CVE-2026-10577

creationtimestamp| type| source ---|---|--- 2026-07-14 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116918571999241633 2026-07-14 13:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqmcuxoaqz2r 2026-07-14 13:46:05+00:00| seen|...

CVE-2026-59083

creationtimestamp| type| source ---|---|--- 2026-07-14 09:50:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlwlywipr2y 2026-07-14 11:39:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm4p7oagg2k 2026-07-14 12:42:05+00:00| seen|...

CVE-2026-57898

creationtimestamp| type| source ---|---|--- 2026-07-14 08:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlsk4d6bi2g 2026-07-14 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqlsnns7tw2b 2026-07-14 09:00:32+00:00| seen|...

CVE-2026-12583

creationtimestamp| type| source ---|---|--- 2026-07-14 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116917156404370712 2026-07-14 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqlora4oen23 2026-07-14 09:25:26+00:00| seen|...

VulnCheck KEV: CVE-2026-9282

The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-48364

creationtimestamp| type| source ---|---|--- 2026-07-13 22:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkowz65vj2m 2026-07-13 22:05:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkp75gusk2l 2026-07-19 17:37:06+00:00| seen|...

CVE-2026-48363

creationtimestamp| type| source ---|---|--- 2026-07-13 21:54:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkokrtfoi2t 2026-07-13 22:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqkoxgqrax2a 2026-07-19 18:07:06+00:00| seen|...

CVE-2026-62327

creationtimestamp| type| source ---|---|--- 2026-07-13 21:52:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkogyu3uw2v 2026-07-13 23:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkslpine22x 2026-07-14 00:00:38+00:00| seen|...

CVE-2026-59801

creationtimestamp| type| source ---|---|--- 2026-07-13 21:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkogxhj652r 2026-07-13 23:02:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkseylc7w2t 2026-07-14 06:00:27+00:00| seen|...

CVE-2026-61462

creationtimestamp| type| source ---|---|--- 2026-07-13 18:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqke5w7ni22d 2026-07-13 19:02:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkexp5qxn2t 2026-07-14 04:01:23+00:00| seen|...

CVE-2026-58065

creationtimestamp| type| source ---|---|--- 2026-07-13 17:48:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkatd3dmc2x 2026-07-13 18:15:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkcd6u55r2f 2026-07-13 22:10:25+00:00| seen|...

CVE-2026-13221

creationtimestamp| type| source ---|---|--- 2026-07-13 17:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkakeohr427 2026-07-13 18:30:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqkd626fd62t 2026-07-14 14:44:05+00:00| seen|...

PYSEC-2026-2575 LangGraph SDK has unsafe URL path construction

Summary langgraph-sdk constructs HTTP request paths for resource operations by interpolating caller-supplied identifier values into URL templates. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to addre...

PYSEC-2026-3435 python-zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

Impact AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query in self.deferredaddr and armed a per-addr timer in self.timersaddr that flushed the reassembled query within 500 ms RFC 6762 §18.5. Neither the per-addr list nor the number of distinct addr keys was capped, and...

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

Unauthorized File and Knowledge Base Content Access via RAG Vector Search Affected ComponentRAG source resolution in chat completion pipeline:- backend/openwebui/retrieval/utils.py lines 963-965, 1063-1068, 1126-1131 in getsourcesfromitems Affected VersionsCurrent main branch commit 6fdd19bf1 and...

PraisonAI Has Arbitrary File Write (Zip Slip) in Templates Extraction

The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall without verifying if the files within the archive resolve...

dbt-common's commonprefix() doesn't protect against path traversal

ImpactWhat kind of vulnerability is it? Who is impacted?A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...

PYSEC-2026-2440 dbt-common's commonprefix() doesn't protect against path traversal

Impact What kind of vulnerability is it? Who is impacted? A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...

CVE-2026-61498

creationtimestamp| type| source ---|---|--- 2026-07-13 14:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqjuqh3mjq2b 2026-07-13 14:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjwr43qom2q 2026-07-13 17:58:09+00:00| seen|...

CERTFR-2026-ACT-030

creationtimestamp| type| source ---|---|--- 2026-07-13 13:36:35+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mqjsqx45tu2v 2026-07-13 13:36:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116912933713310926 2026-07-13 14:00:27+00:00| seen|...