PT-2026-56075

Name of the Vulnerable Software and Affected Versions Coder versions prior to 2.29.17 Coder versions prior to 2.32.7 Coder versions prior to 2.33.8 Coder versions prior to 2.34.2 Description The coder open app command opens external workspace-app URLs without validating the scheme or host. If an...

PT-2026-55903

Improper Input Validation, Unintended Proxy or Intermediary 'Confused Deputy' vulnerability in Apache Camel DAPR component. The camel-dapr Dapr Pub/Sub consumer DaprPubSubConsumer copied two fields from each inbound CloudEvent - its Pub/Sub component name and its topic - into the...

PT-2026-55888

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.3.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the camel-elasticsearch-rest-client component allows for authorization...

openSUSE 16: ansible-rmt-server / rmt-server / rmt-server-config / etc (openSUSE-SU-2026:21225-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21225-1 advisory. This update for rmt-server fixes the following issue Update to 3.0.0: - CVE-2026-42256: net-imap: hostile server can perform a DoS on client...

ALSA-2026:35829 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via...

PT-2026-55855

Name of the Vulnerable Software and Affected Versions Formbricks version 5.0.0 Description Improper access controls exist within the Survey Handler component, specifically affecting a function in the apps/web/modules/survey/link/actions.ts file. This flaw allows for remote exploitation...

PT-2026-55891

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description Improper input validation in the Apache Camel AWS2-SQS component allows an attacker to inject...

PT-2026-55882

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.19.9 Description The camel-vertx-http component deserializes HTTP response bodies with the...

ROS-20260706-73-0004

The vulnerability of the pgcreatesubscriber function in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

CVE-2026-14777

SourceCodester Onlne Examination & Learning Management System 1.0 has a vulnerability in /announcements.php that allows unrestricted file upload. The issue arises from an unknown functionality path in announcements.php, enabling remote exploitation and has publicly available exploits. The CVE not...

CVE-2026-14770

The CVE-2026-14770 entry affects SourceCodester Class and Exam Timetabling System 1.0. The vulnerability is an SQL injection in the /edit_room.php script caused by manipulating the ID parameter, allowing remote initiation of an attack. This is supported by multiple connected sources that describe...

CVE-2026-55994

creationtimestamp| type| source ---|---|--- 2026-07-05 20:54:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwhi6z42b25 2026-07-06 12:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpy4fz3bvs2k 2026-07-09 03:57:19+00:00| seen|...

CVE-2026-48205

creationtimestamp| type| source ---|---|--- 2026-07-05 20:21:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwfofkvu425 2026-07-06 20:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpywszkc562b 2026-07-09 08:07:07+00:00| seen|...

EUVD-2026-41779

A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly...

CVE-2026-46591

creationtimestamp| type| source ---|---|--- 2026-07-05 20:13:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwf7wztkm2n 2026-07-09 03:27:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6otrzp4q26 2026-07-16 12:00:04+00:00| published-proof-of-concept|...

CVE-2026-14762

creationtimestamp| type| source ---|---|--- 2026-07-05 20:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwf52zp6h2o 2026-07-06 06:51:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxiuqnjdy2j 2026-07-13 22:00:10+00:00| seen|...

CVE-2026-40047

creationtimestamp| type| source ---|---|--- 2026-07-05 19:24:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpwchziqm62z 2026-07-06 19:26:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpyszg4wcn2y 2026-07-09 03:34:24+00:00| seen|...

CVE-2026-57318

creationtimestamp| type| source ---|---|--- 2026-07-05 18:16:32+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpw6o5wlx32z...

CVE-2026-36182

creationtimestamp| type| source ---|---|--- 2026-07-05 18:13:10+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpw6i5cc3b2c 2026-07-06 11:31:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxyig2hz22v...

CVE-2026-14759

creationtimestamp| type| source ---|---|--- 2026-07-05 15:52:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpvwlmt64u2k 2026-07-06 06:50:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxitaflxd2d...