CVE-2026-12183

creationtimestamp| type| source ---|---|--- 2026-06-13 19:17:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo6xt4k7ln2f...

CVE-2026-48558

creationtimestamp| type| source ---|---|--- 2026-06-13 15:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo6jgxce6n2p 2026-06-14 17:33:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobcidnjl72t 2026-06-15 16:30:48+00:00| seen|...

CVE-2026-44786

creationtimestamp| type| source ---|---|--- 2026-06-13 12:12:08+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mo6a2d7wgh2f...

CVE-2026-48785

creationtimestamp| type| source ---|---|--- 2026-06-13 11:39:48+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mo665pux3s2w...

CVE-2025-7017

creationtimestamp| type| source ---|---|--- 2026-06-13 06:02:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5lbipfdx2y...

CVE-2026-53822

creationtimestamp| type| source ---|---|--- 2026-06-13 02:02:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo55usgwi42y 2026-06-16 05:37:05+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mof3eoppxr27...

CVE-2026-53608

creationtimestamp| type| source ---|---|--- 2026-06-13 01:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo53gzquxw23 2026-06-13 03:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5bagbhzb2p 2026-07-31 22:35:03+00:00| published-proof-of-concept|...

EUVD-2026-36628

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content...

CVE-2026-12129

creationtimestamp| type| source ---|---|--- 2026-06-12 23:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4u3tkkca2p...

CVE-2026-47263

creationtimestamp| type| source ---|---|--- 2026-06-12 22:25:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4ruw2ks22t...

CVE-2026-42851

creationtimestamp| type| source ---|---|--- 2026-06-12 22:20:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mo4rkr3aqf2m 2026-06-13 10:04:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mo5yph3aqi2y 2026-08-09 18:21:53+00:00| seen|...

CVE-2026-53867

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content...

CVE-2026-47268

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 0.20.0 to before version 2.0.10, an authenticated Nezha dashboard user can create or update a DDNS profile with provider webhook and configure an arbitrary webhookurl, HTTP method, request...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the PATCH /server/id process. An attacker can gain unauthorized access to another user's DDNS profile context by storing a nonexistent ddnsprofiles ID for a server they own, which is later resolved if another...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the PATCH /server/id process. An attacker can gain unauthorized access to another user's DDNS profile context by storing a nonexistent ddnsprofiles ID for a server they own, which is later resolved if another...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the PATCH /server/id process. An attacker can gain unauthorized access to another user's DDNS profile context by storing a nonexistent ddnsprofiles ID for a server they own, which is later resolved if another...

CVE-2026-53867

Capgo before 12.128.2 does not delete previously uploaded profile images, leaving orphaned files accessible via previously generated URLs, enabling unauthorized retrieval of user-uploaded content. This affects Capgo's backend storage handling when users replace or remove images. The CVE notes MED...

CVE-2026-53867 Capgo < 12.128.2 - Orphaned File Retention via Profile Image Replacement

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content...

CVE-2026-53867 Capgo < 12.128.2 - Orphaned File Retention via Profile Image Replacement

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content...

CVE-2026-53867 Capgo < 12.128.2 - Orphaned File Retention via Profile Image Replacement

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content...