CVE-2026-42527 Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

Deserialization of Untrusted Data vulnerability in Apache Camel. The default ObjectInputFilter pattern shipped with several Apache Camel components for defense-in-depth deserialization filtering 'java.;javax.;org.apache.camel.;!', or the no-'javax.' variant in the aggregation-repository component...

CVE-2026-14801

creationtimestamp| type| source ---|---|--- 2026-07-06 07:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpxmcjr2dc2d 2026-07-09 00:31:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ezzhfbn2s...

CVE-2026-40047

CVE-2026-40047 concerns Apache Camel’s camel-docling: Insufficient validation of custom CLI arguments allows argument injection and path traversal in DoclingProducer. The issue arises when unvalidated values in CamelDoclingCustomArguments (or path-bearing headers) reach the external docling tool ...

CVE-2026-14808

creationtimestamp| type| source ---|---|--- 2026-07-06 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116871857765386040 2026-07-06 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpxkzs5u6524 2026-07-06 08:02:06+00:00| seen|...

EUVD-2026-41817

Prog Management System developed by PROG MIS has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain the database account and password...

CVE-2026-53189

creationtimestamp| type| source ---|---|--- 2026-07-06 06:50:23+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-02 04:46:02+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260902...

CVE-2026-53040

creationtimestamp| type| source ---|---|--- 2026-07-06 06:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:38:50+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2026-52995

creationtimestamp| type| source ---|---|--- 2026-07-06 06:46:20+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:37:03+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

CVE-2025-50567

creationtimestamp| type| source ---|---|--- 2026-07-06 06:45:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxijeqlja2p...

CVE-2026-46199

creationtimestamp| type| source ---|---|--- 2026-07-06 06:21:42+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2025-50488

creationtimestamp| type| source ---|---|--- 2026-07-06 06:20:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxh4tufpi2v...

CVE-2026-46143

creationtimestamp| type| source ---|---|--- 2026-07-06 06:20:10+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706...

CVE-2026-57634

creationtimestamp| type| source ---|---|--- 2026-07-06 06:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpxgt3oro42e...

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey

A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...

CVE-2023-48056

creationtimestamp| type| source ---|---|--- 2026-07-06 04:51:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxc6e4cbb2f...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

CVE-2026-49422

creationtimestamp| type| source ---|---|--- 2026-07-06 01:35:23+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpwx6udafh27...

CVE-2026-14773

creationtimestamp| type| source ---|---|--- 2026-07-06 00:17:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwstchuzv26 2026-07-07 12:23:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2ltza6zm2b...

CVE-2026-10656

creationtimestamp| type| source ---|---|--- 2026-07-06 00:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpws2gljsb2p 2026-07-07 11:56:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2ke6vsvr2k...

CVE-2026-59519

creationtimestamp| type| source ---|---|--- 2026-07-06 00:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpwrwlntxf2m 2026-07-07 08:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq25i3wmmc2q...