CVE-2026-18933

creationtimestamp| type| source ---|---|--- 2026-08-05 14:33:54+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msdqom5zgp2c 2026-08-05 17:01:06+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043971069363515 2026-08-06 11:39:41+00:00| seen|...

postcss: PostCSS: Information disclosure via crafted sourceMappingURL

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration the 'from' parameter is not set. This can cause the application to read and expose unintended source-map files, potentially revealing...

CVE-2026-71259

ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py: if parsed.scheme and parsed.netloc or parsed.scheme == "file": return parsed.geturl. Because and binds tighter than or, any file: URI passes validation regardless of netloc. Th...

CVE-2026-71259

ESPHome (up to 2026.7.0-dev) is affected by an operator-precedence bug in the cv.url() validator within esphome/config_validation.py. The condition if parsed.scheme and parsed.netloc or parsed.scheme == "file" incorrectly permits file:// URIs to bypass validation, affecting the url: field of the ...

CVE-2026-71259 ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution

ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/configvalidation.py: if parsed.scheme and parsed.netloc or parsed.scheme == "file": return parsed.geturl. Because and binds tighter than or, any file: URI passes validation regardless of netloc. Th...

CVE-2026-64576

creationtimestamp| type| source ---|---|--- 2026-08-05 12:15:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64576...

CVE-2026-64575

creationtimestamp| type| source ---|---|--- 2026-08-05 12:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64575...

CVE-2026-71248

creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn3sdny23 2026-08-05 12:37:13+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3msdk5vqh5r2y...

CVE-2026-71238

creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn2laot2o...

CVE-2026-15452

creationtimestamp| type| source ---|---|--- 2026-08-05 10:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hpglrn2nlmpgf...

CVE-2026-7444

creationtimestamp| type| source ---|---|--- 2026-08-05 10:10:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g2qu2owwxt7mn 2026-08-06 13:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msg4qorpbj2g...

CVE-2026-70589

creationtimestamp| type| source ---|---|--- 2026-08-05 09:31:26+00:00| seen| https://gist.github.com/alon710/8a67496a2aeb5dc5719baf5a0f706ea5...

CVE-2026-71207

creationtimestamp| type| source ---|---|--- 2026-08-05 09:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msd7b22cji2a...

CVE-2026-18901

creationtimestamp| type| source ---|---|--- 2026-08-05 08:53:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msd5oiwmrl2g...

CVE-2026-18900

creationtimestamp| type| source ---|---|--- 2026-08-05 08:53:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msd5nfsevf2u...

CVE-2026-49004

creationtimestamp| type| source ---|---|--- 2026-08-05 08:04:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msd2vkjz6t2u...

CVE-2026-17532

creationtimestamp| type| source ---|---|--- 2026-08-05 07:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96706 2026-08-05 10:00:05+00:00| published-proof-of-concept| Telegram/Nl8mRngxmNEif6AAKsIvUzhnsF325qswadlkhxgWlmwB0s 2026-08-05 21:00:04+00:00| seen|...

EUVD-2026-53199

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height. When an offset exceeds the corresponding source dimension, width2 - offsetx or the height...

CVE-2026-5062

creationtimestamp| type| source ---|---|--- 2026-08-05 06:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4wo5wjdsnkavp 2026-08-06 07:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msfimwvxgu23...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...