CVE-2026-45813

creationtimestamp| type| source ---|---|--- 2026-07-24 13:15:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgpm7jcl2g 2026-07-25 06:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6uz5ad72m 2026-07-28 20:07:07+00:00| seen|...

CVE-2026-66144

creationtimestamp| type| source ---|---|--- 2026-07-24 13:08:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgc365h32s 2026-07-25 06:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh6usosqu2w...

CVE-2026-61884

creationtimestamp| type| source ---|---|--- 2026-07-24 13:04:27+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrfg3mgxra2p 2026-07-24 22:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrgfap6ldt2v 2026-07-24 23:00:27+00:00| seen|...

CVE-2026-16804

creationtimestamp| type| source ---|---|--- 2026-07-24 12:45:46+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-64 2026-07-24 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhjxwat52o 2026-07-27 04:45:03+00:00| seen|...

CVE-2026-66142

creationtimestamp| type| source ---|---|--- 2026-07-24 12:43:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfeve5pmb2u 2026-07-25 05:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrh3jnj3do2f...

CVE-2026-16634

creationtimestamp| type| source ---|---|--- 2026-07-24 12:29:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfe4h4fah24...

CVE-2026-15243

creationtimestamp| type| source ---|---|--- 2026-07-24 12:15:03+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-15243...

CVE-2026-16870

creationtimestamp| type| source ---|---|--- 2026-07-24 12:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrfcjxpgm22x...

CVE-2025-68081

creationtimestamp| type| source ---|---|--- 2026-07-24 11:39:40+00:00| seen| https://bsky.app/profile/cybersecinsight.bsky.social/post/3mrfbdzdek72y...

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection. The agent then worked through the ministry's...

CVE-2026-16910

A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud...

CVE-2026-16910

CVE-2026-16910 describes an SSRF flaw in Red Hat Quay’s notification webhook handlers for Slack and generic webhooks. The handlers accept user-supplied URLs without SSRF validation, enabling a repository administrator to cause the Quay worker to issue POST requests to internal network addresses o...

EUVD-2026-48503

A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud...

CVE-2026-12736

creationtimestamp| type| source ---|---|--- 2026-07-24 05:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrel2kbznu2w...

CVE-2026-13464

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...

CVE-2026-15100

The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

OESA-2026-3157 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A...

CVE-2026-45820

creationtimestamp| type| source ---|---|--- 2026-07-24 02:48:49+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3mredorzn2s2t 2026-08-04 04:47:06+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3msa7gdsqch2o...

CVE-2026-13464

The CVE concerns Kirki for WordPress (

CVE-2026-13464

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...