Security Bulletin: Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI (CVE-2026-3157)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to information disclosure in mailbox UI. Vulnerability Details CVEID:CVE-2026-3157 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...

CVE-2026-69519

creationtimestamp| type| source ---|---|--- 2026-08-27 18:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu3ijqlmnk2h...

CVE-2026-81819

creationtimestamp| type| source ---|---|--- 2026-08-27 18:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2qhkptqxzcrll...

CVE-2026-81827

creationtimestamp| type| source ---|---|--- 2026-08-27 18:15:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2aycrsxvjyqle...

“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend

Welcome to this week's edition of the Threat Source newsletter. Hello, everyone. Long time reader, first time writer here at the Threat Source newsletter! I wanted to start out by introducing myself. My colleague and friend Mick Baccio set the bar pretty high last week, so I was planning to tell...

CVE-2026-81335

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

SUSE CVE-2026-62326

Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a user with the built-in "Edit source" role can store a malicious regular expression in a source string's flags that is executed without any timeout, allowing them to stall...

CVE-2026-50787

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ 2026-08-28 00:00:35+00:00| published-proof-of-concept| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ...

OpenClaw went viral. Meet the maintainers building and securing it.

What began as a personal experiment quickly became a global open source project with extraordinary momentum. OpenClaw is a personal AI assistant that runs on users' devices and connects with the messaging channels they already use. Started by Peter Steinberger as a weekend project in November 202...

CVE-2026-27797

creationtimestamp| type| source ---|---|--- 2026-08-27 15:00:12+00:00| seen| https://t.me/cve0day/276 2026-08-28 00:00:41+00:00| seen| https://t.me/cve0day/276 2026-08-29 00:00:30+00:00| published-proof-of-concept| https://t.me/cve0day/276...

CVE-2026-27579

creationtimestamp| type| source ---|---|--- 2026-08-27 15:00:12+00:00| seen| https://t.me/cve0day/257 2026-08-28 00:00:41+00:00| seen| https://t.me/cve0day/257 2026-08-29 00:00:30+00:00| published-proof-of-concept| https://t.me/cve0day/257...

EUVD-2026-67032

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

CVE-2026-81335 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

CVE-2026-81335 Baserow before 2.3.1 Unauthenticated Data Disclosure via Discarded Permission Check on Builder Data Sources

Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...

CVE-2026-81676

creationtimestamp| type| source ---|---|--- 2026-08-27 14:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jqohkgsvhvttq...

CVE-2026-81753

creationtimestamp| type| source ---|---|--- 2026-08-27 14:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7sc7a3hgymhag...

CVE-2026-81814

creationtimestamp| type| source ---|---|--- 2026-08-27 14:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/absbmm7v5yzuz...

CVE-2026-81662

Affected versions of Flowintel improperly trust configuration keys supplied to the alerts settings update endpoint. While configuration values were normalized to Python literals, the corresponding keys were used directly when constructing and replacing lines in conf/configmodule.py. The vulnerabl...

CVE-2026-32479

creationtimestamp| type| source ---|---|--- 2026-08-27 12:07:13+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu2sqlkaaa2m 2026-08-28 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4mzd3fc72e...

CVE-2021-1480

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:10+00:00| seen| Telegram/3xgIFenv1edoPacx2wzYue6QEd1BAY1Qzt7qv1fx21mAco 2026-08-28 00:00:53+00:00| seen| Telegram/3xgIFenv1edoPacx2wzYue6QEd1BAY1Qzt7qv1fx21mAco 2026-08-29 00:00:16+00:00| published-proof-of-concept|...