CVE-2026-67437

creationtimestamp| type| source ---|---|--- 2026-07-29 22:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrswdykg4k2w 2026-07-30 16:35:35+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xpxj-f2fm-rqch 2026-07-31...

CVE-2026-63119

creationtimestamp| type| source ---|---|--- 2026-07-29 21:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsuhri6me23 2026-07-30 16:35:27+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-7683-3w9x-ch42 2026-07-31...

CVE-2026-67435

creationtimestamp| type| source ---|---|--- 2026-07-29 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstx5hkw522 2026-07-31 01:31:12+00:00| seen| https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b...

CVE-2026-5492

creationtimestamp| type| source ---|---|--- 2026-07-29 21:13:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstqgfvd32s...

CVE-2026-5491

creationtimestamp| type| source ---|---|--- 2026-07-29 21:10:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstkhdrfa2g 2026-07-30 02:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsleuvm2m...

CVE-2026-6102

creationtimestamp| type| source ---|---|--- 2026-07-29 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrssziz5eg2o...

CVE-2026-63118

creationtimestamp| type| source ---|---|--- 2026-07-29 20:51:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssjm3jv424 2026-07-30 16:35:30+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-rjr6-rcgv-9m7m 2026-07-31...

CVE-2026-67432

MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and parses an entire JSON-RPC POST body without a size limit, allowing an unauthenticated remote attacker to exhaust process...

CVE-2026-67201

creationtimestamp| type| source ---|---|--- 2026-07-29 20:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrspoy6qkg2j...

CVE-2025-60931

creationtimestamp| type| source ---|---|--- 2026-07-29 19:39:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsoirhwyl2p...

CVE-2026-20316

creationtimestamp| type| source ---|---|--- 2026-07-29 19:35:50+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mrsoc3g26k2u 2026-07-29 20:00:01+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8dc30cfa-6d78-4c95-8f53-cf5195768d7e...

CVE-2026-67432 MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport

MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and parses an entire JSON-RPC POST body without a size limit, allowing an unauthenticated remote attacker to exhaust process...

CVE-2026-67193

creationtimestamp| type| source ---|---|--- 2026-07-29 18:48:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrslnxpa4t2q 2026-07-29 20:15:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-67193 2026-07-30 20:27:00+00:00| seen|...

CVE-2026-51992

creationtimestamp| type| source ---|---|--- 2026-07-29 18:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrslj3fv652s...

CVE-2026-67426

Flyto2 Core contains an unauthenticated SSRF risk in the standalone flyto-verification service (src/core/verification_service.py) prior to version 2.26.7. The service exposed POST /run on 0.0.0.0:8344 and used a client-supplied callback_url for outbound POSTs with X-Internal-Key: $FLYTO_RUNNER_SE...

CVE-2026-54079

creationtimestamp| type| source ---|---|--- 2026-07-29 18:27:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrskieb4br2i...

CVE-2026-67192

creationtimestamp| type| source ---|---|--- 2026-07-29 16:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsew4ibyt2j 2026-07-29 17:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiucjb7v2q 2026-07-29 20:15:22+00:00| seen|...

CVE-2026-60113

creationtimestamp| type| source ---|---|--- 2026-07-29 16:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsesjzl6h2u 2026-07-29 17:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsiqplp2l2g 2026-07-29 20:15:10+00:00| seen|...

CVE-2026-60112

creationtimestamp| type| source ---|---|--- 2026-07-29 16:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrsesike222i 2026-07-29 18:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsjkzwybm2a 2026-07-29 20:15:12+00:00| seen|...

CVE-2026-13697

creationtimestamp| type| source ---|---|--- 2026-07-29 16:38:52+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsefkx66k2c 2026-07-29 19:41:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsomyann62v 2026-08-03 19:23:59+00:00| seen|...