CVE-2026-1843

creationtimestamp| type| source ---|---|--- 2026-02-14 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mesnu4u5c72a 2026-02-14 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116068163886097864...

CVE-2026-26335

creationtimestamp| type| source ---|---|--- 2026-02-14 03:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116066748378844749 2026-02-14 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3merzqgk5s32h 2026-02-17 07:10:48+00:00| seen|...

CVE-2026-26333

creationtimestamp| type| source ---|---|--- 2026-02-14 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116066394394150139 2026-02-14 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meruphh3tp2f...

CVE-2026-26273

creationtimestamp| type| source ---|---|--- 2026-02-13 21:37:41+00:00| published-proof-of-concept| https://github.com/idno/idno/security/advisories/GHSA-78wq-6gcv-w28r 2026-02-14 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3merpow5z3f2s 2026-02-14 00:00:46+00:00| seen|...

CVE-2026-26020

creationtimestamp| type| source ---|---|--- 2026-02-13 03:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mepjbiid2y22 2026-02-13 03:00:46+00:00| seen| https://infosec.exchange/users/offseq/statuses/116061086026902002...

CVE-2026-26069

creationtimestamp| type| source ---|---|--- 2026-02-13 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mep77ylncm2m 2026-02-13 00:00:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/116060379050409593...

CVE-2025-41117

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117 XSS in Grafana Explore stack trace

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2025-41117 XSS in Grafana Explore stack trace

Stack traces in Grafana's Explore Traces view can be rendered as raw HTML, and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API appear to be affected; Jaeger gRPC and Tempo ...

CVE-2026-26215

creationtimestamp| type| source ---|---|--- 2026-02-12 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116056131573720038 2026-02-12 06:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mencuhqapk2y 2026-02-12 14:20:52+00:00| seen|...

CVE-2026-20617

creationtimestamp| type| source ---|---|--- 2026-02-12 04:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116055777778769880 2026-02-12 04:30:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3men5tlbujs2b...

CVE-2026-1729

creationtimestamp| type| source ---|---|--- 2026-02-12 03:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3memyslhib72e 2026-02-12 03:00:52+00:00| seen| https://infosec.exchange/users/offseq/statuses/116055423747881235 2026-02-12 07:00:35+00:00| seen|...

authentik 数据伪造问题漏洞

Authentik is an open-source identity provisioning application developed by Authentik. Versions of Authentik prior to 2025.8.6, 2025.10.4, and 2025.12.4 had a data manipulation vulnerability. This vulnerability arises from the use of certain configured SAML sources, allowing attackers to inject...

CVE-2026-0958

creationtimestamp| type| source ---|---|--- 2026-02-11 12:21:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3melhorpbvs2v 2026-02-11 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j...

CVE-2025-8099

creationtimestamp| type| source ---|---|--- 2026-02-11 12:21:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3melhokrcuu27 2026-02-11 13:55:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmweqeno2j...

SUSE-SU-2026:0431-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection. bsc1257440 - CVE-2026-1761: Check length of bytes read in soupfilterinputstreamreaduntil to avoid a stack-based buffer overflow...

CVE-2026-1235

creationtimestamp| type| source ---|---|--- 2026-02-11 07:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mekxggszyg2a 2026-02-11 07:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116050823062800664...

CVE-2026-25993

creationtimestamp| type| source ---|---|--- 2026-02-11 04:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116050115365469283 2026-02-11 04:30:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meknemn66n26 2026-02-12 01:11:19+00:00| seen|...