CVE-2026-78560

CVE-2026-78560 affects the Okta Access Gateway , specifically its optional pass-through authentication source , which accepts user identity from a client-supplied HTTP header without cryptographic validation. When this source is enabled without an upstream reverse proxy or firewall that sanitizes...

CVE-2026-86674

creationtimestamp| type| source ---|---|--- 2026-09-08 19:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cnumft23wgo3e...

GHSA-97QJ-X29F-37W7

creationtimestamp| type| source ---|---|--- 2026-09-08 18:21:13+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3muznaeuf6c26...

CVE-2025-67066

creationtimestamp| type| source ---|---|--- 2026-09-08 17:08:24+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3muzj664ank2c...

CVE-2026-78132

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 12:45:16+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-in-strongswan 2026-09-16 00:01:43+00:00| seen|...

opencti v7.260907.0

Note: THREAD 2026 — 15 October, Paris. Our community conference for threat intelligence and cyber defense practitioners. Talks, labs, workshops, and an evening social. Join us → Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence...

Shuffle v2.3.0-rc1

Shuffle Automation Deploy On Shuffle is an open source automation platform, built for and by the security professionals. Security operations is complex, but it doesn't have to be. Built to work well with MSSP's and other service providers in mind. Get training Key Features — Community & Support —...

CVE-2026-62647

creationtimestamp| type| source ---|---|--- 2026-09-08 10:07:33+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyrnnlyue2t 2026-09-08 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muzkewgsvo25 2026-09-15 16:16:08+00:00| seen|...

CVE-2026-62645

creationtimestamp| type| source ---|---|--- 2026-09-08 10:07:17+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muyrn57bab2n 2026-09-08 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117234953398567351 2026-09-08 10:30:27+00:00| seen|...

CVE-2026-77132

creationtimestamp| type| source ---|---|--- 2026-09-08 09:55:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ea6eeuqonpoxa 2026-09-08 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4ydwo2x2u...

CVE-2026-85400

creationtimestamp| type| source ---|---|--- 2026-09-08 09:53:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2d3ifyokbdyte 2026-09-08 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4ydwo2x2u...

CVE-2019-1010022

creationtimestamp| type| source ---|---|--- 2026-09-08 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muymr7evht2t...

BIT-GRAFANA-2026-19475 SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

Security update for php-composer2

This update for php-composer2 fixes the following issue: CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...

SUSE-SU-2026:4059-1 Security update for php-composer2

This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...

GHSA-P498-V437-472G

creationtimestamp| type| source ---|---|--- 2026-09-08 06:19:12+00:00| seen| https://gist.github.com/citadelculture/59ba3685c4ac125fd240e01b8fcee60a 2026-09-08 06:19:13+00:00| seen| https://gist.github.com/citadelculture/5ad0a838a902eb1cbf2ff2ff33472c61 2026-09-08 06:19:13+00:00| seen|...

CVE-2026-86517

creationtimestamp| type| source ---|---|--- 2026-09-08 05:41:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/f24ttj4go5rcq...

Exploit for CVE-2026-75650

CVE-2026-75650 / VULN-39341 Docker validation lab This standa...

CLEANSTART-2026-DJ05320 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

CLEANSTART-2026-UV76679 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...