CVE-2026-25055

creationtimestamp| type| source ---|---|--- 2026-02-05 08:08:06+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-1 2026-02-05 22:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5fc4dwzc2o 2026-02-05 22:02:17+00:00| seen|...

CVE-2026-25053

creationtimestamp| type| source ---|---|--- 2026-02-05 08:08:06+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-1 2026-02-05 22:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5fbv3vl32r 2026-02-05 22:02:10+00:00| seen|...

CVE-2026-25052

creationtimestamp| type| source ---|---|--- 2026-02-05 08:08:06+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-1 2026-02-05 22:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me5fbnmhoe2h 2026-02-05 22:02:01+00:00| seen|...

CVE-2026-25583

creationtimestamp| type| source ---|---|--- 2026-02-04 22:17:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2vpq2dtn27 2026-02-04 22:17:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2vqdze3f27...

CVE-2026-25540

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

CVE-2026-25540 Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

CVE-2026-25540

Mastodon prior to versions 4.3.19, 4.4.13, and 4.5.6 is vulnerable to web cache poisoning in Rails.cache when AUTHORIZED_FETCH is enabled. The ActivityPub endpoints for pinned posts and featured hashtags cache responses that depend on the signer’s account, but the internal cache reuse does not re...

CVE-2026-25540

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

CVE-2026-25540 Mastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

EUVD-2026-5329

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

CVE-2026-25519

creationtimestamp| type| source ---|---|--- 2026-02-04 21:16:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sdgpo2f22 2026-02-04 21:17:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sfexazh2v...

CVE-2025-59439

creationtimestamp| type| source ---|---|--- 2026-02-04 21:15:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sajp6ou2o 2026-02-04 21:15:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sbhuuzy24...

CVE-2025-63624

creationtimestamp| type| source ---|---|--- 2026-02-04 21:15:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sachkv62h 2026-02-04 21:15:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sba3niq2g...

CVE-2025-69875

creationtimestamp| type| source ---|---|--- 2026-02-04 21:14:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2sa2w5xu2o 2026-02-04 21:15:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2say7xtt23...

CVE-2026-0950

The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.19.17. This is due to the plugin failing to check postpasswordrequired before rendering post excerpts in the renderexcerpt...

CVE-2026-0106

creationtimestamp| type| source ---|---|--- 2026-02-04 12:22:19+00:00| seen| https://bsky.app/profile/buchikuma.bsky.social/post/3mdzuhqyugq2d 2026-02-04 13:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mdzwlr7tjw2n 2026-02-05 21:17:35+00:00| seen|...

CVE-2026-25160

creationtimestamp| type| source ---|---|--- 2026-02-04 11:05:07+00:00| published-proof-of-concept| https://github.com/AlistGo/alist/security/advisories/GHSA-8jmm-3xwx-w974 2026-02-04 20:22:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2pbvf6lr27 2026-02-04...

CVE-2025-15285

The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the checkBlogAuthentication and checkCategoryAuthentication functions in all versions up to, and including, 2.2.1. These authorization functions only implement...

CVE-2026-25540: Use of Cache Containing Sensitive Information

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.3.19, 4.4.13, 4.5.6, Mastodon is vulnerable to web cache poisoning via Rails.cache. When AUTHORIZEDFETCH is enabled, the ActivityPub endpoints for pinned posts and featured hashtags have contents that...

PT-2026-5885

Name of the Vulnerable Software and Affected Versions SEO Flow versions prior to 2.2.2 Description The SEO Flow plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check within the checkBlogAuthentication and checkCategoryAuthentication functions...