CVE-2026-16285

The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID...

CVE-2026-18571

CVE-2026-18571 affects Keycloak’s user creation flow when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. The flaw lets a sub-administrator with permission to create users add those users to any group, including groups the administrator isn’t authorized to manage, potentially enabling una...

CVE-2026-18571

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

AlmaLinux 8 : perl:5.32 (ALSA-2026:48225)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:48225 advisory. perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size CVE-2026-9538 Tenable has extracted the preceding description...

php:8.2 security, bug fix, and enhancement update

libzip php 8.2.32-1 - rebase to 8.2.32 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

CVE-2026-67308

creationtimestamp| type| source ---|---|--- 2026-08-01 21:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2egyp24c2b 2026-08-01 21:27:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117022368056209142 2026-08-02 12:28:05+00:00| seen|...

CVE-2026-67324

creationtimestamp| type| source ---|---|--- 2026-08-01 20:16:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bwsslzq22 2026-08-01 21:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2eglt7fr2t 2026-08-01 22:22:01+00:00| seen|...

CVE-2026-15662

creationtimestamp| type| source ---|---|--- 2026-08-01 18:07:22+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms22qnm6fx23 2026-08-01 18:07:23+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms22qnnq5d2z 2026-08-01 18:34:30+00:00| seen|...

CVE-2026-15950

creationtimestamp| type| source ---|---|--- 2026-08-01 17:39:06+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzz63hfnh2d 2026-08-01 17:39:18+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mrzz6gz75r2n 2026-08-01 18:39:00+00:00| seen|...

CVE-2026-16614

creationtimestamp| type| source ---|---|--- 2026-08-01 17:35:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzyxryvnf2i 2026-08-01 17:36:07+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzyyqr2ya22 2026-08-01 19:00:39+00:00| seen|...

CVE-2026-13725

creationtimestamp| type| source ---|---|--- 2026-08-01 15:30:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzrytq4ov24 2026-08-01 15:31:06+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzrz752bw2g...

CVE-2026-14822

creationtimestamp| type| source ---|---|--- 2026-08-01 15:03:27+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqhriqji2l 2026-08-01 15:03:36+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzqi27enn2p...

CVE-2026-14840

creationtimestamp| type| source ---|---|--- 2026-08-01 15:00:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzqdcjv4k24 2026-08-01 15:01:38+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzqejuqb52u 2026-08-01 15:23:57+00:00| seen|...

CVE-2026-15262

creationtimestamp| type| source ---|---|--- 2026-08-01 14:36:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzoxgorwc2v 2026-08-01 14:36:46+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzoy2lsvc2p 2026-08-01 15:07:22+00:00| seen|...

CVE-2026-67342

creationtimestamp| type| source ---|---|--- 2026-08-01 14:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jcvjw5wuz2ydv 2026-08-01 15:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqcxjacm2g 2026-08-01 20:22:04+00:00| seen|...

CVE-2026-67341

creationtimestamp| type| source ---|---|--- 2026-08-01 13:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4jpcl4yqppusi 2026-08-01 15:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqcr5vi22b 2026-08-01 20:20:06+00:00| seen|...

CVE-2026-67337

better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary credentials can access authenticated routes without completing second-factor verification by exploiting premature session caching...

CVE-2026-67318

axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2 request API does not honor the maxBodyLength option and axios's byte-counting stream wrapper is gated on...

UBUNTU-CVE-2026-67318

axios versions =1.13.0 Node.js HTTP adapter fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. Because Node's HTTP/2 request API does not honor the maxBodyLength option and axios's byte-counting stream wrapper is gated on...

EUVD-2026-51824

FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler railserverhandlemessages in channels/rail/server/railmain.c. When processing a RAIL PDU header, the code subtracts RAILPDUHEADERLENGTH from the peer-controlled orderLength field without firs...