CVE-2026-53643

creationtimestamp| type| source ---|---|--- 2026-07-07 00:10:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpzcv6vysq26...

GHSA-9G22-W2GR-VCMP

creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgcfkjb2s...

PT-2026-56214

Name of the Vulnerable Software and Affected Versions New API versions prior to 0.12.0-alpha.1 Description The email and WeChat account binding endpoints use GET requests for state-changing account operations. In deployments where session cookies are sent on cross-site navigations, an attacker ca...

PT-2026-56149

Name of the Vulnerable Software and Affected Versions WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell versions prior to 3.12.8 Description Unauthenticated attackers can achieve Remote Code Execution by sending unsanitized values through the postData parameter. The plug...

PT-2026-56298

Name of the Vulnerable Software and Affected Versions @better-auth/sso versions 0.1.0 through 1.6.10 @better-auth/sso versions 1.7.0-beta.x Description An SSRF flaw exists in the provider registration flow where OpenID Connect OIDC endpoint URLs are accepted without proper validation. When...

PT-2026-56135

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.471 Description An authenticated user can inject additional shell statements that execute on the remote server during deployment. This occurs because pre-deployment and post-deployment commands are...

VulnCheck KEV: CVE-2026-59800

9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint this route is not covered by the dashboard middleware matcher, so no authorization check is applied. The sudoPassword field from the request body is written to t...

CVE-2025-68052

creationtimestamp| type| source ---|---|--- 2026-07-06 23:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpz7t2bl2m2n...

CVE-2023-22886

creationtimestamp| type| source ---|---|--- 2026-07-06 23:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpz7eoby722b...

CVE-2026-41899

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, POST /api/feedback has no authentication, no rate limiting, and no input validation, allowing arbitrary content to be forwarded directly to a Discord webhook and enabling...

CVE-2026-54496

creationtimestamp| type| source ---|---|--- 2026-07-06 21:38:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz2fiw6dh2r 2026-07-17 19:28:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquibd7ypf22 2026-07-19 08:00:58+00:00| seen|...

CVE-2026-34038

creationtimestamp| type| source ---|---|--- 2026-07-06 21:32:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz22rxij323 2026-07-07 18:02:15+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mq36shckli2n 2026-07-08 11:48:08+00:00| seen|...

CVE-2026-54769

creationtimestamp| type| source ---|---|--- 2026-07-06 21:32:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz22qfgd22g 2026-07-06 22:35:25+00:00| published-proof-of-concept| https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc 2026-07-10...

GHSA-5493-9M76-2QRR

creationtimestamp| type| source ---|---|--- 2026-07-06 21:31:47+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpz22a66p72b...

CVE-2026-55727

creationtimestamp| type| source ---|---|--- 2026-07-06 21:28:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpyzuzlayu2c...

CVE-2025-53831

creationtimestamp| type| source ---|---|--- 2026-07-06 21:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzjfmjlm2i...

CVE-2026-57627

creationtimestamp| type| source ---|---|--- 2026-07-06 20:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpyvr5jl3j2n...

CVE-2026-43866

creationtimestamp| type| source ---|---|--- 2026-07-06 19:53:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyul5kuor2t 2026-07-09 03:28:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6owncfak2s 2026-07-16 19:00:10+00:00| seen|...

CVE-2026-43867

creationtimestamp| type| source ---|---|--- 2026-07-06 19:43:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpytz72vl22k 2026-07-06 20:28:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywieasws2x 2026-07-08 03:37:05+00:00| seen|...

CVE-2026-9181

creationtimestamp| type| source ---|---|--- 2026-07-06 19:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyt4yvswj2i 2026-07-06 20:15:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvrrdayk2n 2026-07-09 04:07:07+00:00| seen|...