CVE-2026-53976

creationtimestamp| type| source ---|---|--- 2026-08-06 15:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfjee2m72l...

CVE-2026-53975

creationtimestamp| type| source ---|---|--- 2026-08-06 15:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgfjd25gq22...

CVE-2026-12713

creationtimestamp| type| source ---|---|--- 2026-08-06 15:44:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf332ylu2l...

CVE-2026-16940

creationtimestamp| type| source ---|---|--- 2026-08-06 15:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf2zlca42l...

CVE-2026-53983 Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations...

CVE-2026-53983 Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations...

CVE-2026-53983

The CVE concerns Ground Station prior to 0.6.0, exposing an unauthenticated blind SSRF via the orbital-source URL path. An unauthenticated Socket.IO client can connect on port 7000 (credentials not required, wildcard CORS) and submit a data_submission with submit-orbital-sources to store an attac...

CVE-2026-53983 Ground Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL

Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path that allows any unauthenticated Socket.IO client to cause the ground-station process to issue outbound HTTP requests to attacker-chosen destinations...

GHSA-3X6R-WXXG-53VV

creationtimestamp| type| source ---|---|--- 2026-08-06 15:31:19+00:00| seen| https://gist.github.com/alon710/164398037554120d630a453295ebf3cc...

CVE-2026-7726

creationtimestamp| type| source ---|---|--- 2026-08-06 15:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msgdharb2f2c...

CVE-2026-18427

creationtimestamp| type| source ---|---|--- 2026-08-06 14:59:17+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3msgckuh2w226 2026-08-06 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgtfyoa4h2n...

CVE-2026-12605

creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm65koi2i 2026-08-11 03:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrn426pqz2u...

CVE-2026-5134

creationtimestamp| type| source ---|---|--- 2026-08-06 14:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgbm4uoar2l...

GHSA-8V25-V8P6-QF7V

creationtimestamp| type| source ---|---|--- 2026-08-06 14:32:29+00:00| seen| https://gist.github.com/alon710/24bef11b86322cc9770e86fa941513f4...

CVE-2026-5116

creationtimestamp| type| source ---|---|--- 2026-08-06 14:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msga3ycwr326...

CVE-2026-18973

creationtimestamp| type| source ---|---|--- 2026-08-06 14:00:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msg7cjkbv426 2026-08-06 14:01:32+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117048924886717524...

CVE-2026-67434

creationtimestamp| type| source ---|---|--- 2026-08-06 14:00:28+00:00| seen| https://gist.github.com/FR-Flo/a87a156132d4ce3d4d952e21a796220a 2026-08-06 14:59:38+00:00| seen| https://gist.github.com/FR-Flo/ce0e6938e2c8aa7a093b16e80373dccf 2026-08-07 04:31:19+00:00| seen|...

GHSA-8MXV-9XHP-86H4

creationtimestamp| type| source ---|---|--- 2026-08-06 13:32:14+00:00| seen| https://gist.github.com/alon710/719fff48bd5faded3e0e79faaf3782f6...

CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...