Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-07-31 06:11Z
6d ago
2026-07-24 17:17Z
HIGH

CVE-2026-66032 — libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open()

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-66032

libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftp_open() function in src/sftp.c that allows a malicious SSH server to corrupt the heap of any authenticated client opening an SFTP session. When a server responds to SSH_FXP_OPEN with SSH_FXP_STATUS containing FX_OK, the response data buffer is freed, and if a subsequent sftp_packet_require() call returns a specific error such as LIBSSH2_ERROR_CHANNEL_PACKET_EXCEEDED, the same poin CVSSv3.1 8.8 (HIGH)

CWECWE 415TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
6d ago
2026-07-24 17:17Z
HIGH

CVE-2026-65709 — sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-65709

sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API that allows API token holders to enumerate account metadata, overwrite passwords, and delete accounts across the entire vault without per-account access control. Attackers can invoke AccountController methods such as viewAction, editAction, deleteAction, and editPassAction without AccountFilterUser checks to modify or delete accounts beyond the scope of their assigne CVSSv3.1 8.3 (HIGH)

CWECWE 639TYPVulnerability
8.3
CVSS v3.1
92
Edit Score
6d ago
2026-07-24 17:17Z
HIGH

CVE-2026-65708 — sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-65708

sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachments belonging to accounts they do not have ACL permissions for by exploiting missing authorization checks in AccountFileController. Attackers can supply arbitrary numeric file IDs through the download, view, delete, upload, and list actions to enumerate and manipulate any attachment in the vault, bypassing account-leve CVSSv3.1 8.1 (HIGH)

CWECWE 639TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
6d ago
2026-07-24 16:16Z
HIGH

CVE-2026-66027 — Suna: before 0.9.102 contains a broken access control vulnerability in the message queue API

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-66027

Suna before 0.9.102 contains a broken access control vulnerability in the message queue API that allows authenticated attackers to access and manipulate queue resources belonging to other users by exploiting missing ownership and account isolation checks. Attackers can read pending prompt queues of all users, read or delete individual sessions, and inject arbitrary prompts into another user's session queue, causing the background drainer to forward malicious messages to the v CVSSv3.1 8.3 (HIGH)

CWECWE 862VNDSunaTYPVulnerability
8.3
CVSS v3.1
92
Edit Score
6d ago
2026-07-24 16:16Z
HIGH

CVE-2026-64255 — Linux: When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64255

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consist CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
6d ago
2026-07-24 16:16Z
HIGH

CVE-2026-64247 — Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64247

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: hyper-v: Bound the bank index when querying sparse banks When checking if a VP ID is included in a sparse bank set, explicitly check that the ID can actually be contained in a sparse bank (the TLFS allows for a maximum of 64 banks of 64 vCPUs each). When handling a paravirtual TLB flush for L2, the VP ID is copied verbatim from the enlightened VMCS, without any bounds check, i.e. isn't guaranteed CVSSv3.1 8.4 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
6d ago
2026-07-24 16:16Z
HIGH

CVE-2026-64235 — Linux: Kernel panic - not syncing: Fatal exception This small reproducer allows to easily trigger

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64235

In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIG_CALL_DEPTH_TRACKING enabled on an x86 retbleed-affected platform (eg: Skylake), with retbleed=stuff, registering a dynamic ftrace trampoline crashes on the first call into the traced function: BUG: unable to handle page fault for address: ffff88817ae18880 #PF: supervisor write access in kernel mode #PF: error_code(0x000 CVSSv3.1 8.1 (HIGH) · EPSS 5th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
6d ago
2026-07-24 16:16Z
CRIT

CVE-2026-64232 — Linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64232

In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_insert_cloned_request blk_insert_cloned_request() already recomputes nr_phys_segments against the bottom queue, because "the queue settings related to segment counting may differ from the original queue." The exact same reasoning applies to integrity segments: a stacked driver's underlying queue can have tighter virt_boundary_mask, seg_boundary_mask, or max_segm CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
6d ago
2026-07-24 16:16Z
HIGH

CVE-2026-64223 — Linux: Under KUnit + KASAN with an exact-sized element allocation the OOB read is reported

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64223

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211_tid_to_link_map_size_ok() validates negotiated TTLM elements against the number of link-map entries indicated by link_map_presence. ieee80211_parse_neg_ttlm() must consume the same layout. The parser advanced its cursor for every TID, including TIDs whose presence bit is clear and therefore have no map bytes in the element. A sparse map ca CVSSv3.1 8.1 (HIGH) · EPSS 6th percentile

TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
6d ago
2026-07-24 16:16Z
CRIT

CVE-2026-64216 — Linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-64216

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() netfs_unlock_abandoned_read_pages(rreq) accesses the index of the folios it is wanting to unlock and compares that to rreq->no_unlock_folio so that it doesn't unlock a folio being read for netfs_perform_write() or netfs_write_begin(). However, given that netfs_unlock_abandoned_read_pages() is called _after_ NETFS_RREQ_IN_PROGRESS is cleared, t CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
6d ago
2026-07-24 15:30Z
INFO

v3.0.0

AzureHound releases·github.com

AzureHound v3.0.0 released with a single change enforcing uppercase normalization for object IDs (BED-8944). This is a minor version bump addressing a specific data handling improvement in the Azure reconnaissance tool.

SRFIdentitySRFCloudSWAzurehoundVNDSpecteropsTYPTool
28
Edit Score
6d ago
2026-07-24 15:19Z
HIGH

CVE-2026-8789 — Easy: The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-8789

The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the `ea_delete_multiple_connections` AJAX action in all versions up to, and including, 3.12.27. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary connection records from the `wp_ea_connections` table, disrupting the plugin's core booking functionality. CVSSv3.1 8.1 (HIGH)

CWECWE 863VNDEasyTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
6d ago
2026-07-24 15:18Z
CRIT

CVE-2026-58630 — Azure: Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-58630

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 284VNDAzureTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
6d ago
2026-07-24 15:18Z
CRIT

CVE-2026-58586 — Image: Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-58586

Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 (released 2013-03-20). That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decodes an untrusted WebP image reaches the bundled decoder. Because the library is compiled into the module, upgrading the system libwebp does not remediate this. CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

VNDImageTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
6d ago
2026-07-24 15:18Z
CRIT

CVE-2026-57106 — Server: Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-57106

Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 918TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
6d ago
2026-07-24 15:18Z
CRIT

CVE-2026-56163 — Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-56163

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. CVSSv3.1 10.0 (CRITICAL)

CWECWE 306TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
6d ago
2026-07-24 15:17Z
HIGH

CVE-2026-16801 — Improper control of generation of code ('Code Injection') in the variables feature in Devolutions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-16801

Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with variable write permission to execute arbitrary PowerShell code via a crafted variable value that is not properly escaped when written to the variables configuration file. CVSSv3.1 8.8 (HIGH)

CWECWE 94TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
6d ago
2026-07-24 15:17Z
HIGH

CVE-2026-16800 — Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-16800

Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with schedule creation permission to execute arbitrary PowerShell code via crafted schedule parameter names concatenated into a script invocation. CVSSv3.1 8.8 (HIGH)

CWECWE 94TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
6d ago
2026-07-24 13:18Z
HIGH

CVE-2026-45813 — Out: Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-45813

Out-of-bounds Write, Integer Underflow (Wrap or Wraparound) vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service  "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read. This can be triggered by nearby devices over Bluetooth connection, however pairing is required prior to accessing BASS service, which depending on device configuration may or may not require user action. Thi CVSSv3.1 8.8 (HIGH)

CWECWE 787CWECWE 191TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
6d ago
2026-07-24 10:16Z
CRIT

CVE-2026-16634 — TOML: TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-16634

TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrusted TOML to from_toml risks a stack overflow from a deeply-nested document. TOML::XS version 0.06 or later uses the successor tomlc17 library. CVSSv3.1 9.8 (CRITICAL) · EPSS 15th percentile

CWECWE 1104VNDTomlTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
6d ago
2026-07-24 09:16Z
CRIT

CVE-2026-15704 — Eclipse: In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-15704

In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are vulnerable to an authorization bypass caused by inconsistent trailing-slash handling between the ABAC middleware and the HTTP router. The shared router configuration used Chi's `middleware.StripSlashes`, so a request such as `GET /shells/` was dispatched to the registered `GET /shells` route. However, the ABAC middleware evaluated the original request path including the trailing CVSSv3.1 9.8 (CRITICAL)

CWECWE 284CWECWE 863CWECWE 180VNDEclipseTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
6d ago
2026-07-24 07:16Z
CRIT

CVE-2026-12877 — Project: The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 does not

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-12877

The Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0 does not sanitise and escape user supplied input before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection attacks. This is exploitable in the Project Management, Bug and Issue Tracking Plugin WordPress plugin before 5.1.0's standard front-end issue-tracker configuration. CVSSv3.1 9.1 (CRITICAL)

CWECWE 287VNDProjectTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
6d ago
2026-07-24 06:16Z
HIGH

CVE-2026-16870 — Snowflake: Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-16870

Multiple security vulnerabilities in Snowflake libsnowflakeclient versions prior to 2.9.2 could allow remote code execution and credential exfiltration. A stack-based buffer overflow in the file download path could allow remote code execution on a victim host. An attacker could exploit this by uploading a file with a crafted encryption metadata field to a shared internal stage that a victim process later downloads, and impact would be limited to deployments where principals w CVSSv3.1 8.8 (HIGH)

CWECWE 918CWECWE 787CWECWE 121VNDSnowflakeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
1w ago
2026-07-24 05:16Z
HIGH

CVE-2026-66140 — Exim: before 4.99.5 allows directory traversal to access files outside of the spool area

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled. CVSSv3.1 8.4 (HIGH)

CWECWE 24VNDEximTYPVulnerability
8.4
CVSS v3.1
92
Edit Score
1w ago
2026-07-24 04:16Z
HIGH

CVE-2026-12736 — Wpify: The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-12736

The Wpify Woo plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 5.4.16. This is due to the SettingsApi::save_option() REST route (POST /wp-json/wpify-woo/v1/option) passing the request-supplied 'option' and 'data' parameters directly to update_option() without any option-name allowlist or value sanitization, while the permission_callback only verifies the manage_woocommerce capability. This makes it possible for authenticated attacke CVSSv3.1 8.0 (HIGH)

CWECWE 269VNDWpifyTYPVulnerability
8.0
CVSS v3.1
90
Edit Score