CVE-2026-44668

creationtimestamp| type| source ---|---|--- 2026-05-26 19:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrq2hvnlt2p...

CVE-2026-24201

creationtimestamp| type| source ---|---|--- 2026-05-26 19:21:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrpnrmhts2e...

CVE-2026-44776

creationtimestamp| type| source ---|---|--- 2026-05-26 19:18:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrpifmdkq2k...

CVE-2026-44667

creationtimestamp| type| source ---|---|--- 2026-05-26 19:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrp2ulaug2p...

CVE-2026-7454

creationtimestamp| type| source ---|---|--- 2026-05-26 19:03:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmron5ogdy2g 2026-07-23 12:27:16+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrctk6x3zt24...

CVE-2026-44502

Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be partially bypassed because of a mismatch in URL parsing. The original validation logic parsed webhook URLs with Python’s urllib.parse.urlparse, then sent the request with requests.post. For...

EUVD-2025-203462

Weblate has a Server-Side Request Forgery issue...

CVE-2026-47716

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the submitted issue IDs without also requiring those issues to belong to that project. This...

CVE-2026-43936

e107 is a content management system CMS. Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4...

CVE-2026-44502 Bugsink: SSRF bypass in `validate_webhook_url`

Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be partially bypassed because of a mismatch in URL parsing. The original validation logic parsed webhook URLs with Python’s urllib.parse.urlparse, then sent the request with requests.post. For...

EUVD-2026-31855

Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be partially bypassed because of a mismatch in URL parsing. The original validation logic parsed webhook URLs with Python’s urllib.parse.urlparse, then sent the request with requests.post. For...

CVE-2026-9540

creationtimestamp| type| source ---|---|--- 2026-05-26 15:52:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrdyhhkwa2k...

CVE-2026-48132

creationtimestamp| type| source ---|---|--- 2026-05-26 15:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrcgal5mv2i 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m...

CVE-2026-48133

creationtimestamp| type| source ---|---|--- 2026-05-26 15:13:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbrjo2xd2v 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m...

CVE-2026-40034

creationtimestamp| type| source ---|---|--- 2026-05-26 15:08:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbjkcv452o 2026-07-01 02:50:28+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-f26g-jm89-4g65...

CVE-2026-8174

creationtimestamp| type| source ---|---|--- 2026-05-26 15:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrbfxkzxh2n 2026-06-02 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN24733221 2026-06-25 20:01:11+00:00| seen|...

CVE-2026-40033

creationtimestamp| type| source ---|---|--- 2026-05-26 14:58:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrawudrnk2q 2026-05-27 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmtym4x6z52p 2026-05-29 13:15:00+00:00| seen| https://t.me/bdufstecru/3206...

CVE-2026-43936 e107: Server-Side Request Forgery (SSRF) in the remote file fetcher

e107 is a content management system CMS. Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4...

EUVD-2026-31847

e107 is a content management system CMS. Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4...

CVE-2026-43936

e107 is a content management system CMS. Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "Media Manager" on the administrator screen. This vulnerability is fixed in 2.3.4...