CVE-2026-44901

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.0.0 until 4.14.6 and 5.0.0-beta2, AffectedItemsWazuhResult.merge in framework/wazuh/core/results.py trusts the sortcasting field in a cluster worker's JSON response. During a distributed API merge...

CVE-2026-61212

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:24+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-28 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu46d54tyk24...

CVE-2026-60850

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-73902

creationtimestamp| type| source ---|---|--- 2026-08-19 17:17:01+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71160

creationtimestamp| type| source ---|---|--- 2026-08-19 17:16:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60849

creationtimestamp| type| source ---|---|--- 2026-08-19 17:15:21+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 17:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrbn4xffo2y...

CVE-2026-70686

creationtimestamp| type| source ---|---|--- 2026-08-19 17:15:05+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2xrbs46p2u...

Malicious code in ai-texts-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...

CVE-2026-72530

TrueConf Server (versions 5.3.X–5.3.9, 5.4.X–5.4.9, 5.5.X–5.5.5, and earlier) is vulnerable to a sandbox escape via improper code generation management. A remote unauthenticated attacker with network access to port 4307/TCP (open by default) can deliver a specially crafted script that breaks out ...

EUVD-2026-62587

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

CVE-2026-72529

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

CVE-2026-70770

creationtimestamp| type| source ---|---|--- 2026-08-19 16:52:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-28 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu566dyir62c...

CVE-2026-70680

creationtimestamp| type| source ---|---|--- 2026-08-19 16:52:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61284

creationtimestamp| type| source ---|---|--- 2026-08-19 16:51:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70815

creationtimestamp| type| source ---|---|--- 2026-08-19 16:50:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70781

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:56+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-62449

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

MINI-HVW3-9CM3-PP67

Bulletin has no description...

CVE-2026-75143

FFmpeg (versions 4.4 through 9.0 , built with --enable-librist) contains a heap buffer overflow in the RIST protocol reader (libavformat/librist.c). The function librist_read() ignored its size argument, copying the full received RIST payload into the caller's buffer. When accessed via the async:...

Malicious code in node-runtime-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac7a39a8896a7f78a20fe79758f146d2158f2fc529e51ac705720a745552770 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...