CVE-2026-28309

creationtimestamp| type| source ---|---|--- 2026-07-21 16:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6afo2iiy2z 2026-08-11 16:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mssyost5x22h...

libssh: libssh: authentication bypass via missing GSSAPI principal check

A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...

CVE-2026-28306

creationtimestamp| type| source ---|---|--- 2026-07-21 16:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6a6ldxen24 2026-07-26 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrl4xkp7un23...

Microsoft Security Advisory CVE-2026-50526 – .NET Tampering Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET SDK Microsoft.NET.Build.Containers. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering...

CVE-2026-15791

CVE-2026-15791 concerns BuildKit LLB/file operations where a crafted low-level build API message can escape the build root and remove contents of the host’s /tmp directory. Technical details across sources describe a Directory Traversal in the file operation (FileActionRm.Path) that can lead to h...

httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers

A flaw was found in Apache HTTP Server. This heap-based buffer overflow vulnerability can be exploited by a malicious backend server when using ProxyPassReverseCookie directives. This could lead to a denial of service DoS condition, making the server unavailable to legitimate users...

CVE-2026-47396

Plausible vulnerability CVE-2026-47396 affects PraisonAI’s call server. Before version 4.6.40, the network-facing API under praisonai.api.agent_invoke (mounted by praisonai.api.call) authenticates fail-open when CALL_SERVER_TOKEN is not configured, exposing unauthenticated access on 0.0.0.0. Endp...

CVE-2024-51314

creationtimestamp| type| source ---|---|--- 2026-07-21 15:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr64m5so3o2e...

MGASA-2026-0287 Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

Updated tig package fixes a security vulnerability

The updated package fixes a security vulnerability: editor command injection vulnerability...

CVE-2026-8284

creationtimestamp| type| source ---|---|--- 2026-07-21 14:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr62dsikrz2s...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: npm, saf, code-server, prism, lerna, pulumi, sqlpad, kubeflow-centraldashboard...

CVE-2026-8285

creationtimestamp| type| source ---|---|--- 2026-07-21 14:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5ylmaf242q...

CVE-2026-16408

creationtimestamp| type| source ---|---|--- 2026-07-21 14:11:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5yga5vpe2q 2026-07-21 14:12:52+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5yj722mj2u 2026-07-21 21:00:06+00:00| seen|...

CVE-2026-16410

creationtimestamp| type| source ---|---|--- 2026-07-21 14:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr5ybdqjnl27 2026-07-21 14:09:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5ydnufyb2j 2026-07-22 04:47:57+00:00| seen|...

DEBIAN-CVE-2026-16377

Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16367

Sandbox escape due to invalid pointer in the Disability Access APIs component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16366

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

DEBIAN-CVE-2026-16362

Use-after-free in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

UBUNTU-CVE-2026-16396

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...