25096 matches found
CVE-2026-31431
CVE-2026-31431 — Copy Fail tracking site Source for the Copy Fail patch-status tracker: a single-page site recording which distributions have shipped a fix for the algifaead privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affected and fixed...
Linux Distros Unpatched Vulnerability : CVE-2026-80816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: FCP: Use a private URB for the notification endpoint fcpinitnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the optional UAC2 status...
CVE-2026-86296
creationtimestamp| type| source ---|---|--- 2026-09-06 17:27:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117225267034387068 2026-09-07 12:07:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwhul24yh2r 2026-09-07 22:00:12+00:00| seen|...
CVE-2026-19859 JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' Parameter
The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...
CVE-2026-19859
JetFormBuilder is a WordPress plugin that allows form creation. Versions before 3.6.5.2 are affected by an unauthenticated arbitrary shortcode execution vulnerability. The root cause is that the status request parameter is not properly sanitized before rendering as message content: escaping is ap...
CVE-2026-86164
creationtimestamp| type| source ---|---|--- 2026-09-06 05:40:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4poraz7h7yiac...
CVE-2026-19298
creationtimestamp| type| source ---|---|--- 2026-09-05 23:01:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3musliwz7mp2k 2026-09-09 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mv44w3p7pu2p...
CVE-2026-86165
creationtimestamp| type| source ---|---|--- 2026-09-05 18:19:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117219809348083174 2026-09-06 04:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mut46qvwjy2j 2026-09-06 05:52:24+00:00| seen|...
GHSA-5W7R-F4CG-RQQ7
creationtimestamp| type| source ---|---|--- 2026-09-05 10:31:56+00:00| seen| https://gist.github.com/alon710/abc6a26fdebf669c87f091f304527249...
CVE-2026-86112
BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing authenticated attackers to favorite or unfavorite followers-only and direct statuses they cannot access. Attackers can POST to the favorite endpoint with a status ID to create...
CVE-2026-86111
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...
CVE-2026-86112 BookWyrm through 0.9.1 Missing Authorization on the Favorite and Unfavorite Endpoints
BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing authenticated attackers to favorite or unfavorite followers-only and direct statuses they cannot access. Attackers can POST to the favorite endpoint with a status ID to create...
CVE-2026-86112 BookWyrm through 0.9.1 Missing Authorization on the Favorite and Unfavorite Endpoints
BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing authenticated attackers to favorite or unfavorite followers-only and direct statuses they cannot access. Attackers can POST to the favorite endpoint with a status ID to create...
EUVD-2026-71944
BookWyrm through 0.9.1 fails to validate user visibility permissions in the Favorite and Unfavorite views, allowing authenticated attackers to favorite or unfavorite followers-only and direct statuses they cannot access. Attackers can POST to the favorite endpoint with a status ID to create...
CVE-2026-86111
BookWyrm through version 0.9.1 contains an Insecure Direct Object Reference (IDOR) in the status edit endpoint. The root cause is a failure to validate user visibility permissions, allowing any authenticated attacker to read followers-only and direct-message reviews by enumerating sequential stat...
EUVD-2026-71943
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...
CVE-2026-86111 BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...
CVE-2026-86111 BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...