CVE-2026-9793

creationtimestamp| type| source ---|---|--- 2026-05-28 06:57:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgysdyzn2n...

CVE-2026-2374

creationtimestamp| type| source ---|---|--- 2026-05-28 06:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmvgi2bzcs2k...

CVE-2026-7770

creationtimestamp| type| source ---|---|--- 2026-05-28 06:47:37+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mmvghcls5a2r 2026-06-01 19:32:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnat3gsyqf27 2026-06-01 21:00:36+00:00| seen|...

GHSA-CPF7-J4CF-VQX4 Keycloak has an Out-of-bounds Read

A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to not requiring POST requests for an HTTP endpoint. This vulnerability allows attackers to resume failed Multijob builds. Remediation Upgrade org.jenkins-ci.plugins:jenkins-multijob-plugin to version...

CVE-2026-9009 Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute

The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filtercontent function. This is due to passing the attacker-supplied 'callbackraw' shortcode attribute directly into calluserfunc with n...

CVE-2026-3173 Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to specify arbitrary object IDs and object types via block attributes without validating whether the authenticated user...

CVE-2026-3173 Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to specify arbitrary object IDs and object types via block attributes without validating whether the authenticated user...

EUVD-2026-32722

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due to the plugin allowing users to specify arbitrary object IDs and object types via block attributes without validating whether the authenticated user...

CVE-2026-3173

The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 1.5.1. Authenticated attackers with Contributor-level access or higher can read arbitrary user meta, post meta, and term meta from any object, potentially exposing PII (...

CVE-2026-9039

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 22:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwzw4g35425 2026-07-24 14:24:47+00:00| seen|...

CVE-2026-9038

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 22:13:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx272ywxh2v...

CVE-2026-7786

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-02 2026-05-28 20:10:30+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3mmwtcxdrvt2n 2026-05-29 15:59:16+00:00| seen|...

CVE-2026-9037

creationtimestamp| type| source ---|---|--- 2026-05-28 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-08 2026-05-28 21:26:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxl2au522n...

CVE-2026-9803 Keycloak: keycloak: denial of service via malformed authorization header

A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...

SUSE CVE-2026-45856

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqesize before using it in ibuverbspostsend ibuverbspostsend uses cmd.wqesize from userspace without any validation before passing it to kmalloc and using the allocated buffer as struct ibuverbssendwr. If a...

CVE-2026-45102

creationtimestamp| type| source ---|---|--- 2026-05-28 03:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuzuamewz2r...

[SECURITY] Fedora 44 Update: nginx-1.30.2-1.fc44

Nginx is a web server and a reverse proxy server for HTTP, SMTP, POP3 and IMAP protocols, with a strong focus on high concurrency, performance and low memory usage...

CVE-2026-44729

creationtimestamp| type| source ---|---|--- 2026-05-28 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmuq35vhat2w...

CVE-2026-44930

creationtimestamp| type| source ---|---|--- 2026-05-28 00:02:18+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmupsheol22m 2026-05-29 13:10:09+00:00| seen| https://t.me/bdufstecru/3204 2026-06-20 21:07:08+00:00| seen|...