Automated cyber signal feeds.
CVE ID :CVE-2026-85396 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can…
CVE ID :CVE-2026-85394 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the…
CVE ID :CVE-2026-85393 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm…
CVE ID :CVE-2026-85391 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the…
CVE ID :CVE-2026-85388 Published : Sept. 3, 2026, 6:54 p.m. | 7 minutes ago Description :Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expressions into ORDER BY…
CVE ID :CVE-2026-84381 Published : Sept. 2, 2026, 7:18 p.m. | 43 minutes ago Description :HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src and src when the remote origin uses…
CVE ID :CVE-2026-19117 Published : Sept. 2, 2026, 7:17 p.m. | 44 minutes ago Description :Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments…
Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. “The Fairwind Program gives…
CVE ID :CVE-2026-66786 Published : Sept. 2, 2026, 6:21 p.m. | 1 hour, 40 minutes ago Description :A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper…
CVE ID :CVE-2026-53670 Published : Sept. 2, 2026, 6:20 p.m. | 1 hour, 41 minutes ago Description :PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add() silently skips offset-variable updates…