CVE-2026-15587

Improper Privilege Management in Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version...

CVE-2026-9193 Privilege escalation in Progress MarkLogic Server Hadoop integration

An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with a low-privileged Hadoop role to escalate privileges and execute privileged operations against the Security database...

CVE-2026-9192

An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators...

EUVD-2026-53422

An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with an administrative REST role to escalate privileges. This can result in unauthorized disclosure of sensitive server-si...

CVE-2026-15587

Improper Privilege Management in Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version...

EUVD-2026-53341

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

WordPress Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin <= 6.11.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Tarcísio Luchesi De Almeida Silva Poystick in WordPress Plugin Instagram Feed versions = 6.11.3...

CLSA-2026-1785932316 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.1.21-tuxcare.8...

CVE-2026-71254

creationtimestamp| type| source ---|---|--- 2026-08-05 12:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msdi4bhzi62l 2026-08-05 12:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/117042788884411144 2026-08-05 12:40:04+00:00| seen|...

RHSA-2026:50065 Red Hat Security Advisory: python3 security update

Bulletin has no description...

RHSA-2026:50064 Red Hat Security Advisory: python3 security update

Bulletin has no description...

CVE-2026-10090

creationtimestamp| type| source ---|---|--- 2026-08-05 10:18:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gzht5h26j6cgw 2026-08-05 10:22:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdcme5m4p2o 2026-08-05 11:31:08+00:00| seen|...

CVE-2026-10059

creationtimestamp| type| source ---|---|--- 2026-08-05 10:16:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/bxonml2lzenjs 2026-08-05 10:22:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdcmcvyui2l 2026-08-05 11:30:28+00:00| seen|...

WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FiboSearch versions = 1.33.0...

CVE-2026-15452

The CVE covers the Smash Balloon Social Photo Feed – Easy Social Feeds Plugin for WordPress. Affected software: WordPress plugin versions up to 6.11.3. Vulnerability: Reflected Cross-Site Scripting via REQUEST_URI Query String caused by insufficient input sanitization and output escaping. Impact:...

CVE-2026-4431

creationtimestamp| type| source ---|---|--- 2026-08-05 09:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117042081155295833 2026-08-05 09:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3msd62grcf32o 2026-08-05 09:20:04+00:00| seen|...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk, openstack-glance-2026.1, mlflow, openstack-nova-2026.1, dbt-snowflake, openstack-glance-2025.2, apache-beam-python-3.11-sdk, datadog-agent-fips, openstack-nova-2025.1, kserve, apache-beam-python-3.13-sdk, az, vllm-openai-cuda-12.9,...

MINI-6RVR-JMWF-3WG2

Bulletin has no description...

CVE-2026-11977 WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection

The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpmametaboxauthorslist' parameter in all versions up to, and including, 3.9.1 due to insufficient escaping on the user supplied parameter and lack...

CVE-2026-4431 Easy Post Submission <= 2.3.0 - Missing Authorization

The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createpost function in all versions up to, and including, 2.3.0. This is due to the rbsmsubmitpost AJAX action being registered for unauthenticated users via...