cve-2026-40994 - HIGH - Wss4jSecurityInterceptor disables WS-I BSP validation by default

cve-2026-40994 - HIGH - Wss4jSecurityInterceptor disables WS-I BSP validation by default...

CVE-2026-34712

creationtimestamp| type| source ---|---|--- 2026-06-09 23:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvcft44gd2p...

CVE-2026-34711

creationtimestamp| type| source ---|---|--- 2026-06-09 23:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvcflawlb2n 2026-06-10 02:03:22+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mnvmmyg4nr2a...

CVE-2026-47929

creationtimestamp| type| source ---|---|--- 2026-06-09 22:02:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv76t5dy62y 2026-06-10 09:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnwdx7bjkc2n 2026-06-15 18:37:07+00:00| seen|...

CVE-2026-48292

creationtimestamp| type| source ---|---|--- 2026-06-09 22:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnv73jjyya27...

CVE-2026-48291

creationtimestamp| type| source ---|---|--- 2026-06-09 22:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnv73bc46r2y...

CVE-2026-48305

creationtimestamp| type| source ---|---|--- 2026-06-09 21:23:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnv4wilsd32v...

EUVD-2026-35497

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-49843

creationtimestamp| type| source ---|---|--- 2026-06-09 17:28:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnupugl5ma2v...

CVE-2026-24065

creationtimestamp| type| source ---|---|--- 2026-06-09 17:20:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnupfnv4fn2v...

CVE-2026-49956

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-40371

creationtimestamp| type| source ---|---|--- 2026-06-09 16:12:18+00:00| seen| https://www.thezdi.com/blog/2026/6/9/the-june-2026-security-update-review 2026-06-09 18:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnustwsnwy2o 2026-07-02 19:37:07+00:00| seen|...

CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-49956

CVE-2026-49956 affects the Hermes WebUI prior to version 0.51.269. The root cause is a profile isolation bypass: an authenticated user can query the sessions search endpoint without active-profile filtering, exposing data from other profiles (session titles and transcript message content). This i...

CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search

Hermes WebUI before version 0.51.269 contains a profile isolation bypass vulnerability that allows authenticated users to access data belonging to other profiles by querying the session search endpoint without active-profile filtering. Attackers can send requests to the sessions search handler to...

CVE-2026-53408

creationtimestamp| type| source ---|---|--- 2026-06-09 15:28:39+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnuj5z7rmz2z 2026-06-16 20:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moglyfwgl52x 2026-07-05 03:49:57+00:00| seen|...

CVE-2026-53407

creationtimestamp| type| source ---|---|--- 2026-06-09 15:28:39+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnuj5z7rmz2z 2026-06-13 11:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo642nfyqt2l 2026-07-05 03:49:57+00:00| seen|...

CVE-2026-5714

creationtimestamp| type| source ---|---|--- 2026-06-09 14:27:43+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnufr2tffa2t 2026-06-11 10:16:26+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnyynlbxdh2f...

CVE-2026-46321

creationtimestamp| type| source ---|---|--- 2026-06-09 13:59:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnue6lbwre2m 2026-07-01 02:34:13+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 06:23:32+00:00| seen...