3fud6vf2l 2026-09-04 04:08:30+00:00| seen|...