CVE-2026-46582

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, a replay of a wildcard rrset as another piece of data, could be briefly considered DNSSEC secure based only on the RRSIG validation and stored into cache, before later validation treats it as bogus based on NSEC validation. When the resolvin...

MINI-J29R-957C-HV2W

Bulletin has no description...

MINI-PCQ3-H432-F2RF

Bulletin has no description...

MINI-52FM-WF62-QMC9

Bulletin has no description...

CVE-2026-50243

In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redirect rule or an RPZ file with an RPZ-IP trigger, the rewriting handler does not check the security status of the upstream answer...

GHSA-MMX7-HFXF-JPPX

creationtimestamp| type| source ---|---|--- 2026-07-22 12:01:01+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mrabmdckvy24 2026-08-12 12:01:33+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3gmvgco2a...

CVE-2026-60799

creationtimestamp| type| source ---|---|--- 2026-07-22 11:14:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mra6z3whu22o 2026-07-22 11:14:30+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116963335733043048 2026-07-23 17:47:18+00:00| seen|...

GHSA-R7WM-3CXJ-WFF9

creationtimestamp| type| source ---|---|--- 2026-07-22 09:31:57+00:00| seen| https://gist.github.com/alon710/a699a0ff594951c1548ee266a0f2d1af...

GHSA-2RP8-MM9Q-FP49

creationtimestamp| type| source ---|---|--- 2026-07-22 08:31:19+00:00| seen| https://gist.github.com/alon710/200e1b4ca9b1b66d608a6e02108ba259...

CVE-2026-14322

The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recognised gateways, allowing unauthenticated users to create fully-approved bookings for priced appointments without making any payment...

BELL-CVE-2026-63820 CVE-2026-63820 does not affect BellSoft software

Bulletin has no description...

CVE-2026-63262

creationtimestamp| type| source ---|---|--- 2026-07-22 03:04:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr7dms6imx23...

CVE-2026-8987

creationtimestamp| type| source ---|---|--- 2026-07-22 01:57:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr77upipxb2j 2026-07-22 17:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mratyrlhlu2k...

PT-2026-63544

Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.136.Final Netty versions prior to 4.2.16.Final Description An issue exists in the OcspServerCertificateValidator where out-of-date OCSP Online Certificate Status Protocol responses are flagged but not stopped from...

PT-2026-63474

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description A MongoDB server may terminate abnormally during the TLS handshake when initiating an outbound TLS connection if it processes a malformed OCSP response from a remote peer. OCSP stapling, a...

CVE-2026-60264

creationtimestamp| type| source ---|---|--- 2026-07-21 23:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6xr5pmuq2k 2026-07-23 16:50:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-28 10:37:07+00:00| seen|...

DEBIAN-CVE-2026-56820

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...

CVE-2026-10675

creationtimestamp| type| source ---|---|--- 2026-07-21 22:50:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6vgein622b...

CVE-2026-10677

creationtimestamp| type| source ---|---|--- 2026-07-21 22:32:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr6uh7ybxp2o...

CVE-2026-56820 Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Final, OcspClient does not validate that the CertificateID in an OCSP response matches the requested CertificateID, which can lead to replay...