CVE-2026-90486: Server-Side Request Forgery (SSRF)

A vulnerability has been found in openstatusHQ openstatus up to f04c827112f30a11d571ebdad3892826034d6265. Affected by this vulnerability is an unknown functionality of the file apps/status-page/src/lib/proxy/resolve-custom-domain-rewrite.ts. The manipulation leads to server-side request forgery...

CVE-2026-80981

creationtimestamp| type| source ---|---|--- 2026-09-11 21:32:19+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117254543026202638 2026-09-12 06:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117256540967801192 2026-09-12 06:00:27+00:00| seen|...

CVE-2026-89702

creationtimestamp| type| source ---|---|--- 2026-09-11 20:24:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117254277344122641 2026-09-13 12:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfktfn3eu2t 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-89705

In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rqstatuscounter to even on all nfsddispatch exit paths nfsddispatch sets rqstatuscounter to an odd value once a request has been decoded, and back to an even value once it has been fully processed, forming a seq-loc...

DEBIAN-CVE-2026-89629

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

CVE-2026-89691

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4releasecompoundargs resets args-ops to the inline iops8 array when the dynamically-allocated ops buffer is freed, but leaves args-opcnt at its original value whic...

CVE-2026-89629 HID: corsair-void: Check size of status and firmware events before reading them

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

CVE-2026-62103

creationtimestamp| type| source ---|---|--- 2026-09-11 18:40:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb7owcdmg2n 2026-09-11 20:08:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvbemoaql32y...

CVE-2026-54047

creationtimestamp| type| source ---|---|--- 2026-09-11 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rquccx2f 2026-09-11 18:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hh4d5o26wjn56 2026-09-11 18:08:41+00:00| seen|...

CVE-2026-82099

creationtimestamp| type| source ---|---|--- 2026-09-11 16:07:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117253266483984586 2026-09-17 12:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvpo7em4dp2b...

CVE-2026-3855

creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:46:15+00:00| seen|...

CVE-2026-86341

creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:34+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:46:06+00:00| seen|...

CVE-2026-82215 WC PayPay Gateway 0.5 - 0.9.3 - Unauthenticated Payment Bypass via Unverified Webhook

The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...

ROOT-APP-NPM-CVE-2026-33228 CVE-2026-33228 in flatted - Patched by Root

Root has patched CVE-2026-33228 in the flatted package for Root:npm. Multiple fixed versions available...

CVE-2026-9667

creationtimestamp| type| source ---|---|--- 2026-09-11 00:25:25+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117249561400617531...

CVE-2026-82215: Insufficient Verification of Data Authenticity

The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...

CVE-2026-89629: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Check size of status and firmware events before reading them Malformed status and firmware events could cause an out-of-bounds read since the size wasn't being checked. Check the size and warn on unexpected...

CVE-2026-75742

creationtimestamp| type| source ---|---|--- 2026-09-10 21:18:58+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y42nfdx2z...

CVE-2026-88937

creationtimestamp| type| source ---|---|--- 2026-09-10 17:10:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/achufej3w2s5g 2026-09-11 05:30:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv7tkel43c2y...

CVE-2026-57967

creationtimestamp| type| source ---|---|--- 2026-09-10 16:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6ijiaeeq25 2026-09-10 17:27:42+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117247918870489818 2026-09-17 05:37:06+00:00| seen|...