@euvd-bot.bsky.social🚨 EUVD-2026-101116 📊 8.7/10 🏢 F5 📝 Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter ve... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101116 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-101465 📊 8.5/10 🏢 Juniper Networks 📝 An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101465 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-101467 📊 9.2/10 🏢 Juniper Networks 📝 An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthentic... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101467 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-101822 📊 6.4/10 🏢 Hewlett Packard Enterprise 📝 A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101822 #cybersecurity #infosec #cve #euvd
@stackflag.bsky.socialCVE-2026-42093 - redash
If you run Redash version 8.0.0 through 26.8.x, a user who can view query results can trick the system into running their own database commands. This could let them read, change, or…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-103415 - netx duo
The NetX Duo client may copy a server-provided cookie into a follow‑up TLS handshake message without checking its size. A malicious server can send an oversized cookie,…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-110623 - papermerge-core
Versions of Papermerge Core up to 3.5.3 let a logged‑in user give themselves access to any document by guessing its internal ID. This could let them read, change…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-110622 - papermerge-core
In Papermerge Core versions up to 3.5.3, the system does not properly verify who is allowed to manage pages or run OCR. As a result, any user who is signed in can…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-110621 - swetrix
Swetrix Cloud versions before 5.1.0 allow a logged‑in user to move any project into an organization they control. This lets the attacker view the project's analytics, change its settings, or…
Too many irrelevant or confusing CVEs? Use stackflag.com
@hugovalters.bsky.socialCVE-2026-68919 GoCD stored XSS, CVSS 8.7. Crafted material comments run JS in other users' sessions across pipeline views. Patch still under review - restrict material write access and watch for updates. https://www.valtersit.com/cve/CVE-2026-68919/ #CVE #infosec #GoCD
@stackflag.bsky.socialCVE-2025-71433 - kaneo
If you run Kaneo version older than 2.1.6, a signed‑in user can look at or change data in other workspaces simply by guessing or using IDs that appear in shared links. This could expose…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-82026 - radar
Radar versions before 1.12.2 let anyone connect to a web endpoint and start a command‑line session with the program’s own permissions. This can give an attacker the ability to run…
Too many irrelevant or confusing CVEs? Use stackflag.com
@euvd-bot.bsky.social🚨 EUVD-2024-47981 📊 8.1/10 🏢 Red Hat 📝 A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in a... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47981 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2024-47983 📊 7.0/10 🏢 Red Hat 📝 A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a s... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47983 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-101813 📊 7.5/10 🏢 backdropcms 📝 Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101813 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-101814 📊 5.9/10 🏢 Hewlett Packard Enterprise 📝 A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101814 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-101815 📊 7.5/10 🏢 Hewlett Packard Enterprise 📝 A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101815 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-101816 📊 8.8/10 🏢 Netgate 📝 Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101816 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97492 📊 9.1/10 🏢 thirty bees 📝 Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attacke... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97492 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97681 📊 8.6/10 🏢 unclecode 📝 Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wra... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97681 #cybersecurity #infosec #cve #euvd