65 matches found
CVE-2026-8985
creationtimestamp| type| source ---|---|--- 2026-07-22 02:01:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7a3gina72s 2026-07-22 17:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratv7bbrw2e...
CVE-2026-15997
creationtimestamp| type| source ---|---|--- 2026-07-16 23:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgakxguz2c...
CVE-2026-13722
creationtimestamp| type| source ---|---|--- 2026-07-03 02:21:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppidyy5tr23 2026-07-03 18:58:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra34qeel2m...
CVE-2026-24251
creationtimestamp| type| source ---|---|--- 2026-07-01 16:50:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplxzi7i4w2h 2026-07-02 04:27:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn6xbywkd2t...
CVE-2026-46858
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-29 07:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpfwhmn6ge2m...
CVE-2026-46891
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8...
GHSA-QCMW-6RM2-5X78 TYPO3 CMS has Broken Access Control in its DataHandler
Problem Backend users were able to move records to a different page without having edit permissions on the source page. Solution Update to TYPO3 versions 13.4.31 LTS, 14.3.3 LTS that fix the problem described. Credits TYPO3 CMS thanks Hyunseo Shin for reporting this issue, and TYPO3 security team...
TYPO3 CMS has Broken Access Control in its DataHandler
Problem Backend users were able to move records to a different page without having edit permissions on the source page. Solution Update to TYPO3 versions 13.4.31 LTS, 14.3.3 LTS that fix the problem described. Credits TYPO3 CMS thanks Hyunseo Shin for reporting this issue, and TYPO3 security team...
CVE-2026-53740
creationtimestamp| type| source ---|---|--- 2026-06-10 23:17:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxtu746tt23...
CVE-2026-53439
creationtimestamp| type| source ---|---|--- 2026-06-10 15:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwyduf4sh2r 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...
CVE-2026-47350
Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.31 and 14.0.0-14.3.3...
CVE-2026-47350
Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.30 and 14.0.0-14.3.2...
CVE-2026-47350 TYPO3 CMS - Broken Access Control in DataHandler
Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.31 and 14.0.0-14.3.3...
CVE-2026-47350
Technical details about CVE-2026-47350 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-47350 TYPO3 CMS - Broken Access Control in DataHandler
Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.30 and 14.0.0-14.3.2...
CVE-2026-47350 TYPO3 CMS - Broken Access Control in DataHandler
Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.30 and 14.0.0-14.3.2...
PT-2026-47743
Name of the Vulnerable Software and Affected Versions TYPO3 CMS versions 13.0.0 through 13.4.31 TYPO3 CMS versions 14.0.0 through 14.3.3 Description Backend users can move records to a different page even if they lack the necessary edit permissions on the source page. Recommendations Update TYPO3...
CVE-2026-10544
creationtimestamp| type| source ---|---|--- 2026-06-08 20:42:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnsk4qi4ed2p...
CVE-2026-11065
creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-09 18:00:00+00:00| seen|...
CVE-2026-44200 Wagtail: Improper permission handling when copying pages
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user with limited access to pages could copy a page they don't have access to to an area of the site they do. Once coped, they'd be able to view its contents, and potentially publish it...