CVE-2026-48145

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-48144

Apache Thrift c_glib bindings are affected by an improper validation of certificate hostnames (host mismatch) leading to a potential TLS trust issue. The issue affects Thrift before 0.24.0 and is rated CRITICAL (CVSS 4.0: AV:N/AC:H/PR:N/UI:N/S:S/VC:H/VI:H/VA:N) with high impact on confidentiality...

CKAN DataStore SQL Search - SQL Injection

CKAN, an open-source data management system used for powering open data portals, contains an unauthenticated SQL injection vulnerability in the datastoresearchsql API endpoint. id: CVE-2026-42031 info: name: CKAN DataStore SQL Search - SQL Injection author: theamanrawat severity: high description...

Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload

Amasty Order Attributes for Magento 2 4.0.0 contains an unrestricted file upload vulnerability caused by lack of authentication and validation in the upload endpoint, letting unauthenticated attackers upload arbitrary files including PHP, enabling remote code execution or malware hosting. id:...

Flowise - NVIDIA NIM Endpoints Missing Authentication

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router /api/v1/nvidia-nim/ is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generati...

HT Mega < 3.0.7 - Sensitive Information Disclosure

The HT Mega plugin for WordPress is vulnerable to Sensitive Information Exposure via AJAX actions. This template dynamically extracts the security nonce before exploitation. id: CVE-2026-4106 info: name: HT Mega 3.0.7 - Sensitive Information Disclosure author: EFETR severity: high description: |...

Webnus Inc. Modern Events Calendar - Broken Access Control

Webnus Inc. Modern Events Calendar = 7.29.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers bypass authorization, exploit requires no special privileges. id: CVE-2026-32583 info: name: Webnus Inc. Modern Events...

WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation

User Registration & Membership WordPress plugin = 5.1.2 contains an improper privilege management vulnerability caused by accepting user-supplied roles without server-side allowlist enforcement, letting unauthenticated attackers create administrator accounts id: CVE-2026-1492 info: name: WordPres...

Mailcow < 2026-03b - Href Link Injection

mailcow 2026-03b reflects raw REQUESTURI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing. id: CVE-2026-40878 info: name: Mailcow 2026-03b - Href Link Injection author: ritikchaddha severity: low description: | mailc...

W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read

W3 Total Cache WordPress plugin = 2.9.4 contains a directory traversal caused by improper handling in setupSources function, letting unauthenticated attackers read arbitrary files, exploit requires manual minify mode enabled with specific filename. id: CVE-2026-9282 info: name: W3 Total Cache =...

Apache Tomcat - Cross-Site Scripting

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, fro...

Important: Red Hat Security Advisory: grafana security, bug fix, and enhancement update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

CVE-2026-57989

creationtimestamp| type| source ---|---|--- 2026-07-26 19:23:25+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrl473fzck2v 2026-07-26 20:32:33+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla2pxgvp2d 2026-07-27 04:45:16+00:00| seen|...

CVE-2026-57978

creationtimestamp| type| source ---|---|--- 2026-07-26 17:55:26+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987561675416708 2026-07-26 20:34:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrla5gqeqn2e 2026-07-27 04:45:14+00:00| seen|...

CVE-2026-64520

creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325...

CVE-2026-64522

creationtimestamp| type| source ---|---|--- 2026-07-26 17:15:21+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987404024660419...

CVE-2026-17496

creationtimestamp| type| source ---|---|--- 2026-07-26 16:00:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrkqtkdipa23 2026-07-26 16:10:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrkrg43gaz2y 2026-07-26 17:00:19+00:00| seen|...

CVE-2026-17458

creationtimestamp| type| source ---|---|--- 2026-07-26 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116986165685626877 2026-07-26 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrkdgz7ndm2i 2026-07-26 17:27:08+00:00| seen|...

CVE-2026-17459

creationtimestamp| type| source ---|---|--- 2026-07-26 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116985811828078268 2026-07-26 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrk6g3xnyj2n 2026-07-26 17:25:36+00:00| seen|...