@thehackerwire.bsky.social🟠 CVE-2026-100839 - High (8.4)
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest...
https://www.thehackerwire.com/vulnerability/CVE-2026-100839/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100838 - High (8.1)
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100838/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100847 - High (7.5)
AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100847/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100846 - High (7.6)
MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pi...
https://www.thehackerwire.com/vulnerability/CVE-2026-100846/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100845 - High (7.8)
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that...
https://www.thehackerwire.com/vulnerability/CVE-2026-100845/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100852 - High (8.8)
AzuraCast through 0.23.x contains a command injection vulnerability in the Liquidsoap config gene...
https://www.thehackerwire.com/vulnerability/CVE-2026-100852/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100851 - High (7.6)
AzuraCast before 0.23.8 contains a broken access control vulnerability in the GET /api/station/{i...
https://www.thehackerwire.com/vulnerability/CVE-2026-100851/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100850 - High (7.7)
AzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100850/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100857 - High (8)
AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpStrin...
https://www.thehackerwire.com/vulnerability/CVE-2026-100857/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100856 - High (8.8)
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password fiel...
https://www.thehackerwire.com/vulnerability/CVE-2026-100856/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100865 - High (8.8)
Heym before 0.0.53 contains multiple independent vulnerabilities. (1) The workflow condition eval...
https://www.thehackerwire.com/vulnerability/CVE-2026-100865/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100864 - High (8.8)
heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map...
https://www.thehackerwire.com/vulnerability/CVE-2026-100864/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100661 - High (7.5)
Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4.2.17.Final conta...
https://www.thehackerwire.com/vulnerability/CVE-2026-100661/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100672 - High (7.5)
The Comments plugin (getgrav/grav-plugin-comments) for Grav CMS through version 1.2.10 registers ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100672/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100671 - High (8)
Grav is a flat-file CMS. In versions 2.0.19 through 2.0.24 — and in 2.0.0 through 2.0.18 and 1....
https://www.thehackerwire.com/vulnerability/CVE-2026-100671/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100670 - High (8.8)
Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and acc...
https://www.thehackerwire.com/vulnerability/CVE-2026-100670/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100669 - High (7.5)
Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are mat...
https://www.thehackerwire.com/vulnerability/CVE-2026-100669/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100679 - High (8.8)
stoatchat before 0.15.5 fails to validate that MFA tickets belong to the authenticated user, allo...
https://www.thehackerwire.com/vulnerability/CVE-2026-100679/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100676 - High (8.2)
January, the media proxy/embed service of stoatchat (stoatchat/stoatchat), before version 0.15.5 ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100676/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100673 - High (8.2)
The Grav Data Manager plugin (getgrav/grav-plugin-datamanager) versions 1.0.1 through 1.4.4 rende...
https://www.thehackerwire.com/vulnerability/CVE-2026-100673/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
