Automated cyber signal feeds.
CVE ID :CVE-2026-32257 Published : Aug. 26, 2026, 5:16 p.m. | 1 hour, 57 minutes ago Description :Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.2.13, custom CSS supplied through the Brand Settings…
CVE ID :CVE-2026-80104 Published : Aug. 25, 2026, 8:18 p.m. | 29 minutes ago Description :DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skill_upload in packages takes file.filename as…
CVE ID :CVE-2026-45018 Published : Aug. 25, 2026, 8:16 p.m. | 31 minutes ago Description :Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit expose the…
CVE ID :CVE-2026-65105 Published : Aug. 25, 2026, 8:15 p.m. | 32 minutes ago Description :NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit…
CVE ID :CVE-2026-65084 Published : Aug. 25, 2026, 8:15 p.m. | 32 minutes ago Description :NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might…
CVE ID :CVE-2026-65083 Published : Aug. 25, 2026, 8:15 p.m. | 32 minutes ago Description :NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit…
CVE ID :CVE-2026-80049 Published : Aug. 25, 2026, 6:23 p.m. | 24 minutes ago Description :Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the raw JSON request…
CVE ID :CVE-2026-79787 Published : Aug. 25, 2026, 6:23 p.m. | 24 minutes ago Description :Alluxio’s S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract…
CVE ID :CVE-2026-76197 Published : Aug. 25, 2026, 6:18 p.m. | 29 minutes ago Description :Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability that could result in…
CVE ID :CVE-2026-76193 Published : Aug. 25, 2026, 6:18 p.m. | 29 minutes ago Description :Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current…