CVE-2026-54887: Use of Default Cryptographic Key

Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtlsserverconnection:initialhello/3 initializes previouscookiesecret to the empty...

CVE-2026-14048

creationtimestamp| type| source ---|---|--- 2026-07-01 21:25:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmheaim4e22 2026-07-02 07:50:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:23:31+00:00| seen|...

CVE-2026-14007

creationtimestamp| type| source ---|---|--- 2026-07-01 21:16:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmgufs3bm2o 2026-07-02 04:23:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6qoqfhk2o 2026-07-02 07:49:07+00:00| seen|...

CVE-2026-14198

creationtimestamp| type| source ---|---|--- 2026-07-01 11:34:43+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mplgdvyl4c2z 2026-07-01 12:40:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpljyqhw5522 2026-07-01 12:52:43+00:00| seen|...

Malicious code in @businessapp-microsites/apis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70ab5da6865ec94b15097fa84836ab41f39b65a5277974b407c545d8d424c7f @businessapp-microsites/[email protected] is a dependency-confusion squat against the private scope @businessapp-microsites, published with an implausibl...

CVE-2026-13595

creationtimestamp| type| source ---|---|--- 2026-06-29 11:35:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfhgeqpc2t 2026-07-04 06:40:02+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpshbrrqn724 2026-07-04 06:40:15+00:00| seen|...

SUSE CVE-2026-53006

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since skb-head can change. Remove these temporary variables: - We only access &ipv6hdrskb-saddr and &ipv6hdrskb-daddr when netdbgratelimit...

EUVD-2026-31398

golang.org/x/crypto/ssh: Invoking VerifiedPublicKeyCallback permissions skip enforcement...

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

GHSA-X527-X647-Q7GG golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the RealIP process. An attacker can cause misidentification of the request source IP by manipulating the X-Forwarded-For header, potentially bypassing access controls or falsifying request logs. Remediation...

chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution

Summary The vulnerability allows the Request.RemoteAddr to be spoofed when determining the request source IP via the X-Forwarded-For header. This could result in misidentification of the request source and potentially compromise access control and logging integrity. Details Currently, the RealIP...

CVE-2026-53262

creationtimestamp| type| source ---|---|--- 2026-06-25 10:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp46bjq5hv2c 2026-09-15 12:46:43+00:00| seen| https://vulnerability.circl.lu/bundle/0993320a-8372-47e9-a37e-158a64a4e0dc 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-46752

creationtimestamp| type| source ---|---|--- 2026-06-25 04:42:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3mk3hdhq2w 2026-06-25 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp4eylvcab2b 2026-06-25 12:00:39+00:00| seen|...

CVE-2026-53006

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since skb-head can change. Remove these temporary variables: - We only access &ipv6hdrskb-saddr and &ipv6hdrskb-daddr when netdbgratelimit...

CVE-2026-53006 ipv6: fix possible UAF in icmpv6_rcv()

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since skb-head can change. Remove these temporary variables: - We only access &ipv6hdrskb-saddr and &ipv6hdrskb-daddr when netdbgratelimit...

CVE-2026-56815

creationtimestamp| type| source ---|---|--- 2026-06-23 16:31:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxt6vyz4g2t 2026-06-23 21:31:57+00:00| seen| https://bsky.app/profile/payloadforge.io/post/3moydyj6t6s2m 2026-06-24 11:39:31+00:00| seen|...

CVE-2026-48882

creationtimestamp| type| source ---|---|--- 2026-06-22 13:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mouxszodmm2q...

CVE-2026-48772: Use of Less Trusted Source

ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. In versions 2.0.0 through 3.0.8, the ProxySQL MySQL frontend accepts the PROXY UNKNOWN \r\n PP1 frame as a well-formed PROXY protocol header. The HAProxy PROXY protocol v1 specification says that when the protocol token is UNKNOW...

CVE-2025-11694 Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities

A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in...