CVE-2026-55545

CVE-2026-55545 is an authorization bypass in Yamcs , a mission control framework, affecting versions prior to 5.12.8 and 5.13.2 . Three WebSocket subscription handlers fail to enforce the privilege checks their REST counterparts require: PacketsApi.subscribePackets omits the ReadPacket check, Pro...

CVE-2026-75889

creationtimestamp| type| source ---|---|--- 2026-08-28 16:15:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-860...

CVE-2026-55583

creationtimestamp| type| source ---|---|--- 2026-08-28 13:00:05+00:00| seen| Telegram/S10hsFVDI82am35mLtrW2Lu7gt-O8uQTUdZrdbSt3B6uU 2026-08-29 00:00:09+00:00| seen| Telegram/S10hsFVDI82am35mLtrW2Lu7gt-O8uQTUdZrdbSt3B6uU...

CVE-2026-80681

creationtimestamp| type| source ---|---|--- 2026-08-28 09:16:01+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172375439048635 2026-08-29 17:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muaf5sz3ie2j...

CVE-2026-80617

creationtimestamp| type| source ---|---|--- 2026-08-28 08:49:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172270071043490 2026-08-29 14:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua47pyh3t2e...

CVE-2026-80603

creationtimestamp| type| source ---|---|--- 2026-08-28 08:22:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172163914329708 2026-08-29 14:20:17+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua33z4yg424...

CVE-2026-80711

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

CVE-2026-80608

creationtimestamp| type| source ---|---|--- 2026-08-28 08:09:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172112457184475...

CVE-2026-80600

creationtimestamp| type| source ---|---|--- 2026-08-28 07:55:28+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117172058724621440 2026-08-29 14:20:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mua33xruaz2c...

CVE-2026-80711

CVE-2026-80711 affects the Linux kernel power: supply: max17040 driver. The MAX17040 fuel gauge does not report charger state itself, so the driver forwards POWER_SUPPLY_PROP_STATUS to a supplier power supply. When no supplier is registered, power_supply_get_property_from_supplier() returns -ENOD...

CVE-2026-80711 power: supply: max17040: handle missing status supplier

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

CVE-2026-80711

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

CVE-2026-61800

creationtimestamp| type| source ---|---|--- 2026-08-28 03:02:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4epteieg2o 2026-08-28 04:08:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4iha65xd2e 2026-08-28 05:05:10+00:00| seen|...

CVE-2026-38822

creationtimestamp| type| source ---|---|--- 2026-08-28 03:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu4epmhanx27...

CVE-2026-68929

creationtimestamp| type| source ---|---|--- 2026-08-28 02:07:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bptiki62b...

CVE-2026-51664

Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51631

Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS runtime status via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67893

Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain WPS runtime status via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67903

Incorrect access control in the getDdnsStatus function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51623

An incorrect access control vulnerability in the getDdnsStatus function of TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain DDNS runtime status and public IP information by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The flaw results...