BELL-CVE-2026-72008 CVE-2026-72008 does not affect BellSoft software

Bulletin has no description...

MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

Summary The default MLflow Tracking Server mlflow server, no authentication, default SQLite backend exposes the model-registry webhooks API unauthenticated, including a synchronous POST /api/2.0/mlflow/webhooks/id/test endpoint that returns the upstream response status and body to the caller. The...

CVE-2026-71472

creationtimestamp| type| source ---|---|--- 2026-08-17 20:50:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3vq4hm5uzq7xs 2026-08-17 21:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtclvqo5pb2b 2026-08-17 22:08:00+00:00| seen|...

CVE-2026-60106

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

MINI-789J-XQGW-3P3F

Bulletin has no description...

MINI-9F9W-RJQV-XFM5

Bulletin has no description...

K000162951: Apache HTTP Server vulnerability CVE-2026-29168

Security Advisory Description Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

MINI-6G86-53WC-P667

Bulletin has no description...

MINI-PJ6R-HF89-RJW9

Bulletin has no description...

CVE-2026-72230

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

EUVD-2026-59129

In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadvfragsendpacket assume that the skb provided to the function are always consumed. But the pre-check for an empty payload or the zero fragment size returned an error...

MINI-RMV3-64V6-X8RJ

Bulletin has no description...

MINI-WHW7-99X5-7CX2

Bulletin has no description...

CVE-2026-19826

A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack may be performed from remote. The...

CVE-2026-19827

CVE-2026-19827 affects alldatacenter alldata up to 0.6.8. The vulnerability concerns the FileInputStream usage in /admin/controller/JobLogController.java (logDetailCat Endpoint). Manipulation of the executorAddress argument enables path traversal, with remote exploitability. An exploit has been p...

EUVD-2026-58657

A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack may be performed from remote. The...

BELL-CVE-2026-68440 CVE-2026-68440 does not affect BellSoft software

Bulletin has no description...

AZL-96680 CVE-2026-56853 affecting package golang 1.26.7-1

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

AZL-98613 CVE-2026-56853 affecting package golang 1.27.1-1

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

CVE-2026-56853

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...