CVE ID :CVE-2026-82549 Published : Aug. 30, 2026, 4:16 p.m. | 3 hours, 25 minutes ago Description :A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation…
CVE ID :CVE-2026-82653 Published : Aug. 30, 2026, 3:16 p.m. | 4 hours, 25 minutes ago Description :SiYuan before v3.8.1 contains a stored cross-site scripting vulnerability in confirmDialog() where unescaped package names and notebook names are interpolated directly into innerHTML assignments. Attackers…
CVE ID :CVE-2026-82654 Published : Aug. 30, 2026, 3:16 p.m. | 4 hours, 25 minutes ago Description :SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block’s…
CVE ID :CVE-2026-82645 Published : Aug. 30, 2026, 3:16 p.m. | 4 hours, 25 minutes ago Description :AVideo (current commit e01e41ecc and earlier) exposes stream credentials through the plugin endpoint. Supplying a ‘token’ request parameter waives both the Live::canRestream() access gate and…
CVE ID :CVE-2026-82475 Published : Aug. 29, 2026, 5:18 p.m. | 2 hours, 15 minutes ago Description :iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to validate workflow ownership. Authenticated attackers can enumerate workflow identifiers…
CVE ID :CVE-2026-82473 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verification. Attackers can reach CloudCore on port 10002 to mark…
CVE ID :CVE-2026-82460 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use…
CVE ID :CVE-2026-82461 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak realm and client roles. Attackers can forge access tokens…
CVE ID :CVE-2026-82463 Published : Aug. 29, 2026, 5:17 p.m. | 2 hours, 15 minutes ago Description :pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the profile type validation logic. Attackers can authenticate through a weaker client and…
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2, is rated Critical by Cosmos Labs…