CVE-2026-7514

creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:14+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:46:10+00:00| seen|...

CVE-2026-79708

creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:28+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:45:48+00:00| seen|...

CVE-2026-89256

creationtimestamp| type| source ---|---|--- 2026-09-11 13:23:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2hwso7fhid74v 2026-09-11 13:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvapiglkmd2j 2026-09-11 14:07:56+00:00| seen|...

CVE-2026-89255

creationtimestamp| type| source ---|---|--- 2026-09-11 13:04:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7g4dbmxt5n55w 2026-09-11 13:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvapiem6xi24 2026-09-11 14:07:47+00:00| seen|...

CVE-2026-88028

creationtimestamp| type| source ---|---|--- 2026-09-11 12:45:07+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-4 2026-09-14 14:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...

CVE-2026-87817

creationtimestamp| type| source ---|---|--- 2026-09-11 05:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7sglnwwm2b 2026-09-17 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvqhdzk6gr2b 2026-09-30 23:27:59+00:00| published-proof-of-concept|...

CVE-2026-57166

creationtimestamp| type| source ---|---|--- 2026-09-11 03:30:36+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv7mulx3f32z 2026-09-11 03:30:41+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117250289500372314...

PT-2026-90198

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the nvme-tcp driver where the system incorrectly accepts C2HData based solely on the blk rq payload bytes function. For REQ OP WRITE ZEROES operations, which lack physical...

PT-2026-90336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The write cmd to txdma function constructs an output report in qsdev-report buf, which is...

PT-2026-90335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The function quickspi hid raw request receives a buffer length via the len variable, but this...

CVE-2026-78573

creationtimestamp| type| source ---|---|--- 2026-09-10 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv76crcczs2p 2026-09-11 00:07:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv7bk7xutw25 2026-09-17 04:37:08+00:00| seen|...

CVE-2026-89054

creationtimestamp| type| source ---|---|--- 2026-09-10 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6x352io62e...

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

GHSA-23RH-XW42-FQ82 Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)

Last week, there were 295 vulnerabilities disclosed in 196 WordPress Plugins and 7 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 159 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...

CVE-2026-89046

creationtimestamp| type| source ---|---|--- 2026-09-10 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qffx5pc2s...

CVE-2026-85228

creationtimestamp| type| source ---|---|--- 2026-09-10 18:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzwzcxb2k 2026-09-11 05:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7uo3diay24...

CVE-2026-81048

creationtimestamp| type| source ---|---|--- 2026-09-10 17:10:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6k74ekp52p 2026-09-10 18:08:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6ngve7p42n 2026-09-17 07:07:07+00:00| seen|...

CVE-2026-80352

creationtimestamp| type| source ---|---|--- 2026-09-10 17:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6jnakqqt2r 2026-09-11 14:13:08+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mvaqrk47fz2o 2026-09-15 04:37:08+00:00| seen|...

CVE-2026-88921

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convertmarkdowntopdf module. The attribute, objectAttribute,...