CVE-2026-73081 Activepieces: Remote Code Execution via Command Injection in Code Step Name

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...

CVE-2026-73066

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the convolution output-channel count,...

CVE-2026-72921 SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths

SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filerserverhandlers.go allowedprefixes authorization check used strings.HasPrefix on raw path strings, so a filer JWT scoped to /tenant1 also authorized sibling paths such as /tenant1234, /tenant1-old, and /tenant1backup,...

ROOT-OS-ALPINE-323-CVE-2026-9080 CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root

Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root

Root has patched CVE-2026-8926 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat Quay 3.10.25

Red Hat Quay 3.10.25 is now available with bug fixes. Quay 3.10.25...

June 9, 2026—KB5094122 (OS Build 14393.9234)

None None...

MINI-RRWG-8MRC-JVC8

Bulletin has no description...

MINI-M3Q2-242R-QC68

Bulletin has no description...

ROOT-OS-DEBIAN-13-CVE-2026-48962 CVE-2026-48962 in perl - Patched by Root

Root has patched CVE-2026-48962 in the perl package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-72599

creationtimestamp| type| source ---|---|--- 2026-08-11 11:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msskd7vp3i2q 2026-08-11 12:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fprkkregxzrlx...

CVE-2026-58231

creationtimestamp| type| source ---|---|--- 2026-08-11 10:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mssgucru7h2q 2026-08-11 12:29:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hypoe6tn3afnc 2026-08-11 12:43:23+00:00| seen|...

CVE-2026-73161

creationtimestamp| type| source ---|---|--- 2026-08-11 10:44:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/56vuf5nggohcn...

ROOT-OS-ALPINE-321-CVE-2026-6276 CVE-2026-6276 in curl - Patched by Root

Root has patched CVE-2026-6276 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-6276 CVE-2026-6276 in curl - Patched by Root

Root has patched CVE-2026-6276 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

Security Bulletin: Vulnerability in Java affects IBM Netezza Appliance

Summary The Java package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-34282 Vulnerability Details CVEID:CVE-2026-34282 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

ROOT-APP-PYPI-CVE-2026-34515 CVE-2026-34515 in aiohttp - Patched by Root

Root has patched CVE-2026-34515 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

WordPress Themify Builder < 7.5.8 - Open Redirect

The Themify Builder WordPress plugin before version 7.5.8 contains an open redirect vulnerability. The plugin does not validate the tbredirectfail parameter before redirecting users to its value, which could allow attackers to redirect users to malicious websites. id: CVE-2024-3032 info: name:...

Broadstreet WordPress plugin - Reflected XSS

Broadstreet WordPress plugin 1.51.8 contains a reflected XSS caused by unsanitised and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires victim interaction. id: CVE-2025-4652 info: name: Broadstreet WordPress plugin -...