CVE-2026-28596

Technical details for CVE-2026-28596 are not provided in the supplied documents. The connected PT Security entries list it among July 2026 patches but do not include affected product, root cause, impact, or remediation. Monitor for official disclosures.

CVE-2026-28584

CVE-2026-28584 is present in the connected documents as part of the July 2026 Google Android patches, categorized under High severity in the Android security bulletin. The PT Security entries repeatedly reference July 2026 CVE patch batches and list CVE-2026-28584 among the High risk CVEs in that...

CVE-2026-28583

Technical details for CVE-2026-28583 are not publicly available in the provided documents. The entry appears reserved with no disclosed impact, affected products, or remediation. Monitor for updates as additional information is released.

CVE-2026-28632

Technical details for CVE-2026-28632 are not publicly available in the provided connected documents. Monitor for updates. The Initial Description is a placeholder reserving this CVE and does not specify affected product, impact, root cause, or fix.

CVE-2026-28599

Technical details for CVE-2026-28599 are not publicly provided in the supplied documents. Monitor for updates as more specifics (affected products, root cause, impact) may be released later.

CVE-2026-28650

Technical details for CVE-2026-28650 are not publicly available in the provided documents; no product/vendor/component/impact specifics are disclosed. Monitor for updates from the connected PT Security entries noting July 2026 patch activity.

CVE-2026-28624

Technical details for CVE-2026-28624 are not publicly available in the provided documents. The connected PT- security entries list CVE IDs but do not disclose root cause, affected product/version, impact, or fix. Monitor for updates.

CVE-2026-28630

Technical details for CVE-2026-28630 are not publicly provided in the supplied documents. Monitor for updates from the issuing organization and PT Security entries for disclosed impact, affected products, or fixes.

CVE-2026-28631

Technical details for CVE-2026-28631 are not provided in the initial or connected documents. The sources list CVE numbers and patch notes but give no specifics on affected product/version, root cause, impact, or remediation.

CVE-2026-28590

Technical details for CVE-2026-28590 are not provided in the provided documents. The connected PT-Security entries only reference general July 2026 patch activity and list CVEs without specifics. Monitor for updates and official advisories for concrete details.

CVE-2026-28634

Technical details for CVE-2026-28634 are not publicly available in the provided documents. The connected PT security notes summarize patch activity but do not disclose affected product specifics, root cause, or remediation for this CVE. Monitor for updates.

CVE-2026-0084

Technical details for CVE-2026-0084 are not publicly available in the provided documents. Monitor for updates from the reserving entity once details are disclosed.

CVE-2026-28600

Technical details for CVE-2026-28600 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-28643

Technical details for CVE-2026-28643 are not provided in the supplied documents. The connected entries list patches and CVEs but do not include affected products, impact, vectors, or remediations for this CVE. Monitor for updates.

CVE-2026-28585

Technical details for CVE-2026-28585 are not provided in the supplied documents. The connected PT Security entries reference July 2026 patch activity and list CVE-2026-28585 among many, but no affected product, impact, or fix is disclosed. Monitor updates.

CVE-2026-28649

Technical details for CVE-2026-28649 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed. Monitor for updates.

CVE-2026-28582

Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-28582.

CVE-2026-28638

Technical details for CVE-2026-28638 are not provided in the attached documents. Monitor official advisories/updates for new information and remediation.

CVE-2026-28639

Technical details for CVE-2026-28639 are not provided in the supplied documents; no affected products, root cause, or fixes are given. Monitor for updates from the connected PT Security entries and the CVE page.

CVE-2026-28602

Technical details for CVE-2026-28602 are not provided in the connected documents. The initial entry is a reserved placeholder. Monitor for updates and forthcoming specifics when they are released.

CVE-2026-28614

Technical details for CVE-2026-28614 are not provided in the supplied documents. Monitor PT Security references and Android patch notes for July 2026 updates.

CVE-2026-28612

Technical details for CVE-2026-28612 are not provided in the supplied documents. The connected PT Security entries discuss July 2026 patches in general; no specific product, impact, root cause, or remediation details are included.

CVE-2026-28633

Technical details for CVE-2026-28633 are not publicly available in the provided documents; no affected products, root cause, impact, or fix are disclosed. Monitor for updates.

CVE-2026-24081

Technical details for CVE-2026-24081 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-28623

Technical details for CVE-2026-28623 are not provided in the supplied documents; no affected products, root cause, or remediation are described. Monitor PT Security/Android update notes for forthcoming specifics.

CVE-2026-28603

Technical details for CVE-2026-28603 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-28606

Technical details for CVE-2026-28606 are not publicly available in the provided documents. The connected PT- security entries discuss July 2026 patches and CVE lists, but do not reveal specifics about this CVE. Monitor for updates.

CVE-2026-28594

The CVE-2026-28594 entry in this dataset contains placeholder text with no public details in the provided documents. Connected PT-Security items reference CVE-2026-28594 only as part of a patch list, but do not disclose root cause, affected product/version, impact, or fixes. Monitor official disc...

CVE-2026-28618

Technical details for CVE-2026-28618 are not publicly provided in the supplied documents. No product/vendor/component/version or impact info is available here; monitor for updates.

CVE-2026-28644

Technical details for CVE-2026-28644 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected PT Security entries and the CVE listing.

CVE-2026-28642

Technical details for CVE-2026-28642 are not provided in the connected documents. The initial description is reserved/no details. Monitor for updates and additional disclosures from the issuing organization as they become available.

CVE-2026-14480

CVE-2026-14480 affects OpenPLC Runtime v3. An authenticated user can write arbitrary files via the legacy web UI program-upload workflow by storing a attacker-controlled filename (prog_file) that is later used as the destination path. Python os.path.join() honors absolute paths, enabling writes a...

CVE-2026-44383

CVE-2026-44383 concerns Hydro-Québec Le Circuit Electrique charging station backend with insufficient session expiration. The issue allows multiple connections using the same charging station ID, enabling attackers to deploy multiple OCPP clients to overwhelm the backend, impacting availability (...

CVE-2026-42952

CVE-2026-42952 concerns the Hydro-Québec Le Circuit Électrique charging-station backend. The issue is an improper restriction of excessive authentication attempts due to lack of throttling, which could enable a denial-of-service condition. Technical details in the connected records indicate an ex...

CVE-2026-20744

CVE-2026-20744 concerns Hydro-Québec Le Circuit Electrique charging station backend. The issue is an improper access control on the charging station websocket endpoint, allowing connections without authentication and potentially enabling privilege escalation. ICSCERT metrics show critical impact ...

CVE-2026-11913

CVE-2026-11913 concerns a vulnerability in the Drupal module “Mother May I.” The official CVE notes a critical impact (CVSS 9.8) with affected versions listed as wildcards (. ). Connected sources indicate the Drupal project marks the module as unsupported and a fix has not been provided (SA-CONTR...

CVE-2026-11914

Technical details (affected versions, root cause, impact, and available fixes) for CVE-2026-11914 are not publicly provided in the given documents. Monitor for updates from Drupal SA-CONTRIB-2026-046 and related advisories for concrete info.

CVE-2026-11915

The CVE-2026-11915 entry concerns Drupal Brute force attack protection where a vulnerability exists in the Brute force attack protection module affecting versions . . The NVD/NVDC and related records describe the issue as a vulnerability in the Drupal brute-force protection mechanism with impact ...

CVE-2026-15087

CVE-2026-15087 concerns Drupal Clean RESTful. Connected PT-2026-56667 confirms affected versions are Drupal Clean RESTful versions *, i.e., all versions, but details on the exact vulnerability, root cause, exploitability, or fixes are not provided in the connected documents. The related Drupal SA...

CVE-2026-15086

Technical details about CVE-2026-15086 are not publicly available in the provided documents. Monitor for updates from official advisories and vulnerability feeds.

CVE-2026-15089

The CVE-2026-15089 entry concerns a vulnerability in Drupal Commerce guest registration. Affected component: Drupal Commerce guest registration feature; details on affected versions are not provided beyond “. ” in the documents. The CVSS 3.1 base score is listed as 9.1 (CRITICAL) with high confid...

CVE-2026-55175

Spinnaker CVE-2026-55175 affects Rosco/Kustomize bake operations where unsafe YAML tag processing in rosco manifests can lead to remote code execution on rosco pods. Affected versions are prior to 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 across release lines; fixes are available in 2026.1.1, 20...

CVE-2026-44795

CVE-2026-44795 affects Spinnaker (Cloud deployments/baking paths) where unsafe YAML processing bypasses safe deserialization via a non-safe constructor, enabling arbitrary Java class loading and remote code execution. Affected versions precede fixed releases and include 2026.1.0, 2026.0.3, 2025.4...

CVE-2026-55808

CVE-2026-55808 is a Drupal core XSS vulnerability caused by improper input neutralization during web page generation. Affects Drupal core versions including 10.5.x before 10.5.12, 10.6.x before 10.6.11, 11.2.x before 11.2.14, 11.3.x before 11.3.12, and earlier 11.0./11.1. ranges. The issue arises...

CVE-2026-55807

Drupal core is affected by CVE-2026-55807 via a Server-Side Request Forgery (SSRF) in the Media module’s oEmbed URL discovery, allowing the server to be induced to fetch arbitrary URLs. Affected versions include Drupal core from 0.0.0 up to 10.5.12, 10.6.0–10.6.11, 11.2.0–11.2.14, 11.3.0–11.3.12,...

CVE-2026-55804

CVE-2026-55804 affects Drupal core across multiple branches (10.x, 11.x) and is related to a chain of gadget methods that could enable code execution or altered behavior when untrusted data is deserialized. The core issue is described as Improperly Controlled Modification of Dynamically-Determine...

CVE-2026-55806

CVE-2026-55806 affects Drupal core and is caused by a flaw in the rebuild.php front controller’s Host header validation, enabling an open redirect and related cache-poisoning risks. Affected versions include Drupal core 10.5.x before 10.5.12, 10.6.x before 10.6.11, 11.2.x before 11.2.14, and 11.3...

CVE-2026-55803

Drupal core is affected by CVE-2026-55803: Improperly Controlled Modification of Dynamically-Determined Object Attributes, enabling PHP object injection via deserialization. Affected versions include 0.0.0–10.5.12, 10.6.0–10.6.11, 11.2.0–11.2.14, 11.3.0–11.3.12, and 0.0.0–11.0.* / 11.1.*. Remedia...

CVE-2026-15085

The affected software is the Drupal AI SEO/GEO Analyzer module. It is vulnerable to Stored Cross‑site Scripting (XSS) in versions 0.0.0 through 1.1.3. The root cause, as described in the connected DRUPAL-SA-CONTRIB-2026-076 entry and PT-2026-56665, is that the module sends entity content (includi...

CVE-2026-15084

The issue is a Stored XSS in Drupal UI Patterns (SDC in Drupal UI) caused by insufficient sanitization in versions 2.0.0–2.0.17. An attacker must have permissions to create/update content rendered by UI Patterns. Remediation: upgrade to a version later than 2.0.17.