CVE-2026-53864

creationtimestamp| type| source ---|---|--- 2026-06-16 20:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moglmhdrsi27 2026-06-16 21:48:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogrncto6p2g...

CVE-2026-53866

creationtimestamp| type| source ---|---|--- 2026-06-16 20:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moglm7xyvh2t 2026-06-16 21:28:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogqkrsawf2x...

Malicious code in pretie_x1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6308c285cb943f91fc16f7872bce135b8347b827139f5ad0cf8706ba992f104 Package masquerades as the prettier formatter name pretiex1, description "Opinionated code formatter for modern JavaScript and TypeScript.", keywords...

CVE-2026-46977

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: VMSVGA device. The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2026-46892

Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards component: Human Resources. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...

CVE-2026-46891

Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards component: Accounts Payable. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseO...

CVE-2026-46893

Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards component: E1 Foundation. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise JD Edwards EnterpriseOne...

CVE-2026-46877

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: VMSVGA device. The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2026-46874

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-46816

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: VMSVGA device. The supported version that is affected is 7.2.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2026-35319

Technical details for CVE-2026-35319 are not provided in the supplied documents; no affected products, versions, or exploit information are disclosed here. Monitor for updates.

CVE-2026-35282

Technical details for CVE-2026-35282 are not publicly provided in the supplied documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35279

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft component: Performance Monitor. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-35271

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft component: Weblogic. Supported versions that are affected are 8.61 and 8.62. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise P...

CVE-2026-35259

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-35259 for affected products, impact, and fixes.

GHSA-5R4W-85F3-PW66 Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

Summary There is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard host rule such as Host.example.com with stricter TLS options for...

NPM: n8n: NoSQL Injection in MongoDB Node Find And Replace Operation

NPM: n8n: NoSQL Injection in MongoDB Node Find And Replace Operation vulnerability discovered by ? in WordPress Npm n8n versions 2.24.0...

CVE-2026-24155

creationtimestamp| type| source ---|---|--- 2026-06-16 18:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moghi3uoun2c 2026-06-16 19:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogibfdv322k 2026-07-20 04:27:04+00:00| seen|...

CVE-2026-24228

creationtimestamp| type| source ---|---|--- 2026-06-16 18:26:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moggebqyog2n 2026-06-16 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogibms44f2a 2026-07-20 04:27:04+00:00| seen|...

CVE-2026-44932

creationtimestamp| type| source ---|---|--- 2026-06-16 17:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogeiujyy724 2026-06-16 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogewtkvur2r...