Linux Distros Unpatched Vulnerability : CVE-2026-62320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - netatalk - None Ubuntu Linux - Unknown description CVE-2026-62320 Note that Nessus relies on the presence of the package as reported by the vendo...

CVE-2026-58555

creationtimestamp| type| source ---|---|--- 2026-07-15 23:55:53+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116926693544662612...

CVE-2026-47999

creationtimestamp| type| source ---|---|--- 2026-07-15 23:17:31+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqpu5kexd524...

CVE-2026-15746

creationtimestamp| type| source ---|---|--- 2026-07-15 20:47:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpls3eges2s...

CVE-2026-45417

DataEase (open source data visualization/analysis tool) is affected by a SQL injection in the CalciteProvider#checkStatus path. Before version 2.10.23, datasource connection status checks concatenate configuration.getSchema() into getTablesSql and then executeQuery runs the resulting SQL, enablin...

CVE-2026-45417 DataEase: SQL injection vulnerability

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...

CVE-2026-45417 DataEase: SQL injection vulnerability

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...

EUVD-2026-44776

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...

CVE-2026-45417 DataEase: SQL injection vulnerability

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase datasource connection status checks concatenate configuration.getSchema into getTablesSql and execute the resulting SQL with executeQuery in io.dataease.datasource.provider.CalciteProvidercheckStatus,...

GHSA-7FH5-64P2-3V2J

creationtimestamp| type| source ---|---|--- 2026-07-15 19:18:31+00:00| seen| https://gist.github.com/rodrigo-arias/52b0854a2e57501b04c4c8d6728a34ea...

CVE-Hunter

CVE Hunter Pro A Chrome extension for fast, single-lookup CVE...

GHSA-JHW3-9Q9R-GC5W

creationtimestamp| type| source ---|---|--- 2026-07-15 17:21:51+00:00| seen| https://gist.github.com/Mundi-Xu/99af1b08275fd437cfb79bfe481e68b7...

CVE-2026-20146

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-20 00:04:15+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mqzymsvplg2e...

MantisBT: REST API unauthorized Issue status change

A MantisBT user having $gupdatebugthreshold UPDATER by default can change an Issue's Status via REST and SOAP API, even if the $gsetstatusthreshold config is set to a higher level DEVELOPER by default. Impact Unauthorized change in Issue workflow. Patches...

Missing Authorization

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Missing Authorization via the REST and SOAP API process. An attacker can modify issue statuses without proper authorization by sending crafted API requests that bypass intended access controls...

CVE-2026-14354

creationtimestamp| type| source ---|---|--- 2026-07-15 14:20:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow4t54qn2f 2026-07-29 16:03:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrscg7ehc52b...

CVE-2026-61740 LightRAG: Authentication bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAGAPIKEY set but AUTHACCOUNTS unset, X-API-Key protection can be bypassed because lightrag/api/auth.py falls back to a hardcoded DEFAULTTOKENSECRET, /auth-status and /login can...

CVE-2026-61740

LightRAG vulnerability CVE-2026-61740 affects LightRAG prior to v1.5.4. When LIGHTRAG_API_KEY is set but AUTH_ACCOUNTS is unset, authentication protection can be bypassed: lightrag/api/auth.py falls back to a hardcoded DEFAULT_TOKEN_SECRET, /auth-status and /login can mint guest JWTs, and combine...

CVE-2026-8281

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-59837

creationtimestamp| type| source ---|---|--- 2026-07-15 10:13:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116923458848771348 2026-07-15 14:20:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqow55nlat2n 2026-09-04 21:19:09+00:00| seen|...