CVE-2026-19626 Remote Code Execution

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-19626 Remote Code Execution

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

CVE-2026-59535

creationtimestamp| type| source ---|---|--- 2026-08-14 15:16:33+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt2hb5yphs24...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)

Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

GO-2024-2661 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-4947 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, hcloud, mcp-grafana-fips, whereabouts, gpu-operator-fips, vault-secrets-webhook, gostatsd, mc, crossplane-provider-aws-acm-fips, trivy-operator, mc-fips, task, knative-operator, manifest-tool, crossplane-function-auto-ready-fips,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter-fips, whereabouts, gpu-operator-fips, vault-secrets-webhook, sealed-secrets, gostatsd, mc, knative-operator, manifest-tool, flannel, cloud-provider-azure-fips, kubescape-http-request, nerdctl, cass-operator-fips, kube-conformance,...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, newrelic-fluent-bit-output...

GO-2026-4829 vulnerabilities

Vulnerabilities for packages: nats, kine, nats-top, k3s...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, datadog-agent, vitess, datadog-operator...

GO-2025-3660 vulnerabilities

Vulnerabilities for packages: trivy, conftest, spire-server, tfsec, cosign, kyverno-notation-aws, kots, policy-controller, witness...

GO-2026-5746 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, podman, undock, trivy-operator, skopeo, rancher, zot, nerdctl, cri-tools, kpt, nuclei, amazon-cloudwatch-agent-operator, rancher-machine, portieris, opentelemetry-operator, spire-server, rancher-agent, amazon-cloudwatch-agent, buildah,...

GO-2026-4341 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, nats-top, spqr, db-operator, steampipe, vault-secrets-webhook, cert-manager-istio-csr, doppler-kubernetes-operator, hydra, croc, cilium-cli, rancher-loglevel, x509-certificate-exporter, ip-masq-agent, local-path-provisioner,...

GO-2026-4550 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, crossplane-provider-aws-route53, rclone, hydra, cilium-cli, buildkitd, kubevela, crossplane-provider-aws-kms, trufflehog, pulumi-language-dotnet, guac, boring-registry, crossplane-provider-aws-lambda, atlantis, cert-manager-cmctl,...

CVE-2026-19626: Improper Neutralization of Directives in Dynamically Evaluated Code

A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in...

PT-2026-72055

Name of the Vulnerable Software and Affected Versions Tenable Security Center affected versions not specified Description A remote code execution issue exists in the report generation functionality. An authenticated, non-administrative user can exploit this by providing specially crafted input th...

MINI-GRJ7-P3HH-QV6R

Bulletin has no description...

CVE-2026-73575

creationtimestamp| type| source ---|---|--- 2026-08-13 16:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2ep36ij3vbet4...

CVE-2026-54249

creationtimestamp| type| source ---|---|--- 2026-08-13 16:32:36+00:00| seen| https://gist.github.com/alon710/d833b9431a8f61aeff2a0496f83968ee...

Frappe Prepared Report / Query Report bypass subject, owner and row-level permission checks to read other users' report data

Frappe Prepared Report / Query Report Bypass Permission Checks to Read Other Users' Report Data Vulnerability Overview Query Report in Frappe Framework supports background pre-generation Prepared Report: the query is executed with the initiating user's privileges and the result is persisted for...