CVE-2026-83452

creationtimestamp| type| source ---|---|--- 2026-09-16 02:13:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2vn7t3c2b 2026-09-16 04:20:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmbxtwtka2r 2026-09-16 16:00:44+00:00| seen|...

CVE-2026-83339

creationtimestamp| type| source ---|---|--- 2026-09-16 02:13:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2v4j5pc2b 2026-09-16 04:10:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmbfwcr4v2t 2026-09-16 07:01:56+00:00| seen|...

CVE-2026-87214

creationtimestamp| type| source ---|---|--- 2026-09-16 02:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm2pcykte2g 2026-09-22 10:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mw3y5r7dzn2v 2026-09-23 08:46:58+00:00| seen|...

CVE-2026-83260

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlubb662a2f 2026-09-16 01:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyzkn7zf2p 2026-09-23 09:18:15+00:00| seen|...

CVE-2026-83232

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluazdmr42p 2026-09-16 03:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmabzzsr22y 2026-09-23 09:19:04+00:00| seen|...

CVE-2026-83229

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluarjjeo24 2026-09-16 01:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyhqyxq42b 2026-09-23 09:19:10+00:00| seen|...

CVE-2026-83202

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluaik74s2w 2026-09-16 03:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm7q6wgha24 2026-09-22 12:07:06+00:00| seen|...

CVE-2026-83108

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu6qp72g2n 2026-09-16 03:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm6mhtxro2j 2026-09-23 09:46:39+00:00| seen|...

CVE-2026-83107

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu6irlel2t 2026-09-16 01:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlxdyxptc2t 2026-09-23 09:46:41+00:00| seen|...

CVE-2026-83060

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu3jaizt2j 2026-09-16 02:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm4eu5cu72r 2026-09-23 05:07:07+00:00| seen|...

CVE-2026-83055

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:00+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu2bkvvx2j 2026-09-16 00:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlv4frvnq2b 2026-09-23 09:48:14+00:00| seen|...

CVE-2026-69486

creationtimestamp| type| source ---|---|--- 2026-09-16 00:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlthqp3l52s 2026-09-16 04:46:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916 2026-09-16 12:00:07+00:00|...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38403)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from the delDevice function not properly implementing access control mechanisms. Attackers can exploit this vulnerability by sending...

PT-2026-93763

Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users. The b2s calendar move post AJAX handler in includes/Ajax/Post.php issues an UPDATE against the b2s posts table using only the attacker-supplied b2s id primary key...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38415)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability in access control. This vulnerability stems from an improper access control in the getCloudDownloadStatus function. Attackers can exploit this vulnerability by sending a specially crafted POS...

PT-2026-93854

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.2.0 through 9.5.3 Description The REST API user creation endpoint 'POST /ccm/api/1.0/users', specifically the add function in concrete/src/Api/Controller/Users.php, fails to perform a permission check before creating an...

PT-2026-93734

Name of the Vulnerable Software and Affected Versions zlt2000 microservices-platform versions prior to 6.0.0 Description An authorization bypass exists in the search-center service. Authenticated attackers can read any Elasticsearch index by specifying the index name in the path variables of the...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38562)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setUrlFilterRules function. Attackers can exploit this vulnerability by sending a specially crafted POS...

CVE-2026-92468: Authorization Bypass Through User-Controlled Key

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/indexName and GET /agg/requestStat/indexName/routing path...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38401)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control in the clearTracerouteLog function. Attackers can exploit this vulnerability by sending a specially crafted...