CVE-2026-84947

creationtimestamp| type| source ---|---|--- 2026-09-04 16:55:30+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mupgl5yzrk2w 2026-09-04 17:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2pozg5y57hhxy...

AZL-99618 CVE-2026-80863 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in freerdatomicresources freerdatomicresources iterates using qp-attr.maxdestrdatomic. Updating maxdestrdatomic before freeing the old array can make the free path walk past the old allocation and trigger a slab...

CVE-2026-80772 HID: nintendo: fix out-of-bounds read in joycon_ctlr_read_handler()

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

EUVD-2026-71415

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joyconctlrreadhandler joyconctlrreadhandler casts an incoming HID input report to struct joyconinputreport and parses it, guarding the cast only with a 12-byte length check: if size = 12 /...

CVE-2026-80772

CVE-2026-80772 is an out-of-bounds read in the Linux kernel 's HID Nintendo driver, specifically in joycon_ctlr_read_handler(). The function guards a cast of incoming HID input reports to a 49-byte struct joycon_input_report with only a 12-byte length check. A 12-byte report with data[0] == JC_IN...

CVE-2026-85595

creationtimestamp| type| source ---|---|--- 2026-09-04 13:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muozyenllf2v 2026-09-04 14:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mup56maouz2t...

CVE-2026-85616

Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions when Full Multiple Company Support is enabled. Authenticated users with reports.view permission can enumerate sequential acceptance IDs and soft-delete or trigger reminder emails for...

CVE-2026-85611

OpenPanel versions before 2.3.0 are affected by a cross-tenant Broken Object Level Authorization (BOLA) vulnerability in the report.getLayouts and report.resetLayout tRPC procedures. The root cause is that these procedures fail to scope dashboard queries to the caller's own project, allowing an a...

CVE-2026-85403

creationtimestamp| type| source ---|---|--- 2026-09-04 11:08:16+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3muot6j7pgy2u...

CVE-2016-2067

creationtimestamp| type| source ---|---|--- 2026-09-04 05:00:05+00:00| seen| Telegram/PY8bWpO043D-Z8Y-HNjpKbgrcjpV8amEBJErFv8jCkTtc 2026-09-05 01:00:37+00:00| published-proof-of-concept| Telegram/PY8bWpO043D-Z8Y-HNjpKbgrcjpV8amEBJErFv8jCkTtc...

CVE-2026-85440

creationtimestamp| type| source ---|---|--- 2026-09-04 00:00:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munntq2vyd2y 2026-09-04 00:09:49+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3munof4h2fh2m...

PT-2026-85613

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joycon ctlr read handler joycon ctlr read handler casts an incoming HID input report to struct joycon input report and parses it, guarding the cast only with a 12-byte length check: if siz...

PT-2026-85624

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse raw event magicmouse raw event handles DOUBLE REPORT ID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The...

CVE-2026-85437

creationtimestamp| type| source ---|---|--- 2026-09-03 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munnbsm4ce2p 2026-09-04 00:09:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3munoek6qrz2w...

CVE-2026-64198

creationtimestamp| type| source ---|---|--- 2026-09-03 22:51:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hlkfupm65armm 2026-09-03 23:02:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munkmkg5am2h...

CVE-2026-82520

parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size. Because parsedmarc automatically processes incoming DMARC report emails without user interaction, an unauthenticated remote attacker can send a crafted email with a...

CVE-2026-82521 parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject

parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...

CVE-2026-82521 parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject

parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...

CVE-2026-82521

parsedmarc versions 9.0.6 through before 11.0.1 are affected by a path traversal vulnerability in the forensic report sample file output. When an email subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string and falls back to the raw unsa...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)

Last week, there were 266 vulnerabilities disclosed in 186 WordPress Plugins and 6 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 131 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilitie...