CVE-2026-53740

The CVE-2026-53740 entry describes a stored cross-site scripting flaw in Yoast Duplicate Post (through 4.6) where an unescaped post title and permalink is injected into the Classic Editor scheduled republish notice. Attackers can craft a title to cause script execution when an administrator views...

CVE-2026-53739 Yoast Duplicate Post through 4.6 Cross-Site Request Forgery via duplicate_post_dismiss_notice

Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicatepostdismissnotice handler, which verifies no nonce or capability. Attackers can trick any authenticated user into sending a request that sets the duplicatepostshownotice site option, suppressing...

CVE-2026-53736 Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Action

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicatepost action handler that lacks nonce verification. Attackers can trick an authenticated user into visiting a crafted link that duplicates any post regardless of post type...

CVE-2026-53736

CVE-2026-53736 affects the Easy Twitter Feeds WordPress plugin prior to 1.2.13. The issue is a cross-site request forgery in the duplicate_post action handler that lacks nonce verification. An attacker could entice an authenticated user to visit a crafted link that duplicates posts regardless of ...

CVE-2026-46702 Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabled, russh accepted compressed packets whose on-wire size passed the normal transport packet-length checks but whose decompressed size was much larger. This allowed a remote peer...

CVE-2026-46702 Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabled, russh accepted compressed packets whose on-wire size passed the normal transport packet-length checks but whose decompressed size was much larger. This allowed a remote peer...

CVE-2026-46702

Russh contains a post-decompression packet size bound vulnerability: when SSH compression is enabled, compressed payloads could inflate to oversized decompressed data, bypassing on-wire packet checks. This allowed remote DoS by sending small compressed packets that decompress beyond limits. Affec...

CVE-2026-46702

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabled, russh accepted compressed packets whose on-wire size passed the normal transport packet-length checks but whose decompressed size was much larger. This allowed a remote peer...

EUVD-2026-36125

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabled, russh accepted compressed packets whose on-wire size passed the normal transport packet-length checks but whose decompressed size was much larger. This allowed a remote peer...

CVE-2026-46702 Russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets

Russh is a Rust SSH client & server library. From version 0.34.0 to before version 0.61.1, when SSH compression is enabled, russh accepted compressed packets whose on-wire size passed the normal transport packet-length checks but whose decompressed size was much larger. This allowed a remote peer...

CVE-2026-47939

creationtimestamp| type| source ---|---|--- 2026-06-10 20:06:05+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxj4zowxe2u...

CVE-2026-46642

creationtimestamp| type| source ---|---|--- 2026-06-10 19:57:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnximzj2e423...

CVE-2026-50568

creationtimestamp| type| source ---|---|--- 2026-06-10 19:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxhj5i6c42i...

CVE-2026-50639

creationtimestamp| type| source ---|---|--- 2026-06-10 19:28:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnxgzfkxhr2s...

CVE-2026-50545

creationtimestamp| type| source ---|---|--- 2026-06-10 19:26:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgurkwmi2m 2026-06-16 16:25:31+00:00| seen| https://bsky.app/profile/attrition.org/post/3mog7m2jsis2z...

CVE-2026-46618

creationtimestamp| type| source ---|---|--- 2026-06-10 19:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxg2fosui25...

CVE-2026-50567

creationtimestamp| type| source ---|---|--- 2026-06-10 19:09:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfwzd6yv24 2026-07-28 21:08:25+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mrqcyosxc22o...

CVE-2026-49824

creationtimestamp| type| source ---|---|--- 2026-06-10 19:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxfttjf2f2q...

CVE-2026-0271

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:27+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfn2hejy2w 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-07-11 00:03:08+00:00| seen|...

CVE-2026-0267

creationtimestamp| type| source ---|---|--- 2026-06-10 19:03:23+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnxfmwtg2m2k 2026-06-10 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1917 2026-06-10 22:58:09+00:00| seen|...