PT-2026-49704

A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in...

CVE-2026-12087

The perl-Socket module (versions before 2.041 ) contains an out-of-bounds heap read vulnerability in Socket.xs. The root cause is in the pack_ip_mreq_source() function, which incorrectly validates the length of the source argument by testing the byte length of the preceding multiaddr argument. Co...

CVE-2026-8385

creationtimestamp| type| source ---|---|--- 2026-06-14 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mob65io5xk2i 2026-06-15 12:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modapctgs22b 2026-07-23 06:00:06+00:00| confirmed|...

CVE-2026-8895

creationtimestamp| type| source ---|---|--- 2026-06-09 07:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntnmwxq7f2j 2026-06-10 11:16:54+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwlk2bnvx2m...

GHSA-2VQW-3MP8-CGMX Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

Impact Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used. PROXY protocol v1 is a connection-level protocol. Support was added to Puma in v5.5.0. A proxy sends one PROXY header at the beginning of a TCP connection, befo...

CVE-2026-11485

creationtimestamp| type| source ---|---|--- 2026-06-08 07:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnr6vtkaip2s...

CVE-2026-11488

creationtimestamp| type| source ---|---|--- 2026-06-08 07:42:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnr6mv2u2z2j...

CVE-2026-11476

creationtimestamp| type| source ---|---|--- 2026-06-08 05:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnqxjlapfc2f...

CVE-2025-12656

creationtimestamp| type| source ---|---|--- 2026-06-06 01:08:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlhpurtgj2p 2026-06-13 13:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo6dmpzxr42r...

CVE-2026-5411

creationtimestamp| type| source ---|---|--- 2026-06-05 20:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwitip3v2b 2026-06-06 00:00:14+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnldv57rk32f 2026-06-14 23:16:10+00:00| seen|...

CVE-2026-46595

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the...

CVE-2026-11362

creationtimestamp| type| source ---|---|--- 2026-06-05 17:08:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkmuinxhj25 2026-06-06 03:47:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnlqkntccr25...

CVE-2026-5589

creationtimestamp| type| source ---|---|--- 2026-06-04 22:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnipayzrfm24...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the...

CVE-2026-10221

creationtimestamp| type| source ---|---|--- 2026-06-01 07:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn7kbrzyzq2b...

CVE-2026-45668

creationtimestamp| type| source ---|---|--- 2026-05-29 20:58:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzgibblfi2g...

CVE-2025-41279

creationtimestamp| type| source ---|---|--- 2026-05-29 13:20:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmymuebmrv27...

CVE-2026-48808

creationtimestamp| type| source ---|---|--- 2026-05-27 13:22:18+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtm25n47s2y 2026-07-15 00:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnit2btng2x 2026-07-27 09:05:03+00:00| seen|...

Incorrect Authorization

Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of permissions in the VerifiedPublicKeyCallback process. An attacker can bypass source-address validation by passing a callback type...