CVE-2026-27436

creationtimestamp| type| source ---|---|--- 2026-07-02 21:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyqwklut2d 2026-07-31 13:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrx3kxv2272u...

CVE-2026-57624

creationtimestamp| type| source ---|---|--- 2026-07-02 21:38:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpoyjrzddk2e...

Missing Authorization

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Missing Authorization via the POST /api/tunnel/tailscale-install route handler, which accepts a JSON body containing a sudoPassword field and pipes it, along with the contents o...

CVE-2026-5348

creationtimestamp| type| source ---|---|--- 2026-07-02 20:07:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoth3xfxh2o...

CVE-2026-59097 Taiga < 6.10.2 - Unauthorized Due-Date Creation via API Viewsets

Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any project by exploiting unprotected POST endpoints on the user-story, task, and issue due-date API viewsets. Attackers can supply an arbitrary...

CVE-2026-28322

creationtimestamp| type| source ---|---|--- 2026-07-02 19:37:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mporrnzimn22...

CVE-2026-55950

creationtimestamp| type| source ---|---|--- 2026-07-02 19:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporghjrir27 2026-07-03 09:41:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqaxqaleg2u 2026-07-03 10:37:35+00:00| seen|...

CVE-2024-14037

creationtimestamp| type| source ---|---|--- 2026-07-02 19:15:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpoqlg2xhx27 2026-07-02 19:25:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpor5j4quo2v 2026-07-02 20:20:45+00:00| seen|...

CVE-2026-55119

creationtimestamp| type| source ---|---|--- 2026-07-02 18:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpopif3kwk2a 2026-07-03 07:27:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzgy6epo2n 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-55110

creationtimestamp| type| source ---|---|--- 2026-07-02 18:51:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpop7glvx22w 2026-07-03 07:07:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppydky5l42i 2026-07-08 11:01:21+00:00| seen|...

Craft CMS: Authorship spoofing in `entries/save-entry` via pre-check/post-mutation authorization gap

Summary EntriesController::actionSaveEntry performs entry-edit permission checks before request-controlled author changes are applied to the model. The subsequent author mutation path accepts attacker-supplied authors / author parameters and allows the change when the current user is one of the o...

CVE-2026-7311

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress (up to version 3.6.13) is vulnerable to arbitrary file deletion due to insufficient file path validation in delete_converted_image_size. Authenticated attackers with author-level access can delete arbitrary files on the server ...

CVE-2026-7311

The TinyPNG – JPEG, PNG & WebP image compression plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteconvertedimagesize function in all versions up to, and including, 3.6.13. This makes it possible for authenticated attackers, with...

CVE-2026-55116

creationtimestamp| type| source ---|---|--- 2026-07-02 18:31:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoo4atcsr2w 2026-07-03 08:31:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq4zlwqt52c 2026-07-03 21:38:06+00:00| seen|...

CVE-2026-54401

creationtimestamp| type| source ---|---|--- 2026-07-02 18:29:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpony4gxfx2z 2026-07-03 07:07:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyectjt62c 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-55115

creationtimestamp| type| source ---|---|--- 2026-07-02 18:27:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponu6s7dz2j 2026-07-03 07:13:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppypbjmeg2w 2026-07-03 08:30:37+00:00| seen|...

CVE-2026-55114

creationtimestamp| type| source ---|---|--- 2026-07-02 18:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponeajoqd2v 2026-07-03 07:05:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyayifuw27 2026-07-07 05:07:08+00:00| seen|...

CVE-2026-54404

creationtimestamp| type| source ---|---|--- 2026-07-02 18:16:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mponbkeuld2v 2026-07-03 19:51:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprczq72g72f 2026-07-08 11:01:21+00:00| seen|...

CVE-2026-13743

creationtimestamp| type| source ---|---|--- 2026-07-02 17:15:13+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-02 2026-07-02 20:21:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoub7zdge2x 2026-07-03 12:23:48+00:00| seen|...

CVE-2025-58902

creationtimestamp| type| source ---|---|--- 2026-07-02 17:05:07+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpojbp3e6w2v 2026-07-03 03:26:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplzmqmgt2k 2026-07-03 11:39:39+00:00| seen|...