CVE-2026-77505

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:31+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:23+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:25:31+00:00|...

CVE-2026-73006

creationtimestamp| type| source ---|---|--- 2026-09-08 22:01:06+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:01+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:19:25+00:00|...

CVE-2026-69510

creationtimestamp| type| source ---|---|--- 2026-09-08 22:00:56+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:50+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:18:17+00:00|...

CVE-2026-82004

creationtimestamp| type| source ---|---|--- 2026-09-08 20:14:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztl5x5n22t 2026-09-09 09:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3alfwss32g 2026-09-10 02:37:06+00:00| seen|...

CVE-2026-78509

creationtimestamp| type| source ---|---|--- 2026-09-08 20:13:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztjfduja2b 2026-09-08 20:19:03+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0352 2026-09-08 22:01:17+00:00| seen|...

CVE-2026-69730

creationtimestamp| type| source ---|---|--- 2026-09-08 20:11:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztexeiys2t 2026-09-08 20:19:39+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:00:58+00:00| seen|...

CVE-2026-69641

creationtimestamp| type| source ---|---|--- 2026-09-08 20:10:52+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztehbxin2f 2026-09-08 20:15:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0349 2026-09-08 22:02:20+00:00| seen|...

CVE-2026-69491

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztcdyiqv2j 2026-09-08 22:02:09+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 00:50:05+00:00| seen|...

CVE-2026-69431

creationtimestamp| type| source ---|---|--- 2026-09-08 20:09:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztbtcodf2f 2026-09-08 20:19:59+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 20:31:47+00:00| seen|...

GHSA-RCR6-4JQH-J84M Gitea: Remote Code Execution via diffpatch Git Hook Installation

Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...

Gitea: Remote Code Execution via diffpatch Git Hook Installation

Summary Gitea's diffpatch endpoint can be abused to install and execute a Git hook from repository-controlled content. An attacker with ordinary write access to a repository can execute arbitrary shell commands as the Gitea OS user. With default open registration, an unauthenticated visitor can...

CVE-2026-82060

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

CVE-2026-79576

creationtimestamp| type| source ---|---|--- 2026-09-08 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzghqtpgw2j 2026-09-08 18:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmiuejgl2g 2026-09-08 18:08:34+00:00| seen|...

CVE-2026-86724

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...

Denial of Service (DoS)

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Denial of Service DoS via the note field in the POST /account/accept/acceptance endpoint. An attacker can exhaust server resources by submitting excessively large input,...

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

CVE-2026-82060

CVE-2026-82060 is an insufficient validation flaw in MongoDB Server affecting sharded collections. During document insertion, shard key values were not properly validated, allowing authenticated users to store operator-shaped objects as shard key values. When change stream events for such documen...

CVE-2026-82060 Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query Operator Injection in Change Stream Post-Image Lookups

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

CVE-2026-73311

creationtimestamp| type| source ---|---|--- 2026-09-08 16:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzfr5434c2f 2026-09-09 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv2gczyd5i24 2026-09-12 08:07:07+00:00| seen|...