CVE-2026-18149

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...

CVE-2026-18149

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...

UBUNTU-CVE-2026-18149

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...

CVE-2026-18149 undici vulnerable to Denial of Service via orphaned RetryHandler response body

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...

CVE-2026-85403

creationtimestamp| type| source ---|---|--- 2026-09-04 11:08:16+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muot6j7pgy2u...

CVE-2026-80180

creationtimestamp| type| source ---|---|--- 2026-09-04 07:30:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/czqz7xgy32jwi...

CVE-2026-82180

creationtimestamp| type| source ---|---|--- 2026-09-03 14:51:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2y65i3milc5gz 2026-09-03 15:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mumq7xmdns2d 2026-09-03 16:07:45+00:00| seen|...

CVE-2026-58400

creationtimestamp| type| source ---|---|--- 2026-09-03 12:28:54+00:00| seen| https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a 2026-09-03 19:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54p72iz2v 2026-09-03 19:02:33+00:00| seen|...

CVE-2026-18329

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:45+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 12:45:11+00:00| seen| https://www.acn.gov.it/portale/w/f5-risolte-vulnerabilita-nei-prodotti-nginx 2026-09-03 13:45:07+00:00| seen|...

EUVD-2026-62540

Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge...

CVE-2026-84377

creationtimestamp| type| source ---|---|--- 2026-09-02 19:22:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq...

PT-2026-86213

CVE ID :CVE-2026-23585 Published : Sept. 2, 2026, 7:52 a.m. | 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2026-39904

creationtimestamp| type| source ---|---|--- 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/188216 2026-09-01 20:00:07+00:00| seen| https://t.me/hackingAttack/188218 2026-09-02 01:00:21+00:00| published-proof-of-concept| https://t.me/hackingAttack/188216 2026-09-02 01:00:22+00:00|...

CVE-2026-84139

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CVE-2026-73552

No description is available for this CVE...

CVE-2026-73512

No description is available for this CVE...

CVE-2026-81692

creationtimestamp| type| source ---|---|--- 2026-08-31 08:02:18+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3muegwcnxux2o...

Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-2088)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2088 advisory. Issue summary: When an OpenSSL QUIC server Listener SSL object processesvalid QUIC Initial packets for unknown destination connection IDs, itcan allocate and queue new incoming channels without enforci...

CVE-2026-81520

creationtimestamp| type| source ---|---|--- 2026-08-29 05:01:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu73uf3kgl22 2026-08-29 14:09:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mua2is4qhj25 2026-08-29 14:09:28+00:00| seen|...