CVE-2025-31114

creationtimestamp| type| source ---|---|--- 2026-08-11 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst2jrpkgr2u 2026-08-14 04:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mszeav5rli2f...

CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

CVE-2026-47702

creationtimestamp| type| source ---|---|--- 2026-08-11 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msszfxkjjc27...

CVE-2026-72603

creationtimestamp| type| source ---|---|--- 2026-08-11 12:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msskv342ob26 2026-08-11 12:27:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3t4elk3mg6hdu...

CVE-2026-44401

creationtimestamp| type| source ---|---|--- 2026-08-11 12:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97555 2026-08-12 00:00:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/97555 2026-08-12 08:00:04+00:00| published-proof-of-concept|...

CVE-2026-72599

creationtimestamp| type| source ---|---|--- 2026-08-11 11:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msskd7vp3i2q 2026-08-11 12:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fprkkregxzrlx...

CVE-2026-61478

creationtimestamp| type| source ---|---|--- 2026-08-11 11:15:43+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mssifqhusk25...

CVE-2026-72537

Authentik Authentik (through version 2026.5.6) contains a privilege escalation vulnerability where an attacker with a source-scoped SCIM provisioning token can take over existing local user accounts, including the superuser. The SCIM user ingest function accepts pre-existing local accounts by use...

CVE-2026-72534

CVE-2026-72534 describes a privilege escalation in Authentik (Authentik Security authentik) up to version 2026.5.6. A source-scoped SCIM provisioning token can elevate to superuser by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function ad...

CVE-2026-73162

creationtimestamp| type| source ---|---|--- 2026-08-11 11:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4pqw756yu4pri...

CVE-2026-19518

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation...

CVE-2026-19517

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

CVE-2026-19518

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation...

CVE-2026-19518

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation...

CVE-2026-19518

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation...

CVE-2026-19517

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-19517

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

CVE-2026-19517

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

CVE-2026-19517

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

EUVD-2026-55930

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...