PT-2026-59686

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...

PT-2026-57883

Name of the Vulnerable Software and Affected Versions MCP Appium versions prior to 1.85.10 Description The createLocatorGeneratorUI function fails to escape HTML or JavaScript context when interpolating element attributes—specifically text, content-desc, resource-id, and locator selector...

PT-2026-59369

Summary A user can modify another user's model even if its visibility is set to Private. The finding resulted from a penetration test for a customer. It is suspected that the root cause of the issue lies within the core of Open WebUI, which is why it is being reported as a security issue here...

CVE-2026-15506

creationtimestamp| type| source ---|---|--- 2026-07-12 22:29:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqia2lm2hr26 2026-07-12 23:41:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqie4dn33n2w 2026-07-13 01:00:36+00:00| seen|...

CVE-2026-15505

creationtimestamp| type| source ---|---|--- 2026-07-12 20:28:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhzcc6z252e 2026-07-12 23:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiex6yemk2x 2026-07-13 00:15:03+00:00| seen|...

CVE-2026-10664

creationtimestamp| type| source ---|---|--- 2026-07-12 18:16:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqhrwcqfll2s 2026-07-12 19:52:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhxbzvrvj25...

CVE-2026-10667

creationtimestamp| type| source ---|---|--- 2026-07-12 17:37:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhpq4dedf2a 2026-07-12 18:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqhqznqyim2i 2026-07-12 19:37:23+00:00| seen|...

CVE-2026-10666

creationtimestamp| type| source ---|---|--- 2026-07-12 17:07:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116908101022929699 2026-07-12 17:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhporgri52a 2026-07-12 18:00:14+00:00| seen|...

CVE-2026-15501

creationtimestamp| type| source ---|---|--- 2026-07-12 13:27:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhbqvz6lj2a 2026-07-12 13:33:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhc3qfqzv24 2026-07-12 17:18:02+00:00| seen|...

CVE-2026-15499

creationtimestamp| type| source ---|---|--- 2026-07-12 12:35:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6vl7eaj2x 2026-07-13 21:22:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkmshvwml2y 2026-07-14 00:38:47+00:00| seen|...

CVE-2026-15498

creationtimestamp| type| source ---|---|--- 2026-07-12 12:35:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6upqiha2e 2026-07-14 00:26:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkx33yodk2x...

CVE-2026-15497

creationtimestamp| type| source ---|---|--- 2026-07-12 12:34:58+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6tualzg2y 2026-07-13 11:39:39+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mqjm7tmvg52c 2026-07-14 00:38:18+00:00| seen|...

CVE-2026-61874

creationtimestamp| type| source ---|---|--- 2026-07-12 12:34:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6sys2qc2e 2026-07-14 01:00:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkyxtlm5b2w 2026-07-16 08:14:49+00:00| seen|...

CVE-2026-56336

creationtimestamp| type| source ---|---|--- 2026-07-12 12:30:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6mem3on2w 2026-07-14 00:40:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkxtxmgqv2s...

CVE-2026-15496

creationtimestamp| type| source ---|---|--- 2026-07-12 11:33:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3gpvglf2i 2026-07-14 00:24:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkwwwoiuz2e...

CVE-2026-15492

creationtimestamp| type| source ---|---|--- 2026-07-12 11:32:13+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh3dnogvd2c...

CVE-2026-15489

creationtimestamp| type| source ---|---|--- 2026-07-12 09:30:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgujahjm22y 2026-07-12 11:42:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3wvvacr24...

CVE-2026-15481

creationtimestamp| type| source ---|---|--- 2026-07-12 06:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqgisf5b4s23 2026-07-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116905477743159401 2026-07-12 06:51:14+00:00| seen|...

CVE-2026-15477

creationtimestamp| type| source ---|---|--- 2026-07-12 05:32:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqghb752f32x 2026-07-12 07:59:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgpgpsue72z...

CVE-2026-15472

creationtimestamp| type| source ---|---|--- 2026-07-12 02:29:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqg4ybolty2x 2026-07-12 03:42:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqgb3vihax2w 2026-07-12 03:52:55+00:00| seen|...