AZL-99669 CVE-2026-80806 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-85625

sift sift.js 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSPENABLED is set not set by default. As a result, if a...

CVE-2026-85625

sift (sift.js) 17.1.3 is vulnerable to remote code execution due to its use of for...in to enumerate query keys, which walks the object prototype chain and dispatches any matched operator key including $where . The $where operator compiles a string value into a function via new Function unless CS...

CVE-2026-85625 sift 17.1.3 Prototype Pollution Remote Code Execution via $where

sift sift.js 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSPENABLED is set not set by default. As a result, if a...

CVE-2026-85625 sift 17.1.3 Prototype Pollution Remote Code Execution via $where

sift sift.js 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSPENABLED is set not set by default. As a result, if a...

CVE-2026-80180

creationtimestamp| type| source ---|---|--- 2026-09-04 07:30:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czqz7xgy32jwi...

CVE-2026-85146

creationtimestamp| type| source ---|---|--- 2026-09-04 03:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munyzd4jpt2y 2026-09-04 04:02:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muo3fud6vf2l 2026-09-04 04:08:30+00:00| seen|...

PT-2026-85549

Name of the Vulnerable Software and Affected Versions sift sift.js versions prior to 17.1.4 Description The software enumerates query keys using a for...in loop, which traverses the object prototype chain and dispatches matched operator keys, including $where. The $where operation compiles a stri...

CVE-2026-64198

creationtimestamp| type| source ---|---|--- 2026-09-03 22:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hlkfupm65armm 2026-09-03 23:02:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munkmkg5am2h...

CVE-2026-71404

creationtimestamp| type| source ---|---|--- 2026-09-03 15:24:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/azinqwk5ad73h...

CVE-2026-82180

creationtimestamp| type| source ---|---|--- 2026-09-03 14:51:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2y65i3milc5gz 2026-09-03 15:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mumq7xmdns2d 2026-09-03 16:07:45+00:00| seen|...

CVE-2026-76642

creationtimestamp| type| source ---|---|--- 2026-09-03 11:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/65v5pmt2awpvl 2026-09-07 02:01:20+00:00| seen| https://bsky.app/profile/slackers.it/post/3muvfz7thww2s...

CVE-2026-80726

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117206230142963451 2026-09-04 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muoabrau2k2p...

CVE-2026-84378

creationtimestamp| type| source ---|---|--- 2026-09-02 19:40:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vj7jwfapz2xn...

CVE-2026-33016

creationtimestamp| type| source ---|---|--- 2026-09-02 06:00:13+00:00| seen| https://t.me/HackingTeamGrupoOfficial/45642 2026-09-03 00:00:48+00:00| seen| https://t.me/HackingTeamGrupoOfficial/45642...

CVE-2026-19754

creationtimestamp| type| source ---|---|--- 2026-09-02 05:17:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5whbyhti7sw7h...

CVE-2026-83551

creationtimestamp| type| source ---|---|--- 2026-09-01 23:20:10+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muikoiggdb2q 2026-09-03 20:32:45+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3muncay5iri2q...

CVE-2026-75964

creationtimestamp| type| source ---|---|--- 2026-09-01 08:05:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/amje3s7klivdy...

CVE-2026-82909

A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked API Token Handler. Executing a manipulation can lead to session expiration. The attack may be performed from remote...

CVE-2026-82909 QuantumNous new-api Revoked API Token token session expiration

A vulnerability was determined in QuantumNous new-api up to 1.0.0-rc.15. Affected by this issue is some unknown functionality of the file /api/usage/token/ of the component Revoked API Token Handler. Executing a manipulation can lead to session expiration. The attack may be performed from remote...