CVE-2026-72847

broot , a terminal-based file tree viewer, is vulnerable to terminal escape sequence injection via unsanitized file and directory names. The tree view renders names using a plain to_string_lossy() call in src/tree_build/builder.rs and TreeLine::unprune in src/tree/tree_line.rs, with no control-ch...

CVE-2026-18279

Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2026-75140

creationtimestamp| type| source ---|---|--- 2026-08-20 17:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjpvckg5f26...

CVE-2026-55642

creationtimestamp| type| source ---|---|--- 2026-08-20 17:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjptsgum62u 2026-08-20 18:08:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjtoit24a2e 2026-08-22 05:40:03+00:00| seen|...

MINI-48C6-4GH5-Q24G

Bulletin has no description...

MINI-QJRR-GP4X-R6CJ

Bulletin has no description...

MINI-R6XM-WJR7-WMX4

Bulletin has no description...

MINI-6C86-4HMF-XQ53

Bulletin has no description...

MINI-32H6-946F-GCCG

Bulletin has no description...

MINI-FV97-3MWW-8V2H

Bulletin has no description...

MINI-XR5R-WR45-G29X

Bulletin has no description...

MINI-3WX3-QC4W-HV3H

Bulletin has no description...

CVE-2026-64970

creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:24+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...

CVE-2026-63038

creationtimestamp| type| source ---|---|--- 2026-08-20 16:39:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjopqokh22y 2026-08-20 18:26:21+00:00| seen| https://infosec.exchange/ap/users/116797276219291526/statuses/117128823263544759...

CVE-2026-55586

SumatraPDF 3.6.1 and earlier (Windows) contains a heap out-of-bounds write in the vendored CHMLib LZX decompressor. A crafted CHM file can supply malformed Huffman code lengths to make_decode_table in ext/CHMLib/lzx.c. In the long-code branch, internal nodes are written via next_symbol before val...

CVE-2026-18280 Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

EUVD-2026-63427

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

EUVD-2026-63426

Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

DEBIAN-CVE-2026-75140

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

EUVD-2026-63419

Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists...