CVE-2026-65713

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-64873 Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-65756

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript...

CVE-2026-64799 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-65430 Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-65430

Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability...

CVE-2026-16723

creationtimestamp| type| source ---|---|--- 2026-07-23 08:46:26+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrch7ck5e62q 2026-07-23 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968471131630189 2026-07-23 09:00:30+00:00| seen|...

GHSA-XVCM-6775-5M9R vulnerabilities

Vulnerabilities for packages: authentik, rancher-api-ui, keep-fips, nextcloud-server, arangodb, vitess, authentik-fips, keep...

GHSA-VHCC-WFM4-93WW vulnerabilities

Vulnerabilities for packages: linux-gcp...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: metaflow-service, awx, openstack-keystone-2025.2, spamcheck, kubeflow-pipelines, mitmproxy, openstack-keystone-2025.1-fips, py3-cassandra-medusa, openstack-keystone-2025.2-fips, barman, superset-fips, datahub-ingestion, openstack-keystone-2026.1-fips, superset,...

USN-8576-2 linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

CVE-2024-58023

Technical details are not publicly available in the provided documents. Monitor Bosch security advisories for updates on CVE-2024-58023.

EUVD-2026-47887

The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the mod URL parameter before reflecting it into the admin settings page admin.php?page=post-status-notifier-lite, leading to a Reflected Cross-Site Scripting vulnerability that fires in the administrator's sessi...

CVE-2026-63226

CVE-2026-63226 affects Ricoh Printers and MFPs. The issue is lack of restrictions on SSH port forwarding, enabling SSH port forwarding to reach arbitrary destinations on the LAN when SSH is enabled on the affected product. The connected documents provide the vulnerability description and CVSS met...

CVE-2026-7120

@fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathname used for file resolution. Versions up to and including 10.1.1 are affected. An unauthenticated attacker can bypass allowedPath restrictions by requesting equivalent...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When a server has wantClientAuth and the client sends a nocertificate alert, any client certificates are not verified...

github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys

A flaw was found in sigstore-go, a software library used for verifying digital signatures. This vulnerability specifically affects the workflow for self-managed long-lived signing keys that do not use certificates. An attacker who possesses an expired signing key can exploit this by creating and...

CVE-2026-7120

creationtimestamp| type| source ---|---|--- 2026-07-23 02:54:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrbtkns52k2t...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

Important: Red Hat Security Advisory: pki-deps:10.6 security update

An update for the pki-deps:10.6 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...