Automated cyber signal feeds.
CVE ID :CVE-2026-100387 Published : Sept. 25, 2026, 8:13 p.m. | 1 hour, 16 minutes ago Description :pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers…
CVE ID :CVE-2026-84462 Published : Sept. 25, 2026, 6:17 p.m. | 1 hour, 11 minutes ago Description :Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a security filter that protects Zammad’s AI Agent configuration can be bypassed…
CVE ID :CVE-2026-61525 Published : Sept. 25, 2026, 6:17 p.m. | 1 hour, 11 minutes ago Description :Zammad is a web based open source helpdesk/customer support system. In 7.0.2 and 7.1.0, zammad’s session management for websocket and long-polling connections is susceptible to…
CVE ID :CVE-2026-56731 Published : Sept. 25, 2026, 6:17 p.m. | 1 hour, 11 minutes ago Description :Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a low-privilege authenticated user may inject arbitrary HTML markup, including JavaScript event…
CVE ID :CVE-2026-56733 Published : Sept. 25, 2026, 6:17 p.m. | 1 hour, 11 minutes ago Description :Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2 and 7.1.0, this issue concerns a lack of discursive validation within the…
CVE ID :CVE-2026-56725 Published : Sept. 25, 2026, 6:17 p.m. | 1 hour, 11 minutes ago Description :Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, summary An unauthenticated request to POST /api/v1/import/otrs/import_check blocks a Zammad request worker…
CVE ID :CVE-2026-95699 Published : Sept. 24, 2026, 8:39 p.m. | 40 minutes ago Description :Prior to 9/18/2026, the iSteamX mobile application’s AWS policy could grant authenticated users access to wildcard MQTT topics, which can expose other users’ device data and…
CVE ID :CVE-2026-96883 Published : Sept. 24, 2026, 8:17 p.m. | 1 hour, 3 minutes ago Description :pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to…
CVE ID :CVE-2026-93289 Published : Sept. 24, 2026, 8:17 p.m. | 1 hour, 3 minutes ago Description :The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process. Severity: 9.0…
CVE ID :CVE-2026-93291 Published : Sept. 24, 2026, 8:17 p.m. | 1 hour, 3 minutes ago Description :Omni C20 lacks proper certificate validation which could allow an attacker to perform a man-in-the-middle attack which could allow them to execute arbitrary code. Severity:…