CVE-2026-19651

creationtimestamp| type| source ---|---|--- 2026-09-09 04:25:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv2oyduhsy2t...

CVE-2026-7804

creationtimestamp| type| source ---|---|--- 2026-09-09 03:46:52+00:00| seen| https://bsky.app/profile/suriq.io/post/3mv2mts7vjd2t...

PT-2026-89136

Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions prior to 3.12.4 Description An issue exists where CalDAV and CardDAV multiget operations bypass per-href Access Control Lists ACL. An authenticated DAV user who has partial shared access to another user's address book or...

PT-2026-89241

This module enables you to manage content deletion and provides reports for identifying orphaned content. The module doesn't sufficiently sanitize node titles when displaying the orphaned nodes report. This leads to a persistent cross-site scripting vulnerability XSS. This vulnerability is...

SafeDelete - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-140

This module enables you to manage content deletion and provides reports for identifying orphaned content. The module doesn't sufficiently sanitize node titles when displaying the orphaned nodes report. This leads to a persistent cross-site scripting vulnerability XSS. This vulnerability is...

PT-2026-89011

Snipe-IT through 8.6.3 does not neutralize formula elements in the "unaccepted assets" acceptance report CSV export. ReportsController::postAssetAcceptanceReport builds the CSV by hand stripping commas and joining rows manually and, unlike the six sibling exports in the same controller, never...

PT-2026-89012

Snipe-IT versions before 8.7.0 fail to properly scope asset acceptance report queries by company, allowing authenticated reports.view users to read pending acceptances across all companies. Attackers can access the unaccepted assets report page or CSV export to disclose cross-company inventory...

CVE-2026-61909

Cyrus IMAP before 3.12.4 (backported to 3.10.4 and 3.8.8) contains an ACL bypass in its CalDAV/CardDAV multiget functionality. An authenticated DAV user who holds some shared access to another user's calendar or address book can read unshared events or contacts by including target hrefs in a cale...

PT-2026-89014

Name of the Vulnerable Software and Affected Versions Snipe-IT versions 8.6.4 through 8.6.x Description An issue exists in the SettingsController::downloadLocationScopingReport function where the FMCS location-scoping mismatch report is streamed via the '/admin/settings/location-scoping-report.cs...

CVE-2026-84197

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv224ku6z62t 2026-09-09 12:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3k3gs4w22y...

CVE-2026-69498

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:09+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:03+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:19:03+00:00|...

CVE-2026-69606

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:31+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:16+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:48:42+00:00|...

CVE-2026-69465

creationtimestamp| type| source ---|---|--- 2026-09-08 22:00:55+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:49+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:45:23+00:00|...

CVE-2026-70296

creationtimestamp| type| source ---|---|--- 2026-09-08 20:12:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzth2jf7k22 2026-09-08 20:19:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:01:41+00:00| seen|...

CVE-2026-86675

creationtimestamp| type| source ---|---|--- 2026-09-08 19:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/essxks3w5rnvz...

EUVD-2026-57222

Prowler: Stored XSS in HTML reports through unescaped cloud resource tags...

CVE-2026-82067

creationtimestamp| type| source ---|---|--- 2026-09-08 18:08:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmjw5edt2g 2026-09-08 20:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzsr6ive22r 2026-09-10 01:02:00+00:00| seen|...

CVE-2026-86729

creationtimestamp| type| source ---|---|--- 2026-09-08 18:08:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzmj5cswe2r 2026-09-08 20:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzsr7utbc2t...

CVE-2026-77120

creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/apgqf2kdfuep5...

CVE-2026-73314

creationtimestamp| type| source ---|---|--- 2026-09-08 15:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gdjs4b2wvs3ob 2026-09-15 00:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvjdegeyaj2y...