CVE-2026-75852 ArcadeDB MongoDB wire protocol authentication bypass cross-database

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: k3d, kor, nri-apache, kpt, kubernetes-csi-driver-hostpath, rabbitmq-default-user-credential-updater, timescaledb-tune, docker-cli-buildx, regclient, buildkitd, gptscript, zot, dgraph, nri-haproxy, gobump, falcoctl, opentofu, envconsul, thanos-operator, spark-operator...

IBM Informix Dynamic Server 12.10.x / 14.10.x < 14.10.xC13W13 / 15.0.x < 15.0.1.13 RCE (7282827)

The version of IBM Informix Dynamic Server installed on the remote host is 12.10.x, or 14.10.x prior to 14.10.xC13W13, or 15.0.x prior to 15.0.1.13. It is, therefore, affected by a remote code execution vulnerability in the IBM Informix Wire Listener as referenced in the 7282827 vendor advisory. ...

CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution

IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...

CVE-2026-13476

IBM Informix Wire Listener vulnerability CVE-2026-13476 affects IBM Informix Dynamic Server versions 12.10, 14.10, and 15.0. An unauthenticated user could execute arbitrary commands with the system service account due to improper validation of user input, enabling remote code execution (RCE). CVS...

Security Bulletin: IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution (CVE-2026-13476)

Summary IBM Informix versions 12.10, 14.10 and 15.0 are vulnerable to an unauthenticated Remote Code Execution RCE vulnerability in the IBM Informix Wire Listener. Vulnerability Details CVEID:CVE-2026-13476 DESCRIPTION: IBM Informix could allow an unauthenticated user to execute arbitrary command...

CVE-2026-12852

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by providing a specially crafted message to the MLS wire decoder. The decoder allocates an attacker-declared opaque length without first performing a bounds check. This can lead to excessive memory allocation,...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: tiam335xtsc – fixed an off-by-one error in the wireorder validation. The current validation wireorderi ARRAYSIZEconfig pins allows wireorderi to equal ARRAYSIZEconfig pins, which causes out-of-bounds access when used as an...

SUSE CVE-2026-64589

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registration failure If adapter registration ever fails the release callback would trigger a NULL-pointer dereference as the completion struct has not been initialised. Note that before the...

CVE-2026-70432

creationtimestamp| type| source ---|---|--- 2026-08-06 07:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msfhtikgl52z...

CVE-2026-15459

creationtimestamp| type| source ---|---|--- 2026-08-06 07:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msfht3a2s72a 2026-08-07 00:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mshbmttlqh2t...

CVE-2026-17632

creationtimestamp| type| source ---|---|--- 2026-08-06 03:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msf2gben5g2z 2026-08-07 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msijfxmoaz2r...

CVE-2026-69111

creationtimestamp| type| source ---|---|--- 2026-08-05 21:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msegc7qffv2n...

CVE-2026-70615

creationtimestamp| type| source ---|---|--- 2026-08-05 20:18:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedw3dgxa2i 2026-08-05 21:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msegbsdjsc2e...

CVE-2026-17614

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

UBUNTU-CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852 MLS wire decoder allocates attacker-declared opaque length before bounds check

In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check...

CVE-2026-12852

CVE-2026-12852 affects Bouncy Castle for Java prior to 1.85, where the MLS wire decoder allocates an attacker-declared opaque length before performing bounds checks. This is a vulnerability in the decoder component that could impact availability (per CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VI:N/SC:N/S...