CVE-2026-5523

creationtimestamp| type| source ---|---|--- 2026-07-09 08:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq76hzxyyb26 2026-07-09 11:49:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7kvszdyh27 2026-07-10 00:00:23+00:00| seen|...

CVE-2026-12270

creationtimestamp| type| source ---|---|--- 2026-07-09 08:04:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq76d5lxbl2w 2026-07-09 17:40:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6izod342s...

CVE-2026-11869

creationtimestamp| type| source ---|---|--- 2026-07-09 08:01:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq766nzxj42g...

CVE-2026-11571

creationtimestamp| type| source ---|---|--- 2026-07-09 07:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq762jnkum25 2026-07-09 17:47:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6wauter26...

MAL-2026-7028 Malicious code in calvuepro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de2057a076c31ca107db2c3e8d330a7b4aa2d8d67896cecd6c7ebef21d07731 Package ships a 5.7MB prebuilt darwin-arm64 Mach-O at vendor/clavuepro-darwin-arm64 with no source tree, no hash/signature verification, and no...

CVE-2026-22927

creationtimestamp| type| source ---|---|--- 2026-07-09 05:50:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116888450705839903 2026-08-05 08:27:26+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3msd47cgijk2y...

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead. That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls "Friendly Fire. " It works against Anthropic's Claude Cod...

CVE-2025-4798

creationtimestamp| type| source ---|---|--- 2026-07-09 04:00:07+00:00| seen| https://t.me/brutsecurity/2000 2026-07-10 00:00:31+00:00| seen| https://t.me/brutsecurity/2000 2026-07-11 12:00:03+00:00| seen| https://t.me/brutsecurity/2000 2026-07-12 00:00:49+00:00| seen| https://t.me/brutsecurity/20...

CVE-2026-15138

creationtimestamp| type| source ---|---|--- 2026-07-09 03:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6qj5hmgs2w...

CVE-2026-15137

creationtimestamp| type| source ---|---|--- 2026-07-09 03:52:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6qa72g7o2k...

CVE-2026-51538

creationtimestamp| type| source ---|---|--- 2026-07-09 03:40:11+00:00| seen| https://gist.github.com/MrAlaskan/8156ca3acd6754a9f66efede0a1351f2 2026-07-14 14:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh7ocfu62v...

CVE-2026-51537

creationtimestamp| type| source ---|---|--- 2026-07-09 03:36:14+00:00| seen| https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e 2026-07-14 14:46:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh467mk22t...

GHSA-6FX6-WRPF-CPGV

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1014 2026-07-10 00:00:36+00:00| seen| https://t.me/brutsecurity/1014 2026-07-11 17:00:04+00:00| seen| https://t.me/brutsecurity/1014 2026-07-12 00:00:45+00:00| seen| https://t.me/brutsecurity/10...

GHSA-9298-4CF8-G4WJ

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1052 2026-07-10 00:00:35+00:00| seen| https://t.me/brutsecurity/1052 2026-07-11 16:00:02+00:00| published-proof-of-concept| https://t.me/brutsecurity/1052 2026-07-12 00:00:45+00:00|...

GHSA-GV7V-RGG6-548H

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:12+00:00| seen| https://t.me/brutsecurity/1117 2026-07-10 00:00:35+00:00| seen| https://t.me/brutsecurity/1117 2026-07-11 16:00:02+00:00| published-proof-of-concept| https://t.me/brutsecurity/1117 2026-07-12 00:00:45+00:00|...

GHSA-2R7G-8HPC-RPQ9

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:07+00:00| seen| https://t.me/brutsecurity/2046 2026-07-10 00:00:31+00:00| seen| https://t.me/brutsecurity/2046 2026-07-11 12:00:03+00:00| published-proof-of-concept| https://t.me/brutsecurity/2046 2026-07-12 00:00:50+00:00|...

GHSA-QCJ2-99CG-MPPF

creationtimestamp| type| source ---|---|--- 2026-07-09 03:00:06+00:00| seen| https://t.me/brutsecurity/2141 2026-07-10 00:00:14+00:00| seen| https://t.me/brutsecurity/2141 2026-07-11 12:00:04+00:00| published-proof-of-concept| https://t.me/brutsecurity/2141 2026-07-12 00:00:50+00:00|...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.4, commercial-spilo, opentofu-fips, azure-aad-pod-identity-mic, cluster-api-fips, langfuse, tekton-pipelines-fips, commercial-grafana, knative-serving-fips, k8s-device-plugin, kube-state-metrics, cloud-sql-proxy, keda-fips,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes, cert-manager-csi-driver-fips, crossplane-provider-azure-authorization, crossplane-provider-aws-docdb, crossplane-provider-aws-mediapackage, aws-otel-collector, yunikorn-k8shim, falcosidekick-fips,...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: helm, cerbos, src, dask-gateway, buildkitd, kubernetes-dashboard, falco-no-driver, kine, cilium-cli, melange, k8s-device-plugin, mattermost, traefik, loki, rekor, argo-cd, redka, caddy, docker, k3s, buildah, kyverno, apko, grafana-operator, nerdctl, pinact,...