CVE-2026-66489

creationtimestamp| type| source ---|---|--- 2026-07-29 14:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs5npxyln2q...

CVE-2026-21655

creationtimestamp| type| source ---|---|--- 2026-07-29 14:30:31+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrs5a3ujze2r 2026-08-11 20:10:20+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgbpylkc2z 2026-08-13 08:49:15+00:00| seen|...

CVE-2026-66724 Permission Bypass Via Undocumented HTTP Methods In MWDB Core

MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...

CVE-2026-66724 Permission Bypass Via Undocumented HTTP Methods In MWDB Core

MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...

CVE-2026-66724 Permission Bypass Via Undocumented HTTP Methods In MWDB Core

MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...

CVE-2026-14900

creationtimestamp| type| source ---|---|--- 2026-07-29 12:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrwpx4qxr2a 2026-07-29 15:48:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsbldl7nl2q...

CVE-2026-56390

creationtimestamp| type| source ---|---|--- 2026-07-29 12:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56389...

RHSA-2020:0630

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:23+00:00| seen| https://t.me/linuxnews/622 2026-07-30 00:03:08+00:00| seen| https://t.me/linuxnews/622 2026-08-04 06:00:04+00:00| seen| https://t.me/linuxnews/622 2026-08-05 00:00:53+00:00| seen| https://t.me/linuxnews/622...

CVE-2023-66975

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:23+00:00| seen| https://t.me/CVEhub/14925 2026-07-30 00:00:45+00:00| seen| https://t.me/CVEhub/14925 2026-07-31 00:00:30+00:00| published-proof-of-concept| https://t.me/CVEhub/14925...

CVE-2026-65325

creationtimestamp| type| source ---|---|--- 2026-07-29 11:56:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrun6ipgr2q...

CVE-2026-58156

creationtimestamp| type| source ---|---|--- 2026-07-29 11:46:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrru3bjmiv2q...

CVE-2025-10656

creationtimestamp| type| source ---|---|--- 2026-07-29 11:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrswcniuq2i...

CVE-2026-58152

creationtimestamp| type| source ---|---|--- 2026-07-29 11:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrs3j7ogu2q...

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU. Security issues fixed: CVE-2026-41254: lcms: information disclosure and denial of service via integer overflow in CubeSize bsc1264994. CVE-2026-46917: unauthenticated attacker with...

CVE-2026-58154

creationtimestamp| type| source ---|---|--- 2026-07-29 10:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrokt44tz2r 2026-07-29 11:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrt2y3gqf27 2026-07-30 16:34:04+00:00| seen|...

CVE-2026-14488

CVE-2026-14488 affects the Meta Box AIO WordPress plugin (MB Frontend Submission extension) up to version 3.8.0. The vulnerability stems from handle_request() routing the mbfs_delete action without capability/ownership checks, and nonce verification in check_ajax() being gated behind is_ajax(), w...

CVE-2026-12476

creationtimestamp| type| source ---|---|--- 2026-07-29 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-12476 2026-07-29 08:58:04+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrrknneyy22y...

CVE-2026-57834

creationtimestamp| type| source ---|---|--- 2026-07-29 07:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrh37gmr52j...

CVE-2026-41920

creationtimestamp| type| source ---|---|--- 2026-07-29 07:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrgxmrz3r2k...

CVE-2026-23904

creationtimestamp| type| source ---|---|--- 2026-07-29 07:32:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrrfvdl5p62d 2026-07-29 10:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrrqjajyro2b 2026-09-02 12:05:14+00:00| seen|...