CVE-2026-41041

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-62143

creationtimestamp| type| source ---|---|--- 2026-07-13 09:37:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjffc5gow2y...

CVE-2026-22099 Missing authentication for Bluetooth communication

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

CVE-2026-22099

CVE-2026-22099 affects a charging station where Bluetooth commands do not require authentication. This leads to exposure of sensitive information, potential reboot triggering, and the ability to push a firmware update URL via Bluetooth. The issue is described with high impact on confidentiality, ...

CVE-2026-22099 Missing authentication for Bluetooth communication

The charging station does not require authentication for Bluetooth commands to perform actions. The functionality exposed includes sensitive information leakage, triggering reboots, or pushing a firmware update URL...

CVE-2026-41041 Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-41041 Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

CVE-2026-15541

creationtimestamp| type| source ---|---|--- 2026-07-13 08:35:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjbxeu6uu2e 2026-07-13 10:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjhe6icjz26...

CVE-2026-14165

creationtimestamp| type| source ---|---|--- 2026-07-13 08:29:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjblrq2px2s 2026-07-13 09:42:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqjfoycfip2w 2026-07-16 07:53:45+00:00| seen|...

MAL-2026-10426 Malicious code in chai-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ffc5e8b4e25d2d7787eb9f3bb9607114e5e4290f0afe2350499b78d5f95642 [email protected] presents itself as a Mocha reporter mirroring the legitimate eth-gas-reporter project matching author name, README, and badges, but th...

CVE-2026-12274

creationtimestamp| type| source ---|---|--- 2026-07-13 07:48:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj7cel2gg26 2026-07-14 03:15:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlaj7r33z2z...

CVE-2026-15538

creationtimestamp| type| source ---|---|--- 2026-07-13 07:44:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj73oaty727...

CVE-2026-15536

creationtimestamp| type| source ---|---|--- 2026-07-13 07:43:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6zww6kb22...

CVE-2026-11964

creationtimestamp| type| source ---|---|--- 2026-07-13 07:42:45+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6y7ymo52i 2026-07-13 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqkaedxj7k2h 2026-07-14 00:00:11+00:00| seen|...

CVE-2026-12273

creationtimestamp| type| source ---|---|--- 2026-07-13 07:41:09+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqj6vfbljy2y 2026-07-14 03:38:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqlbsllbjm2c...

CVE-2026-4769

creationtimestamp| type| source ---|---|--- 2026-07-13 07:21:18+00:00| seen| https://infosec.exchange/users/certvde/statuses/116911458109125585 2026-07-13 07:54:49+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mqj7nsuneh2l 2026-07-13 08:30:05+00:00| seen|...

MAL-2026-10420 Malicious code in path-addon-extend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b383636076e2701a372675c281ee82463d97529ed7d8db027276aa8a8b68b966 path-addon-extend presents itself as a copy of Node's built-in path module. On module load, path.js issues an HTTPS GET to a base64-obscured URL that...

MAL-2026-10410 Malicious code in cookie-phase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bfab347de8288575bca9677b9eb7652b0024cdbffc1efebe387378c243299c The package presents itself as the popular pino logger README badges, exported module.exports.pino = middleware but its name and metadata are...

MAL-2026-10411 Malicious code in cookie-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad03fe65b40f317c4f3dd1d4031b1ce3942432ccbb8d794c7b94c7de8566d0f The package presents itself as a cookie-signing / Express-middleware utility mimicking pino logger internals as cover, but its main entry spawns a...

Vulnerabilities found in Juniper Networks’ Junos OS and Junos OS Evolved

Juniper has identified several vulnerabilities in Junos OS and Junos OS Evolved, specifically related to devices in the MX Series, PTX Series, QFX Series, EX Series, SRX Series, and QFX10000 Series. These vulnerabilities affect various components of Junos OS and Junos OS Evolved, including the...