ECHO-041C-12C3-789B

Bulletin has no description...

ECHO-EB5E-B491-1225

Bulletin has no description...

ECHO-471F-26DC-2062

Bulletin has no description...

EUVD-2026-63480

LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...

MINI-9PXR-5PXV-XJ5V

Bulletin has no description...

MINI-44JR-6VC3-8CRM

Bulletin has no description...

MINI-79GG-F776-W44M

Bulletin has no description...

MINI-FC3R-5MQV-6RXX

Bulletin has no description...

MINI-WFRQ-J94W-45VH

Bulletin has no description...

MINI-9XVC-GJ8V-995X

Bulletin has no description...

MINI-WH95-4P5J-4GPV

Bulletin has no description...

MINI-X2W7-HQ2Q-94XF

Bulletin has no description...

CVE-2026-76633

creationtimestamp| type| source ---|---|--- 2026-08-20 15:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjj5mtklk2u...

CVE-2026-52608

creationtimestamp| type| source ---|---|--- 2026-08-20 14:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjild7mo725...

CVE-2026-50152

creationtimestamp| type| source ---|---|--- 2026-08-20 14:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh7ac24k26 2026-08-20 14:48:26+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtjiiftgb62o 2026-08-28 02:07:46+00:00| seen|...

CVE-2026-74016

creationtimestamp| type| source ---|---|--- 2026-08-20 14:09:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgd3bwrq2c 2026-08-20 14:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjgdtljt22j...

MINI-43C2-QM78-M77J

Bulletin has no description...

GHSA-P9R8-2Q67-FP86

creationtimestamp| type| source ---|---|--- 2026-08-20 14:00:04+00:00| published-proof-of-concept| Telegram/s3A4zS-xINsQCOFnw3lncQJfAtm8MI1VEo1sscCDdPigg 2026-08-20 16:00:50+00:00| seen| https://thehackernews.com/2026/08/nasa-ait-gui-flaws-could-let.html 2026-08-21 00:00:09+00:00|...

CVE-2026-64969 Insecure Direct Object Reference in ATutor

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

MINI-2VJX-26F4-3MC8

Bulletin has no description...