CVE-2026-83232

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluazdmr42p 2026-09-16 03:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmabzzsr22y 2026-09-23 09:19:04+00:00| seen|...

CVE-2026-83229

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluarjjeo24 2026-09-16 01:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyhqyxq42b 2026-09-23 09:19:10+00:00| seen|...

CVE-2026-83202

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluaik74s2w 2026-09-16 03:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm7q6wgha24 2026-09-22 12:07:06+00:00| seen|...

CVE-2026-83108

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu6qp72g2n 2026-09-16 03:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm6mhtxro2j 2026-09-23 09:46:39+00:00| seen|...

CVE-2026-83107

creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu6irlel2t 2026-09-16 01:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlxdyxptc2t 2026-09-23 09:46:41+00:00| seen|...

CVE-2026-83060

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu3jaizt2j 2026-09-16 02:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm4eu5cu72r 2026-09-23 05:07:07+00:00| seen|...

CVE-2026-83055

creationtimestamp| type| source ---|---|--- 2026-09-16 00:11:00+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu2bkvvx2j 2026-09-16 00:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlv4frvnq2b 2026-09-23 09:48:14+00:00| seen|...

CVE-2026-69486

creationtimestamp| type| source ---|---|--- 2026-09-16 00:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvlthqp3l52s 2026-09-16 04:46:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260916 2026-09-16 12:00:07+00:00|...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38403)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from the delDevice function not properly implementing access control mechanisms. Attackers can exploit this vulnerability by sending...

PT-2026-93763

Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users. The b2s calendar move post AJAX handler in includes/Ajax/Post.php issues an UPDATE against the b2s posts table using only the attacker-supplied b2s id primary key...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38415)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability in access control. This vulnerability stems from an improper access control in the getCloudDownloadStatus function. Attackers can exploit this vulnerability by sending a specially crafted POS...

PT-2026-93854

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.2.0 through 9.5.3 Description The REST API user creation endpoint 'POST /ccm/api/1.0/users', specifically the add function in concrete/src/Api/Controller/Users.php, fails to perform a permission check before creating an...

PT-2026-93734

Name of the Vulnerable Software and Affected Versions zlt2000 microservices-platform versions prior to 6.0.0 Description An authorization bypass exists in the search-center service. Authenticated attackers can read any Elasticsearch index by specifying the index name in the path variables of the...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38562)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setUrlFilterRules function. Attackers can exploit this vulnerability by sending a specially crafted POS...

CVE-2026-92468: Authorization Bypass Through User-Controlled Key

zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/indexName and GET /agg/requestStat/indexName/routing path...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38401)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control in the clearTracerouteLog function. Attackers can exploit this vulnerability by sending a specially crafted...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38565)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setWanIeCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38563)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setVpnPassCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...

PT-2026-93290

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password...

TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38402)

TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. There is an access control vulnerability in TOTOLINK T6. This vulnerability stems from improper access control in the CloudSrvVersionCheck function. Attackers can exploit this vulnerability by sending a specially crafted POST...