CVE-2026-44018

A flaw was found in Docling, a tool for document processing. The METS-GBS backend, responsible for parsing XML and detecting document formats, lacked sufficient security controls. This allowed an attacker to create specially crafted METS-GBS archives. When these archives were processed, they coul...

GHSA-GX55-F84R-V3R7

creationtimestamp| type| source ---|---|--- 2026-07-01 04:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116842838632410584 2026-07-01 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpkong6fmb23...

CVE-2026-56700

creationtimestamp| type| source ---|---|--- 2026-07-01 03:22:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkkub6hnp2b 2026-07-02 06:09:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnemx25mb2y...

CVE-2026-50040

creationtimestamp| type| source ---|---|--- 2026-07-01 02:37:02+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-06 2026-07-02 06:15:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpneymwnge2r...

CVE-2026-54899

creationtimestamp| type| source ---|---|--- 2026-07-01 02:25:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhnr7sqg26 2026-07-02 01:13:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3d3qlr22...

CVE-2026-54901

creationtimestamp| type| source ---|---|--- 2026-07-01 02:20:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhef2ete2k 2026-07-02 01:15:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu7rxux22y...

CVE-2026-54898

creationtimestamp| type| source ---|---|--- 2026-07-01 02:15:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkh3gmaei2p 2026-07-02 01:12:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu2oyaf22o...

CVE-2026-48276

creationtimestamp| type| source ---|---|--- 2026-07-01 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpkgmzkfc726 2026-07-01 09:45:03+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 12:00:35+00:00|...

CVE-2026-54502

creationtimestamp| type| source ---|---|--- 2026-07-01 02:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkgjjojkq2v 2026-07-02 01:13:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu4gwuxd2o...

CVE-2026-50110

creationtimestamp| type| source ---|---|--- 2026-07-01 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpk7kukqzx2v 2026-07-01 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116841777496408584 2026-07-01 02:31:46+00:00| seen|...

CVE-2026-58375 JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export

JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so JimuReportTokenInterceptor skips all authentication and authorization, and the export service streams the rendered report for any supplied report id...

CVE-2026-58375 JimuReport 2.5.0 - Unauthenticated Report Export via /jmreport/auto/export

JimuReport through 2.5.0 exposes the POST /jmreport/auto/export endpoint without authentication: the handler is annotated @JimuNoLoginRequired, so JimuReportTokenInterceptor skips all authentication and authorization, and the export service streams the rendered report for any supplied report id...

CVE-2026-10816

creationtimestamp| type| source ---|---|--- 2026-06-30 14:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpj6shvtbg2y 2026-06-30 14:36:53+00:00| seen| https://social.circl.lu/users/circl/statuses/116839560402797150 2026-06-30 22:01:06+00:00| seen|...

CVE-2026-57081

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

CVE-2026-8402

creationtimestamp| type| source ---|---|--- 2026-06-30 12:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpixd4leo62v 2026-06-30 12:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116838945704908445...

CVE-2026-57081

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

CVE-2026-57081 Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input

Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

EUVD-2026-40290

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecode recurses once per nested list or dictionary level with no depth cap, and each recursive call receives the remaining buffer by value while the list and dictionary branches captu...

CVE-2026-12819

creationtimestamp| type| source ---|---|--- 2026-06-30 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116837883833246326 2026-06-30 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpiiaagojq2p 2026-06-30 10:19:08+00:00| seen|...

CVE-2026-12114

creationtimestamp| type| source ---|---|--- 2026-06-30 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpi66hflyi2e 2026-06-30 04:30:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116837176228934766 2026-06-30 05:55:49+00:00| seen|...