MINI-QVWW-C6WP-J74X

Bulletin has no description...

MINI-HVFW-X3FJ-26P6

Bulletin has no description...

MINI-2PR2-V7PR-RCM2

Bulletin has no description...

CVE-2026-18171

creationtimestamp| type| source ---|---|--- 2026-08-20 01:24:58+00:00| seen| https://bsky.app/profile/kindtech.bsky.social/post/3mti3losfbl2r...

CVE-2026-76879

creationtimestamp| type| source ---|---|--- 2026-08-20 01:04:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mti2hg64yy2m...

EUVD-2026-62953

In Splunk Enterprise Security versions below 8.6.1, a user who holds the essanalyst Splunk Enterprise Security role could change User and Entity Behavior Analytics UEBA search macros that scheduled searches run with administrator permissions, allowing for access to all relevant data and system...

EUVD-2026-62952

In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contains the mcinvestigationread capability could inject Search Processing Language SPL through Analyst Queue search filters, allowing for access to all relevant data and system integrity...

CVE-2026-76924

creationtimestamp| type| source ---|---|--- 2026-08-20 00:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/76ljsp56knxj6...

CVE-2026-76310

creationtimestamp| type| source ---|---|--- 2026-08-20 00:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthxexuyib2c 2026-08-20 03:29:52+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtickz5u6r2y 2026-08-20 04:45:36+00:00| seen|...

Generation of Predictable IV with CBC Mode

Overview org.springframework.security:spring-security-crypto is a spring-security-crypto library for Spring Security. Affected versions of this package are vulnerable to Generation of Predictable IV with CBC Mode via AesBytesEncryptor when using the two-argument constructor or specifying a null I...

UBUNTU-CVE-2026-17183

An authenticated user with permission to create or edit alert rules ca...

cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist

cve-2026-47875 - MEDIUM - JobParameterDeserializer bypasses the trusted-type allowlist...

cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File...

cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay

cve-2026-41707 - HIGH - Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay...

cve-2026-47842 - MEDIUM - Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation

cve-2026-47842 - MEDIUM - Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext Correlation...

cve-2026-47889 - MEDIUM - Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse

cve-2026-47889 - MEDIUM - Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse...

cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages

cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages...

Security update for gitea-tea (important)

openSUSE security update: security update for gitea-tea ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21603-1 Rating: important References: bsc1234598 bsc1235367 bsc1239493 bsc1241819 bsc1251471 bsc1251663 bsc1253576 Cross-References: CVE-2024-453...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2026-55781)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55781 advisory. 17.0.20.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:17.0.20.1.1-1.1 - Update to jdk-17.0.20.1+1 GA - Add to .gitignore...

PT-2026-78928

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions prior to 2.33.4 n8n versions prior to 2.34.1 Description A stored cross-site scripting issue exists in the Form node completion page. The system only applied its sandboxing Content-Security-Policy a...