CVE-2026-9147

creationtimestamp| type| source ---|---|--- 2026-07-18 13:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116941221213811825 2026-07-18 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqweqn3ya72g 2026-07-18 14:00:39+00:00| seen|...

CVE-2024-58356 SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE

SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's permissions via OVERWRITE does not take effect, a...

CVE-2026-16117

Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router URL-decodes paths for route matching, but request.url retains the original encoded form, and the prefix-rewrite step uses a literal string...

CVE-2026-16088

creationtimestamp| type| source ---|---|--- 2026-07-18 12:32:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwbj72jdk2i...

CVE-2026-16085

creationtimestamp| type| source ---|---|--- 2026-07-18 12:27:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwbaag7qg2e...

CVE-2026-7872

creationtimestamp| type| source ---|---|--- 2026-07-18 12:01:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqw7quhq3m2a...

CVE-2026-62299

creationtimestamp| type| source ---|---|--- 2026-07-18 10:38:28+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw34zsflf2p 2026-07-18 10:38:31+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw355eeak2l 2026-07-18 10:38:34+00:00| seen|...

CVE-2026-47865

VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be able to access the Avi Control plane by bypassing the authentication mechanism. Affected versions: 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed in 30.2.7...

CVE-2026-16083

A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This affects the function webhook.ParseRequest of the file pkg/channels/line/line.go of the component LINE Webhook. The manipulation results in authentication bypass by capture-replay. The attack may be launched remotely. The...

CVE-2026-16085 Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. Affected is the function NewContextBuilder of the file pkg/agent/context.go. Such manipulation leads to inclusion of functionality from untrusted control sphere. The attack needs to be performed locally. The exploit has be...

CVE-2026-13445

creationtimestamp| type| source ---|---|--- 2026-07-18 09:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvokzq3x2c 2026-07-21 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr6dwfosuq2y...

CVE-2026-47871 VMware Avi Load Balancer Directory Traversal Vulnerability

VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected versions: 32.1.1 fixed in 32.1.2 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed...

CVE-2026-47870

CVE-2026-47870 affects VMware Avi Load Balancer. A malicious authenticated user with network access can potentially execute remote code due to a privilege-escalation flaw. Affected versions and fixes shown in public records: 32.1.1 (fixed in 32.1.2); 31.1.1–31.2.2 (fixed in 31.2.2-2p3); 30.1.1–30...

CVE-2026-38755

creationtimestamp| type| source ---|---|--- 2026-07-18 08:01:42+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqvsepxqy52s...

MGASA-2026-0260 Updated python-pydantic-settings packages fix a security vulnerability

The updated packages fix a security vulnerability: NestedSecretsSettingsSource follows symlinks outside secretsdir, enabling local file read and bypassing secretsdirmaxsize. CVE-2026-58203...

Exploit for CVE-2026-63030

No d...

EUVD-2026-45344

Authentication bypass using an alternate path or channel in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-15900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML...

PT-2026-60961

Name of the Vulnerable Software and Affected Versions @fastify/http-proxy versions prior to 11.6.0 Description An improper input normalization issue exists where the software fails to rewrite the request prefix when the prefix segment is URL-encoded. While the router URL-decodes paths for route...

CVE-2026-44979

@hapi/wreck is an HTTP client utility. Prior to 18.1.1, when @hapi/wreck follows a 3xx redirect to a different hostname, only the Authorization and Cookie headers are stripped, and the standard credential header Proxy-Authorization is forwarded intact to the redirect target, potentially exposing...