Automated cyber signal feeds.
CVE ID :CVE-2026-82751 Published : Sept. 6, 2026, 5:17 p.m. | 2 hours, 1 minute ago Description :Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer’s gas cost per sponsored payment by…
CVE ID :CVE-2026-82750 Published : Sept. 6, 2026, 5:17 p.m. | 2 hours, 1 minute ago Description :Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer’s gas cost per sponsored payment by…
CVE ID :CVE-2026-19633 Published : Sept. 6, 2026, 4:16 p.m. | 3 hours, 2 minutes ago Description :PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted…
CVE ID :CVE-2026-86258 Published : Sept. 6, 2026, 1:17 p.m. | 6 hours, 2 minutes ago Description :nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that uses string-prefix comparison instead of proper path validation. Attackers can read files from sibling…
CVE ID :CVE-2026-86259 Published : Sept. 6, 2026, 1:17 p.m. | 6 hours, 2 minutes ago Description :OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider…
CVE ID :CVE-2026-67277 Published : Sept. 5, 2026, 8:17 p.m. | 56 minutes ago Description :RouterOS accepts a “related” btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP…
CVE ID :CVE-2026-67281 Published : Sept. 5, 2026, 8:17 p.m. | 56 minutes ago Description :RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization.…
CVE ID :CVE-2026-86060 Published : Sept. 5, 2026, 8:17 p.m. | 56 minutes ago Description :RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be…
CVE ID :CVE-2026-67276 Published : Sept. 5, 2026, 8:17 p.m. | 56 minutes ago Description :RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus…
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store’s server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5.…