Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

62 New today
66,415 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

630
Jun 16
464
Jun 17
3
Jun 18
352
Jun 19
56
Jun 20
104
Jun 21
317
Jun 22
294
Jun 23
355
Jun 24
376
Jun 25
386
Jun 26
53
Jun 27
313
Jun 28
Jun 29
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 6.5 CVE-2026-58058

Nmap – Integer Underflow in IPv6 Extension Header Parsing_CVE-2026-58058

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so th...

Nmap Nmap CVE
MEDIUM 5 CVE-2026-58057

Flowise – Custom MCP Environment Variable Denylist Bypass via Case Sensitivity_CVE-2026-58057

Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where en...

Flowise Flowise CVE
HIGH 7.6 CVE-2026-58056

RustDesk – FileTransfer Session Authorization Scope Bypass_CVE-2026-58056

RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer sessi...

RustDesk RustDesk CVE
MEDIUM 5.4 CVE-2026-58055

nghttp2 nghttpx – HTTP Request/Response Smuggling via Upgrade Request with Content-Length_CVE-2026-58055

nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-a...

nghttp2 nghttp2 CVE
HIGH 7.2 CVE-2026-58054

MyBB – Privilege Escalation from Limited ACP User Management to Administrator_CVE-2026-58054

MyBB 1.8.40 does not restrict which usergroup a limited Admin Control Panel user may assign when creating or editing users; the user module offers ...

MyBB MyBB CVE
CRITICAL 9.9 CVE-2026-58053

Gitea act_runner – Container Hardening Bypass via Workflow Container Options_CVE-2026-58053

Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfi...

Gitea act_runner CVE
LOW 3.3 CVE-2026-58052

7-Zip – Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision_CVE-2026-58052

7-Zip for Windows through 26.02 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an ...

7-Zip 7-Zip CVE
MEDIUM 6.5 CVE-2026-58051

libssh2 – Free of Uninitialized Pointer in publickey List Cleanup_CVE-2026-58051

libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a pars...

libssh2 libssh2 CVE
HIGH 7 CVE-2026-58050

libssh2 – Integer Overflow in publickey Subsystem Attribute Allocation_CVE-2026-58050

libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_at...

libssh2 libssh2 CVE