CVE-2026-32227

creationtimestamp| type| source ---|---|--- 2026-08-10 10:57:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5f7k6npj4o7m5 2026-08-12 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvkyne5242g...

CVE-2026-40920

creationtimestamp| type| source ---|---|--- 2026-08-10 10:51:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/75pdqosvnbj3w 2026-08-12 16:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msvlkkidh72v...

CVE-2026-66486

creationtimestamp| type| source ---|---|--- 2026-08-10 10:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/edsgdcj66b3ei 2026-08-10 12:15:14+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-66484 2026-08-15 00:10:28+00:00| seen|...

CVE-2026-72574 picocms Pico - Host Header Injection Enables Script Source Hijacking

A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When baseurl is unset the default, Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated...

CVE-2026-71392

creationtimestamp| type| source ---|---|--- 2026-08-10 10:39:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/enijmvsyiaud2 2026-08-10 12:45:15+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-71391...

CVE-2026-44102

creationtimestamp| type| source ---|---|--- 2026-08-10 10:30:06+00:00| seen| https://bsky.app/profile/cvedatabase.bsky.social/post/3mspvfaxfz72c...

CVE-2026-66688

creationtimestamp| type| source ---|---|--- 2026-08-10 10:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspumcjnfd2w 2026-08-11 06:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrxo23v5r2w...

CVE-2026-61959

creationtimestamp| type| source ---|---|--- 2026-08-10 09:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msprazlbii2z 2026-08-11 05:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrucszi4l2f...

CVE-2026-13133

creationtimestamp| type| source ---|---|--- 2026-08-10 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN40467227...

CVE-2026-18786

creationtimestamp| type| source ---|---|--- 2026-08-10 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117070038772860162 2026-08-10 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msple3gjbx2n...

CVE-2026-66703

creationtimestamp| type| source ---|---|--- 2026-08-10 07:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspkkg3zci2l 2026-08-11 03:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrnm6yfsw2f...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, there was a buffer overflow vulnerability in freerdpbitmapdecompressplanar when SrcSize was 0. The function dereferences srcp which points to pSrcData without first verifying that SrcSize is greater than or...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fixed an issue where uninitialized saddr values were used in xfrm6getsaddr. The xfrm6getsaddr function does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: macvlan: fixed a possible Use-after-Allocation UAF in macvlanforwardsource. Added RCU protection for the vlan field in struct macvlansourceentry. Whenever macvlanhashdelsource is called, we must clear the entry-vlan pointer befor...

CVE-2026-17519

creationtimestamp| type| source ---|---|--- 2026-08-10 06:39:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gk3ltjbtvtoh6...

CVE-2026-65554

creationtimestamp| type| source ---|---|--- 2026-08-10 06:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msph75q7g62f 2026-08-11 02:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrkavjki52l...

CVE-2026-17540

The CVE describes a vulnerability in the WordPress File Manager plugin prior to version 6.9.1. The issue is improper authorization of file management commands, allowing any authenticated user (e.g., a subscriber) to read and delete arbitrary files under the WordPress installation directory. This ...

CVE-2026-17540 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...

CVE-2026-19384

creationtimestamp| type| source ---|---|--- 2026-08-10 04:47:25+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mspcaigjkv2f...

CVE-2026-65549

creationtimestamp| type| source ---|---|--- 2026-08-10 04:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mspaiknyfl2g 2026-08-11 00:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msrdkcmvcv2u...