CVE-2026-56537

HCL Connections is vulnerable to information disclosure which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data.they are not entitled to, caused by improper handling of request data...

EUVD-2026-49180

An access control vulnerability in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows multiple simultaneous sessions to run without proper client validation or session integrity checks. An attacker with a modified version of the app can connect to the robot during an active,...

CVE-2026-48145

The CVE concerns Apache Thrift’s C++ bindings, specifically the TSSLSocket matchName() path, where improper validation of certificates with host mismatches is reported. Affected versions are Thrift before 0.24.0. The vulnerability arises from RFC 6125 wildcard handling in the certificate host mis...

CVE-2026-17527

creationtimestamp| type| source ---|---|--- 2026-07-27 10:30:15+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrmoumj5gu2y 2026-07-27 12:00:19+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrmtvpbkks2o 2026-07-27 12:00:21+00:00| seen|...

CVE-2026-48357

creationtimestamp| type| source ---|---|--- 2026-07-27 09:11:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkhglsrg2u 2026-07-27 09:11:40+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrmki4xeux23...

ROOT-APP-NPM-CVE-2026-55602 CVE-2026-55602 in @rootio/http-proxy-middleware - Patched by Root

Root has patched CVE-2026-55602 in the @rootio/http-proxy-middleware package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-54288 CVE-2026-54288 in @rootio/hono - Patched by Root

Root has patched CVE-2026-54288 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-26PP-8WGV-HJVM GHSA-26pp-8wgv-hjvm in hono - Patched by Root

Root has patched GHSA-26pp-8wgv-hjvm in the hono package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44457 CVE-2026-44457 in @rootio/hono - Patched by Root

Root has patched CVE-2026-44457 in the @rootio/hono package for Root:npm. Multiple fixed versions available...

DEBIAN-CVE-2026-64531

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nlalen field is u16. Commit a1e64addf3ff "net: openvswitch: remove misbehaving actions length check" allowed the...

CVE-2026-64531

creationtimestamp| type| source ---|---|--- 2026-07-27 08:12:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116990931091139348 2026-07-28 10:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrp7jnvcfc2l 2026-07-28 11:12:13+00:00| seen|...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB key types due to unchecked shift levels

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel XkbNumKbdGroups but CheckKeyTypes does not verify or clamp non-canonical key types to XkbMaxShiftLevel. A client can change key types to excessive shift...

CVE-2026-64393

creationtimestamp| type| source ---|---|--- 2026-07-27 06:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmarr5wvd2k 2026-08-06 04:50:43+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-64392

creationtimestamp| type| source ---|---|--- 2026-07-27 06:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmarpnodf2s...

CVE-2026-64385

creationtimestamp| type| source ---|---|--- 2026-07-27 06:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmagzepio2j...

CVE-2026-64320

creationtimestamp| type| source ---|---|--- 2026-07-27 06:08:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrma7ucshz23...

CVE-2026-64319

creationtimestamp| type| source ---|---|--- 2026-07-27 06:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrma7swnmd2u...

CVE-2026-64269

creationtimestamp| type| source ---|---|--- 2026-07-27 06:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrma4bgzpa2a 2026-08-06 04:48:07+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

CVE-2026-13726 Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode

The MPG WordPress plugin before 4.1.8 does not sanitise and escape a parameter before reflecting it back in the response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting against a victim who is induced to send a crafted request...

BIT-DOTNET-SDK-2026-50650 .NET Framework Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...