CVE-2026-56853

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...

K000162915: libcurl vulnerability CVE-2026-10536

Security Advisory Description A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this...

EUVD-2026-57714

An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information. Panorama is not impacted by this vulnerability...

CVE-2026-70453

rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hashsearch function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list. A sender can exploit the quadratic-time worst-case behavior in hash lookups to exhaust receive...

BELL-CVE-2026-68347 CVE-2026-68347 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-68316 CVE-2026-68316 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-68177 CVE-2026-68177 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-68191 CVE-2026-68191 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-68167 CVE-2026-68167 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-68332 CVE-2026-68332 does not affect BellSoft software

Bulletin has no description...

CVE-2026-66145

creationtimestamp| type| source ---|---|--- 2026-08-11 23:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstrguo5ru27 2026-08-12 12:25:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msv4rho5bn2z 2026-08-12 16:45:26+00:00| seen|...

CVE-2026-72784

creationtimestamp| type| source ---|---|--- 2026-08-11 14:54:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ir34ladnhd5sh...

CVE-2026-72783

Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the Local file system class’s ensurePathIsContained function. The vulnerability stems from validating the path before normalization, creating a desanitization-style ...

PT-2026-71891

CVE-2023-54367 - Rejected reason: This CVE ID has been rejected. CVE ID :CVE-2023-54367 Published : Aug. 11, 2026, 3:17 p.m. | 14 minutes ago Description :Rejected reason: This CVE ID has been rejected. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

CVE-2026-68157

In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry in typenames. getimmediateparent then dereferences a NULL...

UBUNTU-CVE-2026-68390

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold hdev-lock for hciconnparams lookups hciconnparamslookup requires hdev-lock be held, otherwise the list iteration or param access is not safe. Hold hdev-lock for params lookups in hcisync...

CVE-2026-68171

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-65948

UnixAuth lacks brute-force protection in Apache Ranger versions = 2.8.0. Note: UnixAuth is NOT a recommended option for production deployments. Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-65948

The CVE-2026-65948 entry concerns Apache Ranger’s UnixAuth, which lacks brute-force protection in versions ≤ 2.8.0. This absence can enable brute-force authentication attempts against UnixAuth. The notes recommend upgrading to version 2.9.0, which fixes the issue. UnixAuth is explicitly labeled a...

CVE-2026-17021 Salon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering

The Salon Booking System WordPress plugin before 10.30.34 does not properly restrict access to some of its booking-modification AJAX actions and does not verify ownership of the targeted booking, allowing unauthenticated users to tamper with the stored total of arbitrary bookings...