CVE-2026-9795

creationtimestamp| type| source ---|---|--- 2026-05-28 07:14:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhxby6g72v 2026-06-29 13:15:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkzuo7ml25 2026-07-01 02:46:43+00:00| seen|...

CVE-2026-9644

creationtimestamp| type| source ---|---|--- 2026-05-28 07:11:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhsficy22n 2026-05-29 01:24:13+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmxetw7lxy2i...

CVE-2026-9228

creationtimestamp| type| source ---|---|--- 2026-05-28 06:59:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvh3s4ceh2p...

CVE-2026-32999

creationtimestamp| type| source ---|---|--- 2026-05-28 06:55:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgvxmtnm2c...

CVE-2026-7770

creationtimestamp| type| source ---|---|--- 2026-05-28 06:47:37+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mmvghcls5a2r 2026-06-01 19:32:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnat3gsyqf27 2026-06-01 21:00:36+00:00| seen|...

CVE-2026-7651

CVE-2026-7651 describes an insecure direct object reference in the WordPress plugin “User Registration & Membership” (Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder) up to version 5.1.5. The bug arises from missing ownership val...

CVE-2026-7651 User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter

The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.5. This is due to missing...

CVE-2026-7651 User Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter

The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.5. This is due to missing...

CVE-2026-45102

creationtimestamp| type| source ---|---|--- 2026-05-28 03:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuzuamewz2r...

CVE-2026-44888

creationtimestamp| type| source ---|---|--- 2026-05-28 03:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuztz22cl2n...

CVE-2026-48064

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuprfcpqb2n...

CVE-2026-8362

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupr5ugvq2w 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

CVE-2026-8361

creationtimestamp| type| source ---|---|--- 2026-05-28 00:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupqwidc72z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...

PT-2026-44729

Name of the Vulnerable Software and Affected Versions compliance-trestle versions prior to 3.12.3 compliance-trestle versions prior to 4.0.3 Description The profile import mechanism in the compliance-trestle library fails to perform boundary checks when resolving trestle:// URIs and relative file...

CVE-2026-45136

creationtimestamp| type| source ---|---|--- 2026-05-27 23:19:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunfckcpg2p...

CVE-2026-45965

A flaw was found in the AppArmor security module of the Linux kernel. When the exportbinary parameter is disabled at runtime, a previously loaded profile that is subsequently replaced can lead to a NULL pointer dereference. This occurs when the system attempts to resolve symbolic links to raw dat...

GHSA-G3VG-VX23-3858 compliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal

Summary The compliance-trestle library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher constructs the local cache file path from the URL path component without sanitizing path traversal sequences ../. When a remote OSCAL profile references a URL with traversal in its path, the HTTP...

CVE-2026-46414

creationtimestamp| type| source ---|---|--- 2026-05-27 22:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmum2wangr2c 2026-05-28 00:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupprp6ak2c 2026-05-28 02:34:54+00:00| seen|...

CVE-2026-45322

creationtimestamp| type| source ---|---|--- 2026-05-27 22:48:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmulp7z3no2c 2026-05-28 02:32:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmuy77l42d2v...

CVE-2026-8363

creationtimestamp| type| source ---|---|--- 2026-05-27 22:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj45tjn52z 2026-05-28 04:18:30+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-disponibili-poc-per-nuove-vulnerabilita-in-triofox...