CVE-2026-11262

creationtimestamp| type| source ---|---|--- 2026-06-05 04:29:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116695615039571880 2026-06-05 05:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnje72exif26 2026-06-05 13:24:36+00:00| seen|...

CVE-2026-11298

creationtimestamp| type| source ---|---|--- 2026-06-05 03:24:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj6spgd4r2k 2026-06-05 13:24:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11305

creationtimestamp| type| source ---|---|--- 2026-06-05 03:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnj5jg5xpe2p 2026-06-05 03:28:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj72gcdjl25 2026-06-05 13:24:44+00:00| seen|...

joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla 权限许可和访问控制问题漏洞

JCE Joomla Component is an editor component used within the Joomla content management system. The JCE Joomla Component has a security vulnerability related to access control. This vulnerability stems from allowing unauthenticated users to create new editor profiles, ultimately leading to the uplo...

CVE-2026-25624: Improper Neutralization of Input During Web Page Generation

An administrative cross-site scripting XSS vulnerability exists in the web user interface dashboard layout of Arista Edge Threat Management - Arista Next Generation Firewall NGFW. Unvalidated user-supplied variables are echoed back to administrative profiles, facilitating vector payload processin...

PT-2026-47049

Name of the Vulnerable Software and Affected Versions Arista Edge Threat Management - Arista Next Generation Firewall NGFW affected versions not specified Description An administrative cross-site scripting XSS issue exists in the web user interface dashboard layout. Unvalidated user-supplied...

CVE-2024-27892 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch...

CVE-2024-27890 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).

Affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected. This can result in unexpected configuration being applied to the switch...

CVE-2026-50213

The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings...

WordPress ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 7.3.1 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by h0xilo in WordPress Plugin ARMember Premium versions = 7.3.1...

CVE-2026-50213

The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings...

CVE-2026-50213

Technical details about CVE-2026-50213, including affected products, versions, root cause, and patches, are not publicly provided in the supplied documents; monitor for updates.

CVE-2026-49203

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted...

CVE-2026-49203 Unauthenticated eSIM Configuration Manipulation

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted...

CVE-2026-41858

creationtimestamp| type| source ---|---|--- 2026-06-04 04:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngqfhddhf25 2026-06-04 06:34:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngyykjnwv2p 2026-06-04 07:26:16+00:00| seen|...

CVE-2026-8722

creationtimestamp| type| source ---|---|--- 2026-06-04 01:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnggo4dgrl23 2026-06-04 01:20:24+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnghgns3a62j...

CVE-2026-22054

creationtimestamp| type| source ---|---|--- 2026-06-04 00:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mngf6vd4652m 2026-06-04 13:20:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnhpo4vr3n2o 2026-06-04 17:25:38+00:00| seen|...

PT-2026-46165

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The account validation endpoint '/v1/User/validate' exposes comprehensive user profile data sheets. This information can be accessed without authentication and...

CVE-2026-1829

creationtimestamp| type| source ---|---|--- 2026-06-03 00:02:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndsm2upr72h 2026-06-03 00:02:19+00:00| seen| https://bsky.app/profile/potato.software/post/3mndsm3wgok2e...

CVE-2026-36748

RockRMS (developed by Spark Development Network ) versions 16.13 and before v.17.7.0 are vulnerable to Cross-Site Scripting (XSS) . The vulnerability exists in the Social Media links field of the user profile because the application fails to properly validate or escape user-supplied input before ...