CVE-2026-48317

creationtimestamp| type| source ---|---|--- 2026-08-03 23:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzx7udf2f 2026-08-06 16:16:14+00:00| seen| https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic...

GHSA-M2H6-J472-RP4C

creationtimestamp| type| source ---|---|--- 2026-08-03 22:31:31+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f 2026-08-04 00:00:43+00:00| seen| https://gist.github.com/alon710/ab6ab460d039209b756930fd867ab75f...

CVE-2026-40717

creationtimestamp| type| source ---|---|--- 2026-08-03 18:27:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032986315511601...

CVE-2026-64547

creationtimestamp| type| source ---|---|--- 2026-08-03 17:03:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3ms6y4fuezx24 2026-08-03 17:03:35+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117032656220022667 2026-08-06 05:16:33+00:00| seen|...

CVE-2026-18651

creationtimestamp| type| source ---|---|--- 2026-08-03 16:00:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117032406804696114...

CVE-2026-18600

GL.iNet GL-MT3000 devices (firmware up to 4.4.5) are affected by a vulnerability in the Network Lua RPC Plugin, specifically in network.switch_info/network.switch_status in /usr/lib/oui-httpd/rpc/network. Manipulating the switch argument enables remote command injection. The exploit has been publ...

EUVD-2026-52267

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

CVE-2026-18600

A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This affects the function network.switchinfo/network.switchstatus of the file /usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such manipulation of the argument switch leads to command injection. The attack ma...

EUVD-2026-52265

An authentication bypass vulnerability in Check Point Security Management Server and Multi-Domain Security Management Server MDS could allow an unauthenticated remote attacker with network access to Management services to execute arbitrary commands on the Security Management Server. Successful...

CVE-2026-16300

creationtimestamp| type| source ---|---|--- 2026-08-03 09:02:19+00:00| seen| https://infosec.exchange/users/offseq/statuses/117030756328811295 2026-08-03 16:50:31+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xecb7dh2i...

CVE-2026-16563

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

CVE-2026-9593

creationtimestamp| type| source ---|---|--- 2026-08-03 06:30:53+00:00| seen| https://infosec.exchange/users/certvde/statuses/117030168375818784...

CVE-2026-16564 Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...

EUVD-2026-52183

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

EUVD-2026-52184

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify order ownership on a REST endpoint that performs bulk order-status changes, allowing users with a Dokan vendor account to modify the status of any WooCommerce order on the marketplace,...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...

Improper Certificate Validation

Overview org.bouncycastle:bcprov-debug-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then...

Improper Certificate Validation

Overview org.bouncycastle:bcprov-ext-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats...

CVE-2026-6789

creationtimestamp| type| source ---|---|--- 2026-08-03 05:00:03+00:00| seen| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34 2026-08-04 00:00:48+00:00| published-proof-of-concept| Telegram/O7qkwcf1bNW3o2-AXwVaCpCOCqttlboUaOaLIMUCQVnv34...