CVE-2026-58376

creationtimestamp| type| source ---|---|--- 2026-06-30 18:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjn5cyb4w2m 2026-07-03 10:06:32+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqce4xggx2r 2026-07-03 10:06:33+00:00| seen|...

CVE-2026-58371

creationtimestamp| type| source ---|---|--- 2026-06-30 18:14:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjm7xuynj24 2026-07-02 05:52:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndoycmhy2i...

CVE-2026-58174

creationtimestamp| type| source ---|---|--- 2026-06-30 18:03:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjln3piyx2z 2026-07-02 06:06:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnei2e2a52k...

CVE-2026-58370

creationtimestamp| type| source ---|---|--- 2026-06-30 17:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjl75243h24 2026-07-02 06:07:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnejmuv3z2u...

CVE-2026-12349

creationtimestamp| type| source ---|---|--- 2026-06-30 17:17:13+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjizi73cq2c...

CVE-2026-58174

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-48286

creationtimestamp| type| source ---|---|--- 2026-06-30 17:02:22+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji6wod572y 2026-07-01 11:45:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mplgwhlm3fm2 2026-07-...

CVE-2025-53648

creationtimestamp| type| source ---|---|--- 2026-06-30 16:10:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjfctafk723...

CVE-2026-57079

creationtimestamp| type| source ---|---|--- 2026-06-30 16:05:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpjezu3btb2s...

CVE-2026-58174

Hermes WebUI

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58174 Hermes WebUI < 0.51.521 - Cross-Profile Authorization Bypass via Unset Session Profile on Import

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

EUVD-2026-40355

Hermes WebUI before 0.51.521 validates the workspace of an imported session under the active named profile but constructs the Session object without setting its profile in the /api/session/import handler, so the imported session is persisted with a null profile. Because a null profile is treated ...

CVE-2026-58011

creationtimestamp| type| source ---|---|--- 2026-06-30 14:45:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjakneukd2m 2026-07-03 12:19:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqjrcmvoq2d 2026-07-21 12:00:54+00:00| seen|...

CVE-2026-10817

creationtimestamp| type| source ---|---|--- 2026-06-30 14:35:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7yqkhca2m 2026-06-30 22:01:06+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0216 2026-07-01 01:00:46+00:00| seen|...

CVE-2026-58016

creationtimestamp| type| source ---|---|--- 2026-06-30 14:25:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj7gtiwvm2t 2026-07-02 05:19:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnbtzxrwh2k 2026-07-21 12:01:08+00:00| seen|...

WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by daroo in WordPress Plugin Five Star Business Profile and Schema versions = 2.3.19...

CVE-2026-13474

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server of type LB, CS, VPN or the service configured on NetScaler...