@thehackerwire.bsky.social🟠 CVE-2026-100587 - High (8.8)
OpenClaw versions before 2026.7.1 fail to properly validate owner authorization in the Codex comp...
https://www.thehackerwire.com/vulnerability/CVE-2026-100587/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100586 - High (8.8)
OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization when creating native...
https://www.thehackerwire.com/vulnerability/CVE-2026-100586/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100585 - High (8)
OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-only authorization r...
https://www.thehackerwire.com/vulnerability/CVE-2026-100585/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100589 - High (8.3)
OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that...
https://www.thehackerwire.com/vulnerability/CVE-2026-100589/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100599 - High (8.8)
OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply the configured exec approval path to Go...
https://www.thehackerwire.com/vulnerability/CVE-2026-100599/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100597 - High (7.8)
OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-check time-of-use ra...
https://www.thehackerwire.com/vulnerability/CVE-2026-100597/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100596 - High (8.8)
OpenClaw versions before 2026.7.1 fail to properly authorize non-owner users executing MCP config...
https://www.thehackerwire.com/vulnerability/CVE-2026-100596/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100368 - High (8.4)
CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specialization...
https://www.thehackerwire.com/vulnerability/CVE-2026-100368/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-5267 - High (7.5)
Ciena Navigator Network
Control Suite (NCS) contains an information exposure vulnerability in an
...
https://www.thehackerwire.com/vulnerability/CVE-2026-5267/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100369 - High (8.4)
CliInvoke and its formerly named `AlastairLundy.CliInvoke` package are .NET libraries for invokin...
https://www.thehackerwire.com/vulnerability/CVE-2026-100369/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100520 - High (8.8)
Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/up...
https://www.thehackerwire.com/vulnerability/CVE-2026-100520/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100391 - High (8.2)
MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100391/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100389 - High (8.1)
GestSup versions before 3.2.61 contain a remote code execution vulnerability in the basic IMAP co...
https://www.thehackerwire.com/vulnerability/CVE-2026-100389/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-100387 - High (8.1)
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch ...
https://www.thehackerwire.com/vulnerability/CVE-2026-100387/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-57443 - High (7.5)
SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2...
https://www.thehackerwire.com/vulnerability/CVE-2026-57443/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-10758 - High (7.5)
Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for...
https://www.thehackerwire.com/vulnerability/CVE-2026-10758/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-91765 - High (7.5)
cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit...
https://www.thehackerwire.com/vulnerability/CVE-2026-91765/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@thehackerwire.bsky.social🟠 CVE-2026-96795 - High (8.8)
Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/g...
https://www.thehackerwire.com/vulnerability/CVE-2026-96795/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
@hendryadrian.bsky.socialElementor WordPress plugin versions 4.3.0 and 4.3.1 contain a CSRF flaw that can let a logged-in admin create an attacker-controlled admin account via a REST API bypass. #Elementor #WordPress #Patchstack
@thehackerwire.bsky.social🔴 CVE-2026-97413 - Critical (9.8)
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rtrs-srv: Fix integer u...
https://www.thehackerwire.com/vulnerability/CVE-2026-97413/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
