Vulnerabilities and CVEs

23:26 Vulnerability

CVE-2026-82379: Apache Roller: WSSE digest authentication headers can be replayed

CVE-2026-82379oss-security

23:24 Vulnerability

CVE-2026-82378: Apache Roller: OAuth authorization endpoint trusts request-supplied identity

CVE-2026-82378oss-security

23:22 Vulnerability

CVE-2026-82377: Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers

CVE-2026-82377oss-security

23:21 Vulnerability

CVE-2026-82376: Apache Roller: XML external entity processing in trackback response parser

CVE-2026-82376oss-security

23:19 Vulnerability

CVE-2026-82375: Apache Roller: Server-side request forgery via entry trackback and enclosure URLs

CVE-2026-82375oss-security

23:17 Vulnerability

CVE-2026-82348: Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

CVE-2026-82348oss-security

23:03 Exploited

U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

Security Affairs

21:03 Vulnerability

[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

oss-security

21:01 Vulnerability

Re: XSS vulnerability in

oss-security

20:40 Patch

Zimbra security advisory (AV26-964)

Canadian Centre for Cyber Security

20:13 Vulnerability

Elementor WordPress flaw lets attackers create admin accounts

BleepingComputer

19:28 Patch

Chrome Dev for Android Update

Chrome Releases

19:24 Vulnerability

CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks

CVE-2026-5430BleepingComputer

19:04 Vulnerability

Bitget blames North Korea for $387.5M crypto wallet raid

The Register

18:52 Vulnerability

Wordfence Bug Bounty Program Monthly Report – June 2026

Wordfence

18:25 Vulnerability

VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities

CERT/CC

17:33 Exploited

Mikrotik security advisory (AV26-887) – Update 2

CVE-2026-67276CVE-2026-67277Canadian Centre for Cyber Security

17:28 Patch

Chrome Dev for Desktop Update

Chrome Releases

16:00 Patch

CVE-2026-85921 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

CVE-2026-85921Microsoft Security Response Center

16:00 Patch

CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability

CVE-2026-32157Microsoft Security Response Center