CVE-2026-19843

creationtimestamp| type| source ---|---|--- 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-09-07 15:18:37+00:00| seen|...

CVE-2026-39975

creationtimestamp| type| source ---|---|--- 2026-08-24 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtu2nkbaek2e 2026-08-24 20:08:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu4acx27o2f 2026-08-25 06:00:05+00:00| seen|...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-71509

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-71509

Dolibarr versions before 24.0.0 contain an improper authorization vulnerability in the expense report REST API update endpoint. Authenticated users holding only expense-creation rights can directly set approval status and approver identity fields via the API, effectively bypassing the approval wo...

EUVD-2026-65082

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint

Dolibarr before 24.0.0 contains an improper authorization vulnerability in the expense report REST API update endpoint that allows authenticated attackers with expense-creation rights to bypass the approval workflow by directly setting approval status and approver identity fields. Attackers can...

CVE-2026-76837

creationtimestamp| type| source ---|---|--- 2026-08-24 18:49:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4r33lpgqkvzkk...

CVE-2026-76838

creationtimestamp| type| source ---|---|--- 2026-08-24 18:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzangtp4vj27 2026-08-24 19:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mttyijzlir27...

CVE-2026-71921

creationtimestamp| type| source ---|---|--- 2026-08-24 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttxcd4hst2p 2026-08-24 20:08:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtu47rmww72m 2026-08-25 09:00:04+00:00| published-proof-of-concept|...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-13212

creationtimestamp| type| source ---|---|--- 2026-08-24 16:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jth6z7lrinmlf...

CVE-2026-78247

creationtimestamp| type| source ---|---|--- 2026-08-24 15:53:36+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mttnymbte62n...

CVE-2026-71364

creationtimestamp| type| source ---|---|--- 2026-08-24 15:46:48+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117151262762627704...

CVE-2026-59564

creationtimestamp| type| source ---|---|--- 2026-08-24 14:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttireopgc25 2026-08-24 16:07:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttorpc6kx2b...

CVE-2026-66648

creationtimestamp| type| source ---|---|--- 2026-08-24 12:18:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/giyrj2vmymevx 2026-08-24 13:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttece2jp52e 2026-08-24 14:07:48+00:00| seen|...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: virtio/vsock: Fixed an uninit-value issue in virtiotransportrecvpkt KMSAN reported the following uninit-value access issues: ===================================================== BUG: KMSAN: uninit-value in...