Source intelligence
425 collected source records. Original advisories and security research.
300 matching sources · Newest published first
Open CVE tracker →Original publisher records, awaiting Egret editorial review. Headlines open the original source; CVE identifiers open the tracker.
Scroll across the table to see all columns.
| Published | Finding / research | Publisher | Identifiers |
|---|---|---|---|
| Elo Ruby backend has Remote Code Execution via unescaped `#{...}` interpolation in emitted string literals and subtype-constraint labels GHSA: GHSA-7w38-ggh5-v542 CVE: CVE-2026-44266 Reported severity: critical Advisory package entry 1: Affected package: @enspirit/elo (npm) Affected versions: <= 1.0.0 Patched version: 1.0.1 Advisory description: Summary E… |
GitHub Advisory Database | CVE-2026-44266GHSA-7W38-GGH5-V542 |
|
| Elo backends have code injection via unvalidated emission of programmatic AST fields GHSA: GHSA-x9rp-7wh3-2rj5 CVE: CVE-2026-44265 Reported severity: high Advisory package entry 1: Affected package: @enspirit/elo (npm) Affected versions: <= 1.0.0 Patched version: 1.0.1 Advisory description: Summary Elo's… |
GitHub Advisory Database | CVE-2026-44265GHSA-X9RP-7WH3-2RJ5 |
|
| Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability GHSA: GHSA-p3jp-9v83-76w9 Reported severity: high Advisory package entry 1: Affected package: Microsoft.DotNet.ILCompiler (nuget) Affected versions: >= 8.0.0, < 8.0.33 Patched version: 8.0.33 Advisory package entry 2: Af… |
GitHub Advisory Database | CVE-2026-111497GHSA-P3JP-9V83-76W9 |
|
| praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection) GHSA: GHSA-48v2-6jcm-fc99 CVE: CVE-2026-62331 Reported severity: high Advisory package entry 1: Affected package: github.com/mtzanidakis/praktor (go) Affected versions: <= 0.9.0 Patched version: 0.9.1 Advisory descriptio… |
GitHub Advisory Database | CVE-2026-62331GHSA-48V2-6JCM-FC99 |
|
| Keycloak has authentication bypass via jwt algorithm confusion GHSA: GHSA-j97h-3f8r-mrjr CVE: CVE-2026-11800 Reported severity: high Advisory package entry 1: Affected package: org.keycloak:keycloak-services (maven) Affected versions: < 26.6.4 Patched version: 26.6.4 Advisory descri… |
GitHub Advisory Database | CVE-2026-11800GHSA-J97H-3F8R-MRJR |
|
| Netfoil doesn't decrement TTL GHSA: GHSA-9ppr-wfw9-xvr2 Reported severity: medium Advisory package entry 1: Affected package: github.com/tinfoil-factory/netfoil (go) Affected versions: >= 0.3.0, < 0.6.1 Patched version: 0.6.1 Advisory description: Su… |
GitHub Advisory Database | GHSA-9PPR-WFW9-XVR2 |
|
| Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution GHSA: GHSA-h26j-4vp7-x9w2 CVE: CVE-2026-62848 Reported severity: high Advisory package entry 1: Affected package: Metalama.Framework (nuget) Affected versions: >= 2026.1.0-preview, < 2026.1.19 Patched version: 2026.1.19 … |
GitHub Advisory Database | CVE-2026-62848GHSA-H26J-4VP7-X9W2 |
|
| Arc has unauthenticated application log disclosure via `/api/v1/logs` GHSA: GHSA-m3qr-fvp4-78xj Reported severity: low Advisory package entry 1: Affected package: github.com/basekick-labs/arc (go) Affected versions: < 0.0.0-20260615165136-bb7d9761ad98 Patched version: 0.0.0-20260615165136-… |
GitHub Advisory Database | GHSA-M3QR-FVP4-78XJ |
|
| VU#124705: BaseChat – Audio Dating App, Android version 9.8.1, contains multiple vulnerabilities Overview Multiple vulnerabilities have been identified in the Android application, BaseChat – Audio Dating App, version 9.8.1, which ultimately compromise the privacy of users’ personal data and activity. Description Bas… |
CERT/CC | None reported |
|
| CWP2Shell: The Login Page That Never Says No | Blog | VulnCheck Today VulnCheck is disclosing ten vulnerabilities in Control Web Panel (CWP, formerly CentOS Web Panel), the hosting control panel that ships on a large number of internet-facing servers. They are being disclosed in acco… |
VulnCheck | ||
| 3AM Hits European Schools: A Hybrid AI Ransomware Attack, Part Human, Part Agentic Loop I’d like to thank my colleagues, Adrian Schipor and Martin Zugec, for their invaluable contributions to this research. TL;DR: It is the first case of this kind we have investigated, a hybrid operation in which some parts… |
Bitdefender | None reported |
|
| WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability CVE-2026-119977 — WordPress / WordPress Core. WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server d… |
CISA KEV | ||
| DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation GHSA: GHSA-j656-3hf2-fvjc Reported severity: medium Advisory package entry 1: Affected package: @bytebase/dbhub (npm) Affected versions: < 0.22.6 Patched version: 0.22.6 Advisory description: The read-only mode can be by… |
GitHub Advisory Database | GHSA-J656-3HF2-FVJC |
|
| SD JWT JS: Tampered disclosures silently dropped instead of rejected GHSA: GHSA-f9j6-8p6x-r9j6 CVE: CVE-2026-62374 Reported severity: high Advisory package entry 1: Affected package: @sd-jwt/decode (npm) Affected versions: <= 0.19.0 Patched version: Not specified by advisory Advisory pack… |
GitHub Advisory Database | CVE-2026-62374GHSA-F9J6-8P6X-R9J6 |
|
| VU#203719: INFINITT PACS System Manager contains multiple code execution vulnerabilities Overview INFINITT PACS installations using System Manager versions 3.0.11.3 and 3.0.11.5 contain vulnerabilities that may allow an attacker to execute arbitrary code. INFINITT Healthcare has remediated the issues in Syst… |
CERT/CC | ||
| Shutting the Door on the XCPE Botnet Introduction Last week, Google and industry partners dismantled the XCPE backdoor which enrolled more than 1.3 million set-top boxes into a botnet. We assess with high confidence that the backdoor and botnet were intenti… |
Google Threat Intelligence | None reported |
|
| The Rise of LLMJacking: How Threat Actors Monetize Compromised Cloud and Model Resources Written by: Christopher Romano, Codi Starks, Garrett Mahoney, John Wolfram, Josh Murchie, K Singh, Mathew Potaczek, Mike Lombardi, Rik Dolfing Introduction Mandiant responded to multiple incidents in 2026 in which threat… |
Google Threat Intelligence | ||
| Shutting the Door on the XCPE Botnet | Google Cloud Blog Google Threat Intelligence Group Introduction Last week, Google and industry partners dismantled the XCPE backdoor which enrolled more than 1.3 million set-top boxes into a botnet. We assess with high confidence that the… |
Google Threat Intelligence | None reported |
|
| Уязвимость SMS of Death может удаленно выводить из строя Android-смартфоны ИБ-исследователь Марк Бла (Mark Blah) опубликовал в открытом доступе PoC-эксплоит для недавно исправленной в Android уязвимости CVE-2026-58882, также получившей название SMS of Death. С помощью специально подготовленного… |
Xakep | ||
| Exploitation Targeting Node-RED, a Tool Embedded in ICS Products | Blog | VulnCheck On October 30, 2026, one of our canaries caught an attacker exploiting CVE-2026-58115, an unauthenticated Node-RED admin API flaw, to deploy a flow that downloads and runs a Linux bot. The request came from an IP in Micr… |
VulnCheck | ||
| Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory GHSA: GHSA-8fmv-6rg5-5924 CVE: CVE-2026-118761 Reported severity: high Advisory package entry 1: Affected package: github.com/kubeflow/pipelines (go) Affected versions: < 0.0.0-20260831164314-ba9ae72cc860 Patched version… |
GitHub Advisory Database | CVE-2026-118761GHSA-8FMV-6RG5-5924 |
|
| Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs GHSA: GHSA-wg5q-x4j9-qm54 CVE: CVE-2026-118759 Reported severity: high Advisory package entry 1: Affected package: github.com/kubeflow/pipelines (go) Affected versions: < 0.0.0-20260904182349-be4723e33727 Patched version… |
GitHub Advisory Database | CVE-2026-118759GHSA-WG5Q-X4J9-QM54 |
|
| pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search GHSA: GHSA-5849-834g-hvw5 CVE: CVE-2026-119203 Reported severity: high Advisory package entry 1: Affected package: pypdf (pip) Affected versions: < 6.21.4 Patched version: 6.21.4 Advisory description: Impact An attacker … |
GitHub Advisory Database | CVE-2026-119203GHSA-5849-834G-HVW5 |
|
| pypdf has possible large memory usage when parsing page tree GHSA: GHSA-cggf-277g-3q54 CVE: CVE-2026-119204 Reported severity: high Advisory package entry 1: Affected package: pypdf (pip) Affected versions: < 6.21.4 Patched version: 6.21.4 Advisory description: Impact An attacker … |
GitHub Advisory Database | CVE-2026-119204GHSA-CGGF-277G-3Q54 |