CVE-2026-13509

creationtimestamp| type| source ---|---|--- 2026-06-28 23:38:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpf5fuh2s32m 2026-06-29 02:18:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpfgdoakue2o...

CVE-2026-9384

creationtimestamp| type| source ---|---|--- 2026-06-22 02:31:49+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mottsw6vig2v...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Stopping the IRR scan in kvmapicupdateirr even if PIR is empty The function apicfindhighestvector is used when PID.ON is set, but PIR turns out to be empty. This ensures that the highest pending interrupt from the...

SUSE CVE-2026-46295

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in kvmapicupdateirr even if PIR is empty Fall back to apicfindhighestvector when PID.ON is set but PIR turns out to be empty, to correctly report the highest pending interrupt from the existing IRR. In a...

CVE-2026-46295 KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in kvmapicupdateirr even if PIR is empty Fall back to apicfindhighestvector when PID.ON is set but PIR turns out to be empty, to correctly report the highest pending interrupt from the existing IRR. In a...

CVE-2026-10806

creationtimestamp| type| source ---|---|--- 2026-06-04 15:15:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhw3glr5g2b...

CVE-2026-6340

creationtimestamp| type| source ---|---|--- 2026-05-18 08:32:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hmztahz2c...

CVE-2026-42576

creationtimestamp| type| source ---|---|--- 2026-05-09 21:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh7qghol32h...

CVE-2026-41483

creationtimestamp| type| source ---|---|--- 2026-05-07 02:30:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mla6byyvmx2i...

CVE-2026-6255

creationtimestamp| type| source ---|---|--- 2026-05-05 06:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kucjzlh2h...

CVE-2026-5063 NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submitnexform function in versions up to, and including, 9.1.11 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-5404

creationtimestamp| type| source ---|---|--- 2026-05-01 03:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkr5a26vf42p 2026-05-04 02:29:57+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mkymuhf3uq2z...

CVE-2026-7382

creationtimestamp| type| source ---|---|--- 2026-04-30 16:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq3croerr2v...

SUSE CVE-2026-31539

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirectsocket.recvio.credits.available The logic off managing recv credits by counting posted recvio and granted credits is racy. That's because the peer might already consumed a credit, but between...

CVE-2026-31539

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: introduce smbdirectsocket.recvio.credits.available The logic off managing recv credits by counting posted recvio and granted credits is racy. That's because the peer might already consumed a credit, but between...

CVE-2026-31538

In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirectsocket.recvio.credits.available The logic off managing recv credits by counting posted recvio and granted credits is racy. That's because the peer might already consumed a credit, but between...

CVE-2026-22740

creationtimestamp| type| source ---|---|--- 2026-04-20 12:25:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjwhlzimrz2w...

CVE-2026-39922

creationtimestamp| type| source ---|---|--- 2026-04-10 22:28:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6eoepih22t 2026-06-08 15:11:10+00:00| seen| https://gist.github.com/alon710/56fac469b83d68f32bede1d2945e0063...

Missing Authorization

Django is vulnerable to Missing Authorization. The vulnerability is due to missing validation of add permissions for inline model instances in GenericInlineModelAdmin, which allows an attacker to submit forged POST data and create unauthorized objects...

CVE-2026-40259

creationtimestamp| type| source ---|---|--- 2026-04-10 09:32:21+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7m5h-w69j-qggg 2026-04-17 00:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjnppgbvvx2d 2026-04-17 01:16:10+00:00...