CVE-2026-48806

creationtimestamp| type| source ---|---|--- 2026-05-27 13:21:59+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtlzlisnd23 2026-07-27 09:10:25+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmkfue7cy2o 2026-07-27 09:10:43+00:00| seen|...

CVE-2026-45845

creationtimestamp| type| source ---|---|--- 2026-05-27 13:06:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtl56f3bo2c 2026-07-01 02:34:53+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630...

CVE-2026-42762

creationtimestamp| type| source ---|---|--- 2026-05-27 13:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtkxs5e2p2q 2026-06-23 05:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mownfu4myd2u...

CVE-2026-3349

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...

CVE-2026-9689

A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers URIs, a remote attacker can manipulate the authentication process by crafting a special web address. If a user clicks...

CVE-2026-48760

creationtimestamp| type| source ---|---|--- 2026-05-27 10:04:06+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtaxn3hnf2h 2026-05-27 14:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h...

CVE-2026-48489

creationtimestamp| type| source ---|---|--- 2026-05-27 10:03:46+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtax4kuhm2m 2026-05-27 14:35:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h 2026-07-16 14:37:07+00:00| seen|...

CVE-2026-8832

creationtimestamp| type| source ---|---|--- 2026-05-27 09:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmt7tcohta2q 2026-05-28 20:00:04+00:00| seen| https://t.me/GithubRedTeam/86297 2026-05-28 21:00:04+00:00| seen| https://t.me/GithubRedTeam/86301 2026-05-28 23:00:11+00:00|...

CVE-2026-3349 MinhNhut Link Gateway <= 3.6.1 - Reflected Cross-Site Scripting via 'url' Parameter

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...

CVE-2026-3349

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...

CVE-2026-3349 MinhNhut Link Gateway <= 3.6.1 - Reflected Cross-Site Scripting via 'url' Parameter

The MinhNhut Link Gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter on the redirect page in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...

CVE-2026-40847

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:16+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:07+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2026-9022

The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

CVE-2026-9628

creationtimestamp| type| source ---|---|--- 2026-05-27 04:00:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmnat2lv2t 2026-05-27 05:33:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsrtuw2qm2i...

CVE-2026-9207

creationtimestamp| type| source ---|---|--- 2026-05-27 03:01:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsjdsegpa2z 2026-05-27 04:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsppu4g5d2h 2026-05-28 15:37:06+00:00| seen|...

EUVD-2026-32042

The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

CVE-2026-9022 Splide Carousel Block <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url' Block Attribute

The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

CVE-2026-9022

The Splide Carousel Block plugin for WordPress is vulnerable to a Stored Cross-Site Scripting (XSS) via the 'url' Block Attribute in all versions up to and including 1.7.1. Root cause: insufficient input sanitization and output escaping. Exploitation requires an authenticated attacker with contri...

CVE-2026-8606

creationtimestamp| type| source ---|---|--- 2026-05-27 01:48:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsfb74agt2i...

CVE-2026-44903

creationtimestamp| type| source ---|---|--- 2026-05-27 01:11:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmsd73zcda2o 2026-08-26 22:40:13+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mtzfndghin24...