CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

CVE-2026-82468

Rodauth versions before 2.47.0 contain a cross-site request forgery (CSRF) protection bypass in the JSON request content type validation. An attacker can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation, forcing victims to aut...

CVE-2026-82468 Rodauth before 2.47.0 CSRF Protection Bypass via Content-Type

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...

CVE-2026-81096

creationtimestamp| type| source ---|---|--- 2026-08-29 16:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muacefzsts2j...

CVE-2026-80673

creationtimestamp| type| source ---|---|--- 2026-08-29 15:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua5vedyb525...

CVE-2026-82456

creationtimestamp| type| source ---|---|--- 2026-08-29 15:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua5ha4t3b24 2026-08-29 16:07:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muab44l6oy25 2026-08-29 22:00:06+00:00| seen|...

CVE-2026-80630

creationtimestamp| type| source ---|---|--- 2026-08-29 14:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua47rk4ns2t...

CVE-2026-80609

creationtimestamp| type| source ---|---|--- 2026-08-29 14:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua3nu7kbs2u...

CVE-2026-82021

creationtimestamp| type| source ---|---|--- 2026-08-29 14:01:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua22qdo5h27 2026-08-29 17:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muagbmh2dz2u...

CVE-2026-82269

creationtimestamp| type| source ---|---|--- 2026-08-29 14:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mua22cbhk422...

The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn

Plus: Hackers target over 100 US water systems, ICE puts in an order for robot dogs, and you’ll never guess what “MrChildPorn” was arrested for...

CVE-2026-17429

creationtimestamp| type| source ---|---|--- 2026-08-29 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7jmeaurb2u...

CVE-2026-81026

creationtimestamp| type| source ---|---|--- 2026-08-29 08:14:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fuik5kzvyklsc...

CVE-2026-76387

creationtimestamp| type| source ---|---|--- 2026-08-29 08:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7gb2uc3s24...

CVE-2026-77078

creationtimestamp| type| source ---|---|--- 2026-08-29 06:02:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu77cocbkw22 2026-09-22 07:00:03+00:00| published-proof-of-concept| Telegram/N-PGdqpLovLlQNbFQgrQqO8zEkhxsB1txl4jHkkqUA3cCi4 2026-09-23 00:00:26+00:00|...

CVE-2026-37751

creationtimestamp| type| source ---|---|--- 2026-08-29 05:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu76m2xduy2f 2026-08-31 03:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mudw2ymnqz27 2026-08-31 03:52:45+00:00| seen|...

CVE-2026-81518

creationtimestamp| type| source ---|---|--- 2026-08-29 05:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu73u6eliz2z...

CVE-2026-81517

creationtimestamp| type| source ---|---|--- 2026-08-29 05:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu73txpiib2m...

PT-2026-83404

Name of the Vulnerable Software and Affected Versions User Profile Builder versions prior to 4.0.1 Description The User Profile Builder WordPress plugin fails to properly restrict its front-end file upload feature. This flaw allows unauthenticated visitors to obtain privileges reserved for...