CVE-2026-76642

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2026-76642 util-linux libmount Privilege Escalation via Failed Mount Helper

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...

CVE-2026-80726

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117206230142963451 2026-09-04 05:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muoabrau2k2p...

CVE-2026-84796

creationtimestamp| type| source ---|---|--- 2026-09-03 04:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mulmzieyi725...

CVE-2023-46020

creationtimestamp| type| source ---|---|--- 2026-09-03 03:00:05+00:00| seen| Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI 2026-09-04 00:01:03+00:00| published-proof-of-concept| Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI...

PT-2026-85203

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

CVE-2026-71963: Improper Neutralization of Special Elements used in an OS Command

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows attackers to execute arbitrary OS commands by supplying a malicious repository with a crafted .git/config that sets core.fsmonitor to an attacker-controlled command. When a user...

CVE-2026-85187: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

YellowKey-Bitlocker-CVE-2026-45585 — Updated!

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

ghostlock — Updated!

GhostLock — Linux kernel rtmutex/futex stack-UAF tracking site Source for the GhostLock patch-status tracker: a single-page site recording which distributions have shipped a fix for the rtmutex/futex stack use-after-free in the Linux kernel. Tracking concluded 2026-08-06 : every tracked kernel...

GHSA-FPH4-WMHF-6FWF

creationtimestamp| type| source ---|---|--- 2026-09-02 18:33:43+00:00| seen| https://gist.github.com/alon710/9abc2886db3d6d53b0a6da8c0c0bb7fc 2026-09-03 19:51:59+00:00| seen| https://gist.github.com/konard/414f6d2acf125677f96485ac80cd6a3e 2026-09-03 20:01:13+00:00| seen|...

CVE-2026-2811

creationtimestamp| type| source ---|---|--- 2026-09-02 16:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdkyq6oplr7dl...

CVE-2026-76757 Gammu SMS Daemon - Critical - Unsupported - SA-CONTRIB-2026-100

Vulnerability in Drupal Gammu SMS Daemon. This issue affects Gammu SMS Daemon versions:...

CVE-2026-14199

creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422...

ROOT-OS-DEBIAN-11-CVE-2026-34545 CVE-2026-34545 in openexr - Patched by Root

Root has patched CVE-2026-34545 in the openexr package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-78657

creationtimestamp| type| source ---|---|--- 2026-09-02 06:56:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ejhs4maroptlv 2026-09-02 07:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mujei2lwul2s 2026-09-02 08:07:11+00:00| seen|...

CVE-2026-81426

The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request...

CVE-2026-81427

The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and...

CVE-2026-81427

The WC Vendors WordPress plugin (versions before 2.7.2.1 ) contains a Missing Authorization vulnerability. The plugin fails to verify that a vendor owns the referenced order when submitting a shipment status change from the front-end. This allows any authenticated vendor to modify another vendor'...

WordPress WC Vendors plugin < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status Change vulnerability

Vendor+ Cross-Vendor Order Shipment Status Change vulnerability discovered by Bhaveshkumar Parmar in WordPress Plugin WC Vendors Marketplace versions 2.7.2.1...