CVE-2026-49046

creationtimestamp| type| source ---|---|--- 2026-05-27 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyalfzif2e 2026-05-27 17:16:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmtz3fj3rtw2...

Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

GitHub Security Advisory Draft — GM-374 Summary Multiple locations in Pimcore v11 call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, enabling object injection if an attacker can control the serialized data source. Severity CVSS 3.1: 8...

GHSA-36FC-7WJG-MFVJ Pimcore has Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

GitHub Security Advisory Draft — GM-374 Summary Multiple locations in Pimcore v11 call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, enabling object injection if an attacker can control the serialized data source. Severity CVSS 3.1: 8...

CVE-2026-8175

creationtimestamp| type| source ---|---|--- 2026-05-27 15:01:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrm3smoa2w 2026-05-27 15:59:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtutxmoug2i 2026-06-05 20:07:07+00:00| seen|...

CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

DEBIAN-CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

UBUNTU-CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

CVE-2026-23679

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

CVE-2026-23679 libusb < 1.0.30 NULL Pointer Dereference in parse_interface()

libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface claims bNumEndpoints greater than zero but is followed by a class-specific descriptor whose bLength...

CVE-2026-42735

creationtimestamp| type| source ---|---|--- 2026-05-27 12:48:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtk5bbom62i 2026-05-27 14:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmto7jgoyz2t...

CVE-2026-7080

creationtimestamp| type| source ---|---|--- 2026-05-27 12:37:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mmtjjdsmln2l 2026-05-27 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmtjjd47sb25...

CVE-2026-42760

creationtimestamp| type| source ---|---|--- 2026-05-27 12:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthk3rx3d26 2026-05-27 13:17:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtlrk5pnb2e...

CVE-2026-42748

creationtimestamp| type| source ---|---|--- 2026-05-27 11:34:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtfzrnkfd2p 2026-05-27 14:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmto6zknz22w...

Crates in third party registries can override the cached source of other crates

...

CVE-2026-40827

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:19+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:09+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2025-15649

creationtimestamp| type| source ---|---|--- 2026-05-27 05:11:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqmc7vbf2t 2026-05-27 05:12:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqoqx2dh2m...

CVE-2026-48959

creationtimestamp| type| source ---|---|--- 2026-05-27 05:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsq7tel7g2i 2026-05-27 05:07:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqfrv2ht2x...

CVE-2026-48961

creationtimestamp| type| source ---|---|--- 2026-05-27 04:57:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmspttjznl2z 2026-05-27 05:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsr4ju5ia2i...

CVE-2026-48962

creationtimestamp| type| source ---|---|--- 2026-05-27 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116644657711662061 2026-05-27 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmsod6gi4p22 2026-05-27 05:02:43+00:00| seen|...

CVE-2026-49017

creationtimestamp| type| source ---|---|--- 2026-05-27 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116644303789823901 2026-05-27 03:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmsjca6nvq2v 2026-05-27 05:00:31+00:00| seen|...