AI-Assisted Design of a Post-Quantum Cryptographic Accelerator: A Deployed-Silicon Case Study

Post-quantum migration is mandated on published timelines, and silicon that ships with a defect cannot be patched remotely. The standard acceptance gate cannot detect an entire class of ML-DSA defects. Signing resamples until a candidate meets its norm bounds, so the executed path varies with the...

SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote, unauthenticated attacker...

CVE-2026-25718

creationtimestamp| type| source ---|---|--- 2026-09-02 23:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mul35bvf6v2o...

CVE-2026-84292

creationtimestamp| type| source ---|---|--- 2026-09-02 22:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mukzzawcjy2s 2026-09-03 01:11:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117204442332805731 2026-09-03 01:11:04+00:00| seen|...

CVE-2026-84452

creationtimestamp| type| source ---|---|--- 2026-09-02 22:14:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bv4axqgwkdl5 2026-09-08 22:35:03+00:00| published-proof-of-concept| https://github.com/microsoft/winml-cli/security/advisories/GHSA-96p9-rh4f-92cf 2026-09-08 22:40:04+00:0...

CVE-2026-12555

creationtimestamp| type| source ---|---|--- 2026-09-02 21:28:09+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mukuv3x3nm2j 2026-09-03 10:54:31+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mumbwz6dok26 2026-09-03 14:01:09+00:00| seen|...

CVE-2026-82955

creationtimestamp| type| source ---|---|--- 2026-09-02 19:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukpfsm5ba25...

CVE-2026-84377

creationtimestamp| type| source ---|---|--- 2026-09-02 19:22:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ijcyerl3yj4uq 2026-09-30 22:30:31+00:00| seen| https://gist.github.com/alon710/dea2765728e20846c82f1cf257b88a79...

CVE-2026-51769

creationtimestamp| type| source ---|---|--- 2026-09-02 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muknq43khm25...

CVE-2026-51764

creationtimestamp| type| source ---|---|--- 2026-09-02 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukn6asdf72p...

CVE-2026-51757

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmfkj2h22...

CVE-2026-51750

creationtimestamp| type| source ---|---|--- 2026-09-02 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukmmdz6bs2t...

CVE-2026-19593

creationtimestamp| type| source ---|---|--- 2026-09-02 18:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukjswn5eg25...

CVE-2026-77124 Nexus Repository 3 - Script Execution Disable Setting Not Enforced

In affected versions of Nexus Repository 3, the script execution endpoint POST /service/rest/v1/script/name/run did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an...

CVE-2026-51728

creationtimestamp| type| source ---|---|--- 2026-09-02 16:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukdoajga32w...

CVE-2025-8945

creationtimestamp| type| source ---|---|--- 2026-09-02 16:12:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fed5kuzc5ligr...

Cross-site Scripting (XSS)

Appium is vulnerable to Cross-site Scripting XSS. The vulnerability is due to unsanitized reflection of user-controlled query parameters, POST fields, and HTTP headers into HTML, which allows an attacker to execute arbitrary JavaScript on the server origin...

CVE-2026-82884

The All in One SEO WordPress plugin before 5.0.0.1 does not sanitise and escape some content stored in posts before rendering it back in the post editor, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks that trigger when a higher privilege...

CVE-2026-17563

The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through...

CVE-2026-80206

creationtimestamp| type| source ---|---|--- 2026-09-02 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muk7lrd2v52x 2026-09-08 22:36:02+00:00| published-proof-of-concept| https://github.com/nltk/nltk/security/advisories/GHSA-w3v8-gmh9-3wv7...