CVE-2026-85400

creationtimestamp| type| source ---|---|--- 2026-09-08 09:53:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2d3ifyokbdyte 2026-09-08 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4ydwo2x2u...

CVE-2019-1010022

creationtimestamp| type| source ---|---|--- 2026-09-08 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muymr7evht2t...

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Online dating app Grindr has opted to pay £26 million $35.1 million to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties. Grindr, which is the largest LGBTQ+ dating app, was sued in April 2024, accusing it of...

CVE-2026-69564: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Online Certificate Status Protocol OCSP allows an authorized attacker to elevate privileges locally...

WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability

Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Event Solution versions = 4.1.22...

CVE-2026-86510

creationtimestamp| type| source ---|---|--- 2026-09-07 19:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117231307403147637 2026-09-08 03:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117233183947846621 2026-09-08 03:00:27+00:00| seen|...

CVE-2026-86509

creationtimestamp| type| source ---|---|--- 2026-09-07 18:50:27+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117231257148545867 2026-09-08 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117232830106027040 2026-09-08 01:30:29+00:00| seen|...

CVE-2026-86430

creationtimestamp| type| source ---|---|--- 2026-09-07 15:00:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/adymq3lw4sihz 2026-09-12 19:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdtdqrfdp24...

CVE-2026-18355

creationtimestamp| type| source ---|---|--- 2026-09-07 14:48:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117230305202564673 2026-09-08 06:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117233891642545152 2026-09-08 07:30:26+00:00| seen|...

CVE-2026-86426

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwombeul522 2026-09-08 18:08:31+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3muzmjo32o42g 2026-09-09 15:00:07+00:00| confirmed|...

CVE-2026-61409

creationtimestamp| type| source ---|---|--- 2026-09-07 12:47:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117229828438788241...

ROOT-OS-DEBIAN-12-CVE-2026-1502 CVE-2026-1502 in python3.11 - Patched by Root

Root has patched CVE-2026-1502 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

CVE-2004-0077

creationtimestamp| type| source ---|---|--- 2026-09-07 12:00:03+00:00| seen| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo 2026-09-08 00:00:45+00:00| published-proof-of-concept| Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo...

CVE-2026-0561

creationtimestamp| type| source ---|---|--- 2026-09-07 03:00:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0561.yaml 2026-09-08 00:00:03+00:00| confirmed|...

CVE-2026-78408

creationtimestamp| type| source ---|---|--- 2026-09-07 02:01:20+00:00| seen| https://bsky.app/profile/slackers.it/post/3muvfz7thww2s 2026-09-22 00:01:30+00:00| seen| https://bsky.app/profile/slackers.it/post/3mw2wcsqkue2h...

Linux Distros Unpatched Vulnerability : CVE-2026-80816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status...

CVE-2026-86296

creationtimestamp| type| source ---|---|--- 2026-09-06 17:27:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117225267034387068 2026-09-07 12:07:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwhul24yh2r 2026-09-07 22:00:12+00:00| seen|...

CVE-2026-19859 JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter

The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...

CVE-2026-19859 JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter

The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...

CVE-2026-19859

JetFormBuilder is a WordPress plugin that allows form creation. Versions before 3.6.5.2 are affected by an unauthenticated arbitrary shortcode execution vulnerability. The root cause is that the status request parameter is not properly sanitized before rendering as message content: escaping is ap...