PT-2026-52441

Our payment integration with Computop-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one...

CVE-2026-13222: Improper Enforcement of Behavioral Workflow

Our payment integration with Oppwa-based payment methods did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one...

PT-2026-52503

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download endpoint allows authenticated administrators to read arbitrary files from the server filesystem. The backup download endpoint GET...

PT-2026-52457

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment...

Oracle Linux 9 : post (ELSA-2026-26205)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26205 advisory. 2:3.5.25-3 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 Tenable has extracted the preceding description...

CVE-2026-57536: Improper Enforcement of Behavioral Workflow

Our payment integration with Mollie did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment...

PT-2026-52590

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description A length-confusion issue exists in the wolfSSL OCSP resp find status function. The lookup process compares serial-number bytes without verifying that the two serial numbers are of equal lengt...

Linux Distros Unpatched Vulnerability : CVE-2026-53012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nexthop is replaced with an IPv4 nexthop, the hasv4 flag of all group...

EUVD-2026-39106

The Zephyr PL011 UART driver drivers/serial/uartpl011.c contains an unbounded software loop in pl011irqtxenable that repeatedly invokes the interrupt-driven application callback while the TX interrupt mask bit PL011IMSCTXIM is set, to work around the controller's level-transition TX-interrupt...

CVE-2026-53090

creationtimestamp| type| source ---|---|--- 2026-06-24 19:00:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806622367648058 2026-08-12 20:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806 2026-10-01 18:00:00+00:00|...

CVE-2026-53127

creationtimestamp| type| source ---|---|--- 2026-06-24 18:36:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2knuqbqn2o 2026-07-23 21:20:32+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrdrdqvh652o 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-53119

creationtimestamp| type| source ---|---|--- 2026-06-24 18:29:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2kb6r5ow2f 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-52971

creationtimestamp| type| source ---|---|--- 2026-06-24 18:19:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806461162472827 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-52979

In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc pspassocdevicegetlocked obtains a pspdev reference via pspdevgetforsock which uses pspdevtryget under RCU; it then acquires psd-lock and drops the reference. Before the lo...

CVE-2026-13006

creationtimestamp| type| source ---|---|--- 2026-06-24 17:10:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116806191372211581 2026-07-01 12:43:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk76eiza2o...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipvs: Do not keep the destdst entry if the device is going down. There is a race between the netdevnotifier function ipvsdstevent and the code that caches the dst entry for devices that are going down. Since the FIB can be notifi...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: iio: accel: adxl380: Avoid reading more entries than are present in the FIFO. The interrupt handler reads FIFO entries in batches of N samples, where N is the number of scan elements that have been enabled. However, the sensor...

CVE-2026-10091

creationtimestamp| type| source ---|---|--- 2026-06-24 11:49:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3moztwkagnv2e 2026-06-26 09:15:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mp6m7sf5l52m...

CVE-2026-52941

creationtimestamp| type| source ---|---|--- 2026-06-24 10:49:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozqkrljyh2t 2026-07-01 02:47:23+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:25:03+00:00| seen|...

CVE-2026-11370

The WP Meta SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.5.18 via the 'newlink' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations...