CVE-2026-15991 File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter

The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to read and delete arbitrar...

CVE-2026-17632

creationtimestamp| type| source ---|---|--- 2026-08-06 03:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf2gben5g2z 2026-08-07 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msijfxmoaz2r...

CVE-2026-55522

creationtimestamp| type| source ---|---|--- 2026-08-06 02:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msex2nnj2t2g 2026-08-25 16:36:00+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-hxmv-c4g6-5fqc...

CVE-2026-58163

creationtimestamp| type| source ---|---|--- 2026-08-06 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msevqjbtau23...

CVE-2026-67863

creationtimestamp| type| source ---|---|--- 2026-08-06 00:00:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mseqd3thp62t...

CVE-2026-11421

creationtimestamp| type| source ---|---|--- 2026-08-05 23:15:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msensp64kw26...

CVE-2026-8761

creationtimestamp| type| source ---|---|--- 2026-08-05 22:15:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msekhi3hnr2x...

EUVD-2026-53658

Nuxt is an open-source web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint /nuxtisland/... decodes and hashes attacker-controlled JSON body input with destr and ohash before validating the URL-resident hash. An unauthenticated POST...

CVE-2026-15996

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameter...

CVE-2026-70617

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msegbz4rzb2t...

CVE-2026-70426

creationtimestamp| type| source ---|---|--- 2026-08-05 20:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedsipw252f 2026-08-06 01:05:57+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3msetysiuoq2u 2026-08-06 03:20:51+00:00| seen|...

CVE-2026-17506

creationtimestamp| type| source ---|---|--- 2026-08-05 20:15:11+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msedquario2n...

CVE-2026-15996 Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parameters

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameter...

CVE-2026-13379

creationtimestamp| type| source ---|---|--- 2026-08-05 20:02:01+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mseczde4ai2g...

CVE-2026-8183

creationtimestamp| type| source ---|---|--- 2026-08-05 20:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecymdlna2t...

CVE-2026-8182

creationtimestamp| type| source ---|---|--- 2026-08-05 20:01:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msecyfwj5x2x...

CVE-2026-17623

creationtimestamp| type| source ---|---|--- 2026-08-05 19:54:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msecmaqf5a23...

CVE-2026-70617 Spacebar Server Missing Authorization via Group DM Recipient Endpoint

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verification. Attackers can exploit the...

CVE-2026-70617

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verification. Attackers can exploit the...

CVE-2026-70617 Spacebar Server Missing Authorization via Group DM Recipient Endpoint

Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without membership verification. Attackers can exploit the...