CVE-2026-89252

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in addLiveLink.php when updating LiveLinks. The component fails to verify ownership, allowing any authenticated canStream user to overwrite another user's LiveLink HLS source and metadata...

EUVD-2026-76064

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

CVE-2026-87859

creationtimestamp| type| source ---|---|--- 2026-09-11 09:21:21+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mvaahpudgk2t 2026-09-11 11:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gk3b4eixszvfv 2026-09-29 02:31:24+00:00| seen|...

appsandbox v0.1.5

App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...

CVE-2026-88046

A flaw was found in rclone, a command-line program for syncing files. This vulnerability allows an attacker to bypass configured directory restrictions by including parent-directory segments e.g., '..' in source object names. When a specially crafted source object is uploaded or copied, it can...

CVE-2026-64837

creationtimestamp| type| source ---|---|--- 2026-09-11 05:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7tkbexcy2n...

CVE-2026-84388

creationtimestamp| type| source ---|---|--- 2026-09-11 05:02:12+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mv7ryeh2zy2m 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r 2026-09-16 08:45:07+00:00| seen|...

CVE-2026-89092

creationtimestamp| type| source ---|---|--- 2026-09-11 04:01:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/em52ptcnayfpv 2026-10-07 04:42:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mxb4zpkp3423 2026-10-08 07:23:22+00:00| seen|...

CVE-2026-89145

creationtimestamp| type| source ---|---|--- 2026-09-11 03:50:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5chi4qez6ikrd...

CVE-2026-16338

creationtimestamp| type| source ---|---|--- 2026-09-11 03:29:04+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7mrtrurl2y 2026-09-14 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvj3pffm7d2t 2026-09-14 22:08:10+00:00| seen|...

authentik version/2026.8.2

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

EUVD-2026-75871

A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that triggers the parser to pass a NULL pointer to nonnull string handling functions, resulting in undefined behavior and application crash...

CVE-2026-81906

creationtimestamp| type| source ---|---|--- 2026-09-11 00:10:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bf25zvsv4hp4y...

CVE-2026-16174

creationtimestamp| type| source ---|---|--- 2026-09-11 00:08:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6xwrwmoocjmm3...

ROS-20260911-73-0219

The vulnerability of Google Chrome’s Password Manager component is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

CVE-2026-89252: Authorization Bypass Through User-Controlled Key

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

PT-2026-89855

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's LiveLink HLS source and metadata by supplying an existing...

ROS-20260911-73-0242

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to manipulate data integrity through a specially crafted HTML page...

ROS-20260911-73-0221

The vulnerability of Google Chrome and Microsoft Edge is related to a data source confirmation error during the processing of DOM objects. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

ROS-20260911-73-0197

The vulnerability in the Google Chrome web browser is related to a lack of mechanisms for verifying the source of the page. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...