PT-2026-37041

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.30 through 2.4.66 Description An issue exists in the mod md module where resource allocation occurs without limits or throttling when processing OCSP response data. OCSP Online Certificate Status Protocol is a...

MINI-R6MF-HM4F-4V6X

Bulletin has no description...

CVE-2026-3399

creationtimestamp| type| source ---|---|--- 2026-03-01 06:45:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116152566505912744 2026-03-02 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116156991352747158 2026-03-02 01:30:32+00:00| seen|...

GHSA-M3XH-9434-G336

creationtimestamp| type| source ---|---|--- 2026-03-01 03:31:16+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mfxsh6sxfc2z...

CVE-2026-28559

wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global RSS feed endpoint. Attackers request the RSS feed without a forum ID parameter, bypassing the privacy and status WHERE clauses that...

CVE-2026-2597

creationtimestamp| type| source ---|---|--- 2026-02-28 08:20:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvs4rsyh62d...

GHSA-F2V5-7JQ9-H8CG

creationtimestamp| type| source ---|---|--- 2026-02-28 07:10:10+00:00| seen| https://gist.github.com/alon710/8c701e4c3b2c6c36535c668dab067b3c...

CVE-2026-3380

creationtimestamp| type| source ---|---|--- 2026-02-28 07:07:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116146990737576376 2026-03-01 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116152036747115760 2026-03-01 04:30:30+00:00| seen|...

CVE-2026-28408

creationtimestamp| type| source ---|---|--- 2026-02-28 01:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfv3jchrya2u 2026-02-28 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116146020481643691 2026-02-28 03:00:29+00:00| seen|...

GHSA-6MQ3-XMGP-PJM5

creationtimestamp| type| source ---|---|--- 2026-02-28 01:10:11+00:00| seen| https://gist.github.com/alon710/26ad557fbd4646a04459f43b9aa9e194...

PT-2026-30036

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the dpaa2-switch component that can lead to an interrupt storm. This occurs when an invalid if id is received in the IRQ handler. A range check wa...

GHSA-7JX5-9FJG-HP4M

creationtimestamp| type| source ---|---|--- 2026-02-27 23:10:11+00:00| seen| https://gist.github.com/alon710/0dcef91400c9361c9eb058c2c8a6df3b...

CVE-2026-27582

Further research determined the situation described is not a vulnerability...

CVE-2026-27580

Further research determined the situation described is not a vulnerability...

CVE-2026-27500

Further research determined the situation described is not a vulnerability...

CVE-2026-1305

The CVE-2026-1305 entry concerns the WordPress plugin Japanized for WooCommerce (WooCommerce for Japan) with an authentication bypass vulnerability. The root cause is a flawed paidy_webhook_permission_check that unconditionally returns true when the webhook signature header is omitted, allowing u...

WordPress Fluent Forms Pro Add On Pack plugin <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification vulnerability

Missing Authorization to Unauthenticated Payment Status modification vulnerability discovered by Prickly Cactus in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.1.17...

GHSA-7GCC-R8M5-44QM

creationtimestamp| type| source ---|---|--- 2026-02-27 02:40:18+00:00| seen| https://gist.github.com/alon710/9c24edd6758ed34c527e00be66673a79...

GHSA-VJF3-2GPJ-233V

creationtimestamp| type| source ---|---|--- 2026-02-27 02:10:20+00:00| seen| https://gist.github.com/alon710/ebc773370e1f1607b2bfdb1617822e65 2026-07-06 07:58:49+00:00| seen| https://gist.github.com/alon710/d7446e83b138301fa78ba45ab4a16d68 2026-07-06 07:59:30+00:00| seen|...

CVE-2026-25085 Copeland XWEB and XWEB Pro Unexpected Status Code or Return Value

A vulnerability exists in Copeland XWEB Pro version 1.12.1 and prior, in which an unexpected return value from the authentication routine is later on processed as a legitimate value, resulting in an authentication bypass...