CVE-2026-88028

creationtimestamp| type| source ---|---|--- 2026-09-11 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-4 2026-09-14 14:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...

CVE-2026-87817

creationtimestamp| type| source ---|---|--- 2026-09-11 05:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7sglnwwm2b 2026-09-17 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvqhdzk6gr2b 2026-09-30 23:27:59+00:00| published-proof-of-concept|...

CVE-2026-57166

creationtimestamp| type| source ---|---|--- 2026-09-11 03:30:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mulx3f32z 2026-09-11 03:30:41+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117250289500372314...

PT-2026-90336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The write cmd to txdma function constructs an output report in qsdev-report buf, which is...

PT-2026-90335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The function quickspi hid raw request receives a buffer length via the len variable, but this...

PT-2026-90198

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the nvme-tcp driver where the system incorrectly accepts C2HData based solely on the blk rq payload bytes function. For REQ OP WRITE ZEROES operations, which lack physical...

CVE-2026-78573

creationtimestamp| type| source ---|---|--- 2026-09-10 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv76crcczs2p 2026-09-11 00:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv7bk7xutw25 2026-09-17 04:37:08+00:00| seen|...

CVE-2026-89054

creationtimestamp| type| source ---|---|--- 2026-09-10 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6x352io62e...

GHSA-23RH-XW42-FQ82 Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)

Last week, there were 295 vulnerabilities disclosed in 196 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 159 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

CVE-2026-89046

creationtimestamp| type| source ---|---|--- 2026-09-10 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qffx5pc2s...

CVE-2026-85228

creationtimestamp| type| source ---|---|--- 2026-09-10 18:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzwzcxb2k 2026-09-11 05:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7uo3diay24...

CVE-2026-81048

creationtimestamp| type| source ---|---|--- 2026-09-10 17:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6k74ekp52p 2026-09-10 18:08:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6ngve7p42n 2026-09-17 07:07:07+00:00| seen|...

CVE-2026-80352

creationtimestamp| type| source ---|---|--- 2026-09-10 17:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6jnakqqt2r 2026-09-11 14:13:08+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mvaqrk47fz2o 2026-09-15 04:37:08+00:00| seen|...

CVE-2026-88921

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

CVE-2026-88921

MISP (versions ≤2.5.45) contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, used during PDF report export via the convert_markdown_to_pdf module. The attribute(), objectAttribute(), object(), and tag() methods interpolated user-controlled fields (attribute type...

CVE-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...

CVE-2026-88893

OpenPanel 's share lookup procedures fail to validate access controls, allowing unauthenticated callers who possess a share link to retrieve argon2id password hashes and full report configurations (event names, filters, breakdown dimensions). This enables offline password cracking and theft of bu...

CVE-2026-88893 OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosure

OpenPanel through 2.3.0 share lookup procedures fail to validate access controls and return password hashes and protected report definitions to unauthenticated callers. Attackers with a share link can retrieve argon2id password hashes and full report configurations including event names, filters,...