BELL-CVE-2026-53290

Bulletin has no description...

CVE-2026-7839

UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, when settings2.txt is absent on first run the repeater writes the literal string "adminadmi2" as the admin password via strcpyssavedpassword, 64,...

CVE-2026-20462

creationtimestamp| type| source ---|---|--- 2026-07-01 05:09:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpkqssa4si2l 2026-07-02 06:24:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfi5dbuk2u 2026-07-02 19:16:31+00:00| seen|...

CVE-2026-14191

creationtimestamp| type| source ---|---|--- 2026-07-01 05:01:30+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpkqeufzqj27 2026-07-02 01:05:20+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpmtnhgzbd2h 2026-07-02 13:09:39+00:00| seen|...

EUVD-2026-40890

The Kadence Blocks – Gutenberg Blocks for Page Builder Features plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.7.7. This is due to a mismatch between the object used for authorization and the object actually accessed in the...

EUVD-2026-40887

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Missing Authorization to Arbitrary Group Deletion in versions up to, and including, 5.7.8. This is due to a missing capability check in the joomsportseasongroupdel AJAX handler, which only...

CVE-2026-7839 UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access

UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, when settings2.txt is absent on first run the repeater writes the literal string "adminadmi2" as the admin password via strcpyssavedpassword, 64,...

SUSE CVE-2026-53404

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat's rewrite valve meant that if the first condition in an OR chain matched, subsequent non-OR conditions were skipped. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from...

SUSE CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

CVE-2026-43709

creationtimestamp| type| source ---|---|--- 2026-07-01 02:51:39+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:00:59+00:00| seen| https://www.thezdi.com/blog/2026/6/30/the-june-2026-apple-security-update-review 2026-07-02 01:00:43+00:00| seen|...

CVE-2026-53181

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:11+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:50:05+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-53177

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:08+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-05 03:15:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpumcmqqpy23 2026-07-06 06:49:59+00:00| seen|...

CVE-2026-53161

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:04+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:49:46+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-09-15 12:46:43+00:00| seen|...

CVE-2026-52915

creationtimestamp| type| source ---|---|--- 2026-07-01 02:46:55+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:24:01+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260706 2026-08-03 08:04:55+00:00| seen|...

CVE-2026-35098

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:43+00:00| seen| https://cert.pl/en/posts/2026/06/CVE-2026-35095...

CVE-2026-56413

creationtimestamp| type| source ---|---|--- 2026-07-01 02:36:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkib7nacd2d 2026-07-01 02:37:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-01 22:01:01+00:00| seen|...

CVE-2026-14156

creationtimestamp| type| source ---|---|--- 2026-07-01 02:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhlrc5oh2u 2026-07-02 08:22:47+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 09:46:05+00:00| seen|...

CVE-2026-57456 affecting package vim for versions less than 9.2.0735-1

CVE-2026-57456 affecting package vim for versions less than 9.2.0735-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59922 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1

CVE-2026-59928 affecting package python-mistune for versions less than 3.3.0-1. A patched version of the package is available...