GHSA-Q5FW-VPQC-FGPH

creationtimestamp| type| source ---|---|--- 2026-07-21 13:18:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vhspcma2g...

GHSA-FV8Q-RWJ8-2C55

creationtimestamp| type| source ---|---|--- 2026-07-21 13:15:17+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vc7infg2e...

CVE-2026-1771

creationtimestamp| type| source ---|---|--- 2026-07-21 10:53:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5nfg3ns62b 2026-07-21 14:14:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr5ylsgfxk2o...

CVE-2026-16266

creationtimestamp| type| source ---|---|--- 2026-07-21 10:43:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5mtj3kvu2b...

CVE-2026-8082

creationtimestamp| type| source ---|---|--- 2026-07-21 10:11:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kzyw2dv27...

CVE-2026-14185

creationtimestamp| type| source ---|---|--- 2026-07-21 10:02:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kjwyjep2e...

CVE-2026-14184

creationtimestamp| type| source ---|---|--- 2026-07-21 09:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5kdfuebu2q...

CVE-2026-15692

creationtimestamp| type| source ---|---|--- 2026-07-21 08:58:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gxcsqi62h...

CVE-2026-15691

creationtimestamp| type| source ---|---|--- 2026-07-21 08:48:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5geceirq2p...

CVE-2026-15782

The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to...

CVE-2026-16336

creationtimestamp| type| source ---|---|--- 2026-07-21 06:07:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr55egb3my2i 2026-07-21 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-16336...

CVE-2026-15782 WPForms <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content

The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to...

CVE-2026-15782

The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to...

EUVD-2026-46155

The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to...

CVE-2026-55833

creationtimestamp| type| source ---|---|--- 2026-07-21 02:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4qlzdkjo2o 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-22 22:35:22+00:00| published-proof-of-concept|...

CVE-2026-6952

A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17ABPC.7.2C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

CVE-2026-6952

The CVE affects Zyxel AX7501-B1 firmware up to version 5.17(ABPC.7.2)C0, where a post-authentication command injection in the LogServer component of the syslog module is possible. An authenticated administrator can execute OS commands on the device, per the description. CVSS v3.1 metrics indicate...

CVE-2026-6952

A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17ABPC.7.2C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

EUVD-2026-46145

A post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17ABPC.7.2C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...

PT-2026-63303

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea contains an issue where the post-receive git hook handler incorrectly processes git push options on existing repositories. Users with owner or admin-collaborator access can use the...