CVE-2026-40698

creationtimestamp| type| source ---|---|--- 2026-06-29 16:01:27+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpgud3ksts2c...

CVE-2026-13579

creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpgu7avgnr2h 2026-06-29 20:16:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphckz7z5z2n...

CVE-2026-13569

creationtimestamp| type| source ---|---|--- 2026-06-29 15:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgu76spjn2g 2026-06-29 20:14:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphchlwpnf2y...

CVE-2026-40523

creationtimestamp| type| source ---|---|--- 2026-06-29 15:48:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtljlyct2w 2026-06-29 15:48:20+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpgtlnmwpj2t 2026-06-29 15:53:17+00:00| seen|...

CVE-2026-13565

creationtimestamp| type| source ---|---|--- 2026-06-29 15:47:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtkuxvea2y 2026-06-29 20:11:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphccouli22t...

CVE-2026-12616

creationtimestamp| type| source ---|---|--- 2026-06-29 15:46:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgtikxny22t 2026-06-29 21:13:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphfq7msmg2d...

CVE-2026-54830

creationtimestamp| type| source ---|---|--- 2026-06-29 15:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpgrrzfimb2j...

CVE-2026-50765

creationtimestamp| type| source ---|---|--- 2026-06-29 14:50:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgqdgkp4h2e 2026-06-29 17:28:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgz7galim25...

CVE-2026-55844 Home Assistant: iOS Companion App ignores internal SSID allowlist for connections – possible leak of access token and sensor data

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS companion app ignores the SSID allowlist for internal networks. The app uses SSID to detect when to use the internal URL, but whenever the app cannot find any other URL to ...

CVE-2026-55844

The Home Assistant iOS companion app prior to 2025.5.0 ignores the SSID allowlist for internal networks. It uses SSID to decide when to use the internal URL, but if no other URL is available it falls back to the internal URL, which can expose the user’s token on unsecure networks. Affected compon...

CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

CVE-2026-55517

creationtimestamp| type| source ---|---|--- 2026-06-29 13:57:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnfq24fu2d...

CVE-2026-13676

creationtimestamp| type| source ---|---|--- 2026-06-29 13:33:30+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mpgm2jo5sk2k 2026-06-29 16:05:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguk3mdpl2d 2026-07-10 16:44:21+00:00| seen|...

CVE-2026-13676

The CVE concerns the fast-uri library (versions 2.3.1–3.1.2 and 4.0.0) where the IDN host canonicalization path fails to normalize Unicode hosts for HTTP URLs. A helper used in IDN conversion does not exist on the global URL constructor, leaving the host in Unicode form while normalize() and equa...

CVE-2026-13676

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

CVE-2026-13676 fast-uri vulnerable to host confusion via failed IDN canonicalization

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize and equal still return...

CVE-2026-9799

creationtimestamp| type| source ---|---|--- 2026-06-29 13:15:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkzuo7ml25 2026-07-01 02:46:46+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0815 2026-07-02 07:59:42+00:00| seen|...

CVE-2026-9099

creationtimestamp| type| source ---|---|--- 2026-06-29 13:15:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkzuo7ml25 2026-07-01 02:46:39+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0815 2026-07-02 05:18:11+00:00| seen|...

CVE-2026-6638

creationtimestamp| type| source ---|---|--- 2026-06-29 13:15:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpgkznxcc72u 2026-07-01 02:45:31+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0816 2026-08-05 08:45:03+00:00| seen|...