PT-2026-56768

The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get all values function in the /wp-json/acf-field-blocks/v1/values REST endpoint in versions up to, and including, 1.6.2. The permission callback only verifies the...

CVE-2026-53166

creationtimestamp| type| source ---|---|--- 2026-07-08 19:53:22+00:00| seen| https://bsky.app/profile/grsecurity.bsky.social/post/3mq5vhkasy22p 2026-07-08 19:55:17+00:00| seen| https://bsky.app/profile/grsecurity.bsky.social/post/3mq5vkydkjc2p 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-0280

creationtimestamp| type| source ---|---|--- 2026-07-08 17:38:13+00:00| seen| https://bsky.app/profile/scotthogg.bsky.social/post/3mq5nwfhtlc2s 2026-07-08 19:03:27+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mq5sossn5l2f 2026-07-09 04:46:13+00:00| seen|...

CVE-2018-20599

creationtimestamp| type| source ---|---|--- 2026-07-08 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq5kj5avp323 2026-07-08 16:37:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mq5kj6ilvn2v...

CVE-2026-41042

creationtimestamp| type| source ---|---|--- 2026-07-08 16:20:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5jlooecl2f 2026-07-08 16:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq5jrsw37s22 2026-08-17 18:00:03+00:00| seen|...

CVE-2026-56360

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...

CVE-2026-56360 n8n - Webhook Forgery via Unsigned POST Requests in ZendeskTrigger

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...

EUVD-2026-42258

n8n before versions 1.123.18 and 2.6.2 fails to verify HMAC-SHA256 signatures on Zendesk webhooks in the ZendeskTrigger node. Attackers who know the webhook URL can send unsigned POST requests to trigger workflows with arbitrary malicious data...

CVE-2026-8307

creationtimestamp| type| source ---|---|--- 2026-07-08 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq56wwdaak2d 2026-07-08 13:27:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq57vsdkv525...

CVE-2026-56000

creationtimestamp| type| source ---|---|--- 2026-07-08 09:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4u3zer2n2w 2026-07-08 10:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4vtpanvm2k 2026-07-08 16:45:30+00:00| seen|...

CVE-2026-9695

creationtimestamp| type| source ---|---|--- 2026-07-08 08:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4q3f6wig2g 2026-07-08 08:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq4qn5tej62d 2026-07-08 10:30:28+00:00| seen|...

CVE-2026-14158

creationtimestamp| type| source ---|---|--- 2026-07-08 06:00:12+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mq4gwb2wfz2x 2026-07-08 07:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4mmi6gxo2z...

PT-2026-56672

Name of the Vulnerable Software and Affected Versions Waku versions prior to 1.0.0-beta.1 Description The RSC request dispatcher fails to validate the Origin or Sec-Fetch-Site headers when invoking server actions. This allows a cross-origin attacker to trick a victim's browser into sending an...

PT-2026-56488

Name of the Vulnerable Software and Affected Versions Socket.IO versions 4.1.0 through 6.6.6 Description The Engine.IO protocol v4 polling transport fails to properly close the HTTP response when receiving invalid binary POST requests that use the Content-Type: application/octet-stream header. Th...

CVE-2026-59705

creationtimestamp| type| source ---|---|--- 2026-07-07 22:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3ov5635x2t 2026-07-07 23:31:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3r6fsdhk2q...

CVE-2026-58473

creationtimestamp| type| source ---|---|--- 2026-07-07 21:52:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq3lnftqre2z 2026-07-07 23:37:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3rk2sdn42k 2026-07-08 03:00:26+00:00| seen|...

GHSA-F75J-4CW6-RMX4

creationtimestamp| type| source ---|---|--- 2026-07-07 20:58:05+00:00| seen| https://bsky.app/profile/poxek.bsky.social/post/3mq3imnlegs2x 2026-07-07 20:58:06+00:00| seen| https://bsky.app/profile/poxek.bsky.social/post/3mq3imnljd22x 2026-07-07 20:58:07+00:00| seen|...

CVE-2026-44877

creationtimestamp| type| source ---|---|--- 2026-07-07 20:45:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3hwylbp42e 2026-07-07 20:46:45+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3hymuqhi2b 2026-07-08 14:15:14+00:00| seen|...

CVE-2026-48952

creationtimestamp| type| source ---|---|--- 2026-07-07 19:55:59+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3f5tqvlp26 2026-07-07 21:01:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3ishx2e224 2026-07-08 14:15:07+00:00| seen|...

CVE-2026-48953

creationtimestamp| type| source ---|---|--- 2026-07-07 19:54:50+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mq3f3s3qnt2c 2026-07-07 21:05:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3j25jxpy25 2026-07-08 14:15:07+00:00| seen|...