CVE-2026-21580: Improper Neutralization of Input During Web Page Generation

This Critical severity Stored XSS, PrivEsc Privilege Escalation, and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center and...

PT-2026-78242

Name of the Vulnerable Software and Affected Versions Confluence Data Center and Server versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7.19.0, 8.0.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 Description A stored Cross-Site Scripting XSS, privilege escalation, and...

GHSA-QQQ4-5773-PMW5

creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...

MINI-XH34-53RP-9J9Q

Bulletin has no description...

nginx: Multiple Vulnerabilities

Background nginx is a robust, small, and high performance HTTP and reverse proxy server. Description Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...

CVE-2021-43716

creationtimestamp| type| source ---|---|--- 2026-08-15 08:00:08+00:00| seen| Telegram/KZva-AqPLSqOM7FFaN2xmlp5RH1as8bfWVHnuu2lh7A0hs 2026-08-15 08:00:08+00:00| seen| Telegram/fgLB1C36paZjghRukCyLhva12xDXyeSFjJghnq0Trmh6Q 2026-08-16 00:00:14+00:00| published-proof-of-concept|...

GHSA-V3JC-474W-2WM6 vulnerabilities

Vulnerabilities for packages: logstash, jmeter, pinot, conductor-fips, traccar, kayenta-fips, reposilite, apicurio-registry-fips, nacos, elasticsearch, cassandra-reaper, wso2is, apache-nifi, logstash-fips, wavefront-proxy, traccar-fips, flyway, thingsboard, opensearch, kayenta,...

CVE-2026-19871

Use of Hard-coded Credentials in the human resources component in Roskus Prospero Flow CRM before 5.15.9 allows unauthenticated remote attackers to authenticate as any employee onboarded through the standard flow, knowing only their email address, because the employee save controller falls back t...

GO-2026-5709 vulnerabilities

Vulnerabilities for packages: crossplane...

CVE-2026-16713

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

CVE-2026-16713 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

EUVD-2026-58366

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

CVE-2026-16713

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

CVE-2026-16713 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

CVE-2026-59504

: Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solutions: All versions without Priwall v3...

CVE-2026-16713: Binding to an Unrestricted IP Address

IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...

ROS-20260813-73-0025

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-71807

Name of the Vulnerable Software and Affected Versions IBM Documentation Offline versions 1.0.0 through 1.4.1 Description A security misconfiguration in the documentation server allows it to bind to an unrestricted IP address, which could enable a remote attacker to obtain sensitive information...

ROS-20260813-73-0038

The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-71846

A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege means that a compromise of the insights-client po...