Automated cyber signal feeds.
CVE ID :CVE-2026-94572 Published : Sept. 21, 2026, 8:13 p.m. | 46 minutes ago Description :In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control characters. The value is written verbatim…
CVE ID :CVE-2026-94488 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :Telegram Desktop before 6.9.4 allows XSS in the HTML exporter. (The first fixed stable version is 7.0.1.) This occurs in button.text.toUtf8 in export_output_html.cpp. Exploitation cannot occur…
CVE ID :CVE-2026-62182 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.21.0 until 1.21.2, 1.22.2, and 1.23.1, ConfigUpdateJob processing…
CVE ID :CVE-2026-62369 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until 1.21.2, 1.22.2, and 1.23.1, the DecompressTarGz…
CVE ID :CVE-2026-48826 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :HomeBox is a home inventory and organization system. Prior to 0.26.0, HandleWipeInventory in backend authorizes POST /v1/actions/wipe-inventory through the global ctx.User.IsOwner value instead of the caller’s…
CVE ID :CVE-2026-48975 Published : Sept. 21, 2026, 6:17 p.m. | 42 minutes ago Description :HomeBox is a home inventory and organization system. Prior to 0.26.0, MaintenanceEntryRepository.Update and MaintenanceEntryRepository.Delete in backend use UpdateOneID(id) and DeleteOneID(id) without verifying that the maintenance entry…
CVE ID :CVE-2026-88855 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions saveGallery() passes form data through…
CVE ID :CVE-2026-88856 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions updateOSGallery(), reached via task=update_osgallery,…
CVE ID :CVE-2026-88857 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions saveWatermark() copied an uploaded…
CVE ID :CVE-2026-88854 Published : Sept. 20, 2026, 6:16 p.m. | 25 minutes ago Description :Joomla Extension – OrdaSoft.com – Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 – The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText…