CGA-J9G3-HCC7-97JQ

Bulletin has no description...

CVE-2026-72491

creationtimestamp| type| source ---|---|--- 2026-08-17 13:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbspj723y25...

CGA-XWMG-M49M-93G6

Bulletin has no description...

CVE-2026-72477

creationtimestamp| type| source ---|---|--- 2026-08-17 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbs5oaq6b2y...

DEBIAN-CVE-2026-75010

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the modoboa driver of the password plugin could leak a Modoboa API authentication token to a user-controlled host via crafted session data. This issue only affects Roundcube instances using the password plugin with its modoboa driver...

DEBIAN-CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...

DEBIAN-CVE-2026-75007

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

DEBIAN-CVE-2026-75006

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...

DEBIAN-CVE-2026-74997

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmdlearn driver...

DEBIAN-CVE-2026-75003

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation...

DEBIAN-CVE-2026-74998

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS Cascading Style Sheets proxy were not validated, which may result in information disclosure or XSS cross-site scripting via MIME sniffing...

CGA-G972-9X54-3262

Bulletin has no description...

CVE-2026-72451

creationtimestamp| type| source ---|---|--- 2026-08-17 13:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbqzuvcyb2p...

CVE-2025-38320

creationtimestamp| type| source ---|---|--- 2026-08-17 13:00:03+00:00| seen| Telegram/TEpoapSd4LQ8W2g5zD5WEHwR6GnaqJ2YMCsh0hY-jLSc6s 2026-08-18 00:00:28+00:00| seen| Telegram/TEpoapSd4LQ8W2g5zD5WEHwR6GnaqJ2YMCsh0hY-jLSc6s...

CGA-94H9-J2QP-QMV5

Bulletin has no description...

CGA-X8HQ-W44M-4FH3

Bulletin has no description...

CGA-2X6W-XR4J-HQ43

Bulletin has no description...

CGA-QMW5-3J78-J583

Bulletin has no description...

GHSA-WCRR-JH84-FCHG

creationtimestamp| type| source ---|---|--- 2026-08-17 12:42:43+00:00| seen| https://gist.github.com/afldl/c6408059717079904adcfdaea934eb1e...

CVE-2026-74901

creationtimestamp| type| source ---|---|--- 2026-08-17 12:11:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbocqolvy2f 2026-08-17 12:53:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i5xvfncqfarns 2026-08-17 19:20:05+00:00| seen|...