CVE-2026-41449

creationtimestamp| type| source ---|---|--- 2026-08-22 07:03:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnph6fxjh22...

CVE-2026-63421

creationtimestamp| type| source ---|---|--- 2026-08-22 01:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn36evjyu2b 2026-08-22 07:32:13+00:00| seen| https://gist.github.com/alon710/fba1ad6c3ccaacdec698da20783bacca...

CVE-2026-33240

creationtimestamp| type| source ---|---|--- 2026-08-21 23:01:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmujrd76s27 2026-08-22 01:42:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtn5joavuj2z...

CVE-2026-31936

creationtimestamp| type| source ---|---|--- 2026-08-21 23:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmujkg3gh2b 2026-08-22 01:42:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtn5ifk7kh2r...

CVE-2026-62677

creationtimestamp| type| source ---|---|--- 2026-08-21 21:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnt2msql2m...

CVE-2026-62675

creationtimestamp| type| source ---|---|--- 2026-08-21 21:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnsu3qct2m 2026-09-02 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-756x-9hf6-q4h4...

CVE-2026-27490

creationtimestamp| type| source ---|---|--- 2026-08-21 21:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnr5f7az2l...

CVE-2026-63462

creationtimestamp| type| source ---|---|--- 2026-08-21 20:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmkfxyxt722 2026-08-22 12:31:57+00:00| seen| https://gist.github.com/alon710/31e18879d387aa16512f599cadd2f7a1...

CVE-2026-75932

creationtimestamp| type| source ---|---|--- 2026-08-21 17:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmaesgokc27 2026-08-21 18:08:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtme4rxn3l24 2026-08-21 18:14:38+00:00| seen|...

CVE-2026-59279

creationtimestamp| type| source ---|---|--- 2026-08-21 14:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtlwcjfsbk2t...

clawpatrol v0.5.9

clawpatrol The security firewall for agents. Claw Patrol sits between your agents and prod, parses their traffic at the wire, and gates each action against rules you write in HCL. For example, you can block destructive SQL, or pause kubectl delete pod until a human approves it before the request...

CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...

GO-2026-6170 WITHDRAWN: Malformed backend frame length causes panic in github.com/lib/pq

This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". github.com/lib/pq trusts the unsigned 32-bit length in every PostgreSQL backend frame and subtracts four without first checking that the wire length is at least four. A backend frame whose...

CVE-2026-75852

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

CVE-2026-75854

ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete data. Attackers can connect to the Redis port and execute arbitrary commands against any database on the server without...

CVE-2026-75854 ArcadeDB Redis Wire-Protocol Plugin Missing Authentication

ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete data. Attackers can connect to the Redis port and execute arbitrary commands against any database on the server without...

CVE-2026-75854 ArcadeDB Redis Wire-Protocol Plugin Missing Authentication

ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete data. Attackers can connect to the Redis port and execute arbitrary commands against any database on the server without...

EUVD-2026-60614

ArcadeDB's Gremlin wire-protocol plugin com.arcadedb:arcadedb-gremlin in versions = 26.7.3 enforces authentication SASL PLAIN but performs no authorization: it never checks database access permissions canAccessToDatabase and never binds the authenticated principal into the engine. As a result, an...

CVE-2026-75853

The com.arcadedb:arcadedb-gremlin plugin (≤26.7.3) enforces SASL PLAIN authentication but skips authorization: it never calls canAccessToDatabase or binds the principal, so any valid credential can read, write, and drop data in any database via a traversal-source alias, bypassing all per-type/rea...

CVE-2026-75852 ArcadeDB MongoDB wire protocol authentication bypass cross-database

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...