CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-7166

creationtimestamp| type| source ---|---|--- 2026-06-22 16:19:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movc2shx3i2q 2026-06-22 19:30:12+00:00| seen| https://infosec.exchange/users/offseq/statuses/116795415672753898 2026-06-22 19:30:14+00:00| seen|...

EUVD-2026-38246

Mattermost versions 11.7.x slash command.. Mattermost Advisory ID: MMSA-2026-00644...

ROOT-OS-UBUNTU-2404-CVE-2026-43021 CVE-2026-43021 in rootio-linux - Patched by Root

Root has patched CVE-2026-43021 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-43495 CVE-2026-43495 in rootio-linux - Patched by Root

Root has patched CVE-2026-43495 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23267 CVE-2026-23267 in rootio-linux - Patched by Root

Root has patched CVE-2026-23267 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-43380 CVE-2026-43380 in rootio-linux - Patched by Root

Root has patched CVE-2026-43380 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23260 CVE-2026-23260 in rootio-linux - Patched by Root

Root has patched CVE-2026-23260 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-23085 CVE-2026-23085 in rootio-linux - Patched by Root

Root has patched CVE-2026-23085 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-31749 CVE-2026-31749 in rootio-linux - Patched by Root

Root has patched CVE-2026-31749 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2204-CVE-2026-45835 CVE-2026-45835 in rootio-linux - Patched by Root

Root has patched CVE-2026-45835 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-23069 CVE-2026-23069 in rootio-linux - Patched by Root

Root has patched CVE-2026-23069 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-56347

CVE-2026-56347 affects the AVideo TopMenu plugin up to version 26.0. The issue is a stored cross-site scripting vulnerability in menu item rendering caused by missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fiel...

CVE-2026-50242

creationtimestamp| type| source ---|---|--- 2026-06-19 16:15:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monqgug73w2m 2026-06-21 09:14:52+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3morzrccyiv2m...

ALPINE-CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

CVE-2025-52465

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web pa...

CVE-2026-8461

creationtimestamp| type| source ---|---|--- 2026-06-18 13:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mokwvxbso52s 2026-06-22 22:30:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3movwrv5h7f2m 2026-06-22 22:30:19+00:00| seen|...

CVE-2026-52866

creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-169-01 2026-06-18 20:07:56+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3molmxpdsxc2g...