CERTFR-2026-ACT-031

creationtimestamp| type| source ---|---|--- 2026-07-20 08:34:42+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mr2v5ko7qq2g 2026-07-20 08:51:10+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mr2w2zlyeq2b 2026-07-20 08:51:16+00:00| seen|...

CVE-2026-13577

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generateid silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom are available. The...

CVE-2026-13142

creationtimestamp| type| source ---|---|--- 2026-07-20 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116951130173651435 2026-07-20 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mr2rkpgosv2t 2026-07-20 08:10:24+00:00| seen|...

CVE-2026-13699

creationtimestamp| type| source ---|---|--- 2026-07-20 05:38:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lc5zd2z2m 2026-07-20 05:38:38+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2lcqx6uu2l...

CVE-2025-8412

creationtimestamp| type| source ---|---|--- 2026-07-20 05:17:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2k5ssvac2u 2026-07-20 05:18:00+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2k5tfv2525...

Linux Distros Unpatched Vulnerability : CVE-2026-13577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable...

CVE-2026-16227

creationtimestamp| type| source ---|---|--- 2026-07-19 12:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyso7g4eb2a 2026-07-19 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946883494385034 2026-07-19 13:30:29+00:00| seen|...

CVE-2026-16228

creationtimestamp| type| source ---|---|--- 2026-07-19 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946529537967968 2026-07-19 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyq6lfcsn2r 2026-07-19 12:39:59+00:00| seen|...

CVE-2026-16223

creationtimestamp| type| source ---|---|--- 2026-07-19 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116945821784754940 2026-07-19 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyg4qahpk2n...

CVE-2026-16209

creationtimestamp| type| source ---|---|--- 2026-07-19 08:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqye452ogs2g 2026-07-19 08:30:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mqyegoqwk22f...

CVE-2026-53994

creationtimestamp| type| source ---|---|--- 2026-07-19 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944052588841641 2026-07-19 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxmy73t342g 2026-07-19 06:00:37+00:00| seen|...

CVE-2026-10130

creationtimestamp| type| source ---|---|--- 2026-07-18 22:30:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/116943344312678030 2026-07-18 22:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxcw4d2h424 2026-07-18 23:35:46+00:00| seen|...

CVE-2026-16097

creationtimestamp| type| source ---|---|--- 2026-07-18 12:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqwcfugluu2i 2026-07-18 13:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwd3pdrpx23 2026-07-18 13:43:50+00:00| seen|...

CVE-2026-54335

creationtimestamp| type| source ---|---|--- 2026-07-17 23:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqux7yi36n2j 2026-07-18 00:00:07+00:00| seen| https://bsky.app/profile/amadeustech.bsky.social/post/3mquxhjsacv2x...

Gitea has insufficient permission checks for Composer package source links

CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information. Summary A critical vulnerability has been discovered in Gitea. It was already reported via...

EUVD-2026-41635

Gitea has insufficient permission checks for Composer package source links...

GHSA-8QW8-RQ86-9PC2 Gitea has insufficient permission checks for Composer package source links

CVE Description Gitea versions up to and including 1.26.1 have insufficient permission checks for Composer package source links, which can expose private or internal package source information. Summary A critical vulnerability has been discovered in Gitea. It was already reported via...

CVE-2026-45162

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, multiple Pimcore locations call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, including lib/Tool/Authentication.php, models/Site/Dao.php...

CVE-2026-48045 Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...

CVE-2026-48045 Zeroconf: Unbounded TC-deferred queue allows LAN-local memory exhaustion via spoofed-source flood

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...