cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages

cve-2026-59278 - MEDIUM - In Spring for Apache Kafka, SSRF via DNS resolution triggered by untrusted java.net types in header mapper default trusted packages...

cve-2026-59272 - MEDIUM - Log4j2 AmqpAppender disables TLS hostname verification by default

cve-2026-59272 - MEDIUM - Log4j2 AmqpAppender disables TLS hostname verification by default...

cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File

cve-2026-47881 - MEDIUM - Denial of Service in Spring Batch FlatFileItemReader via Malformed Input File...

CVE-2026-76929

Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76884

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

MINI-MH3H-3VPQ-MC63

Bulletin has no description...

MINI-HX4G-49GM-5X88

Bulletin has no description...

MINI-GCX2-Q9MJ-PP6Q

Bulletin has no description...

MINI-4J79-37PV-PM65

Bulletin has no description...

MINI-5MVX-93C4-FJ2J

Bulletin has no description...

CVE-2026-71050

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71042

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu7onbflmq2u...

41 deceptive download sites show a real link, then send you somewhere else

We identified a network of 41 websites impersonating popular games and Windows software, all designed to push visitors towards the same Download Studio installer. The sites advertise everything from Counter-Strike, Half-Life, Fallout, Roblox, PUBG, and The Witcher to VLC, 7-Zip, Paint.NET, VMware...

EUVD-2026-62669

A flaw was found in volsync-addon-controller. This vulnerability allows an attacker to inject malicious YAML Yet Another Markup Language code into the OpenShift Lifecycle Manager OLM Subscription resource. This is due to improper escaping of annotation values when they are rendered into YAML...

CVE-2026-70903

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 15:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu36huwavn2y...

CVE-2026-70928

creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:58+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2ioj3vbb2u...

CVE-2026-70721

creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60889

creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:46+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-61118

creationtimestamp| type| source ---|---|--- 2026-08-19 17:19:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpno5zsu52u...