CVE-2026-26241

creationtimestamp| type| source ---|---|--- 2026-06-10 08:51:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwdhhd6w72p 2026-06-14 23:16:49+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3mobvnrzykg23 2026-06-15 16:31:20+00:00| seen|...

CVE-2026-8853

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'memo' parameter in all versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and above,...

Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service

...

GHSA-QPGP-93VX-G8V8 vulnerabilities

Vulnerabilities for packages: logstash, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-cng, logstash-fips...

BELL-CVE-2026-46322

Bulletin has no description...

CVE-2026-11837

creationtimestamp| type| source ---|---|--- 2026-06-10 06:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnvzvhfhhz25 2026-06-10 06:00:51+00:00| seen| https://infosec.exchange/users/offseq/statuses/116724284473192022 2026-06-10 08:41:51+00:00| seen|...

EUVD-2026-35988

The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any fil...

CVE-2026-9067 Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any fil...

MGASA-2026-0186 Updated libxpm packages fix security vulnerability

libXpm Out-of-bounds read in xpmNextWord. CVE-2026-4367...

MGASA-2026-0190 Updated golang-x-net packages fix security vulnerability

CVE-2024-45338 An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

Updated golang-x-net packages fix security vulnerability

CVE-2024-45338 An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

CVE-2025-59382

creationtimestamp| type| source ---|---|--- 2026-06-10 05:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvwmmlkfz2h 2026-06-17 12:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moibaup52w2j 2026-06-23 18:00:00+00:00| seen|...

CVE-2025-66280

CVE-2025-66280 describes an integer overflow/wraparound vulnerability affecting several QNAP operating system versions. According to connected sources, a remote attacker who obtains an administrator account can exploit the flaw to compromise system security. Remediation is in fixed releases: QTS ...

EUVD-2025-210101

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

CVE-2026-42790 affecting package erlang for versions less than 26.2.5.21-1

CVE-2026-42790 affecting package erlang for versions less than 26.2.5.21-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15

CVE-2026-46598 affecting package docker-buildx for versions less than 0.14.0-15. A patched version of the package is available...

CVE-2026-11645 vulnerabilities

Vulnerabilities for packages: chromium...

EUVD-2025-210095

QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:...

CVE-2026-53675

creationtimestamp| type| source ---|---|--- 2026-06-10 01:32:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvkuvwacd2m...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in the retrytopic-attempts header. An attacker can manipulate retry routing and backoff behavior by sending crafted headers with out-of-range attempt counts. Remediation Upgrade...