Recent Advisories

Severity ID Title Vendor Product Date Type
MEDIUM 5 CVE-2026-45407

Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch_CVE-2026-45407

Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash's touch command, which applies the defa...

dokku dokku < 0.38.2 CVE
CRITICAL 9 CVE-2026-45406

Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval_CVE-2026-45406

Dokku is a docker-powered PaaS. Prior to 0.38.2, the openresty-vhosts plugin copies files from an app's openresty/http-includes/ git repository dir...

dokku dokku < 0.38.2 CVE
CRITICAL 9 CVE-2026-45405

Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add_CVE-2026-45405

Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:from-archive and certs:add commands extract user-supplied tar/zip archives into temporary ...

dokku dokku < 0.38.2 CVE
MEDIUM 5 CVE-2026-28385

SSRF via image import from URL allows internal network probing by authenticated users_CVE-2026-28385

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticat...

Canonical lxd 6.0 CVE
MEDIUM 4.9 CVE-2026-13434

Virt-controller-rhel9: kubevirt: kubevirt: multus default-network annotation injection via unvalidated tenant networkname when externalnetresourceinjection is enabled_CVE-2026-13434

A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, th...

Red Hat Red Hat OpenShift Virtualization 4 CVE
MEDIUM 5.3 CVE-2026-11779

PayloadCMS 3.84.1 – Authenticated account lockout bypass through default unlock access_CVE-2026-11779

An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

PayloadCMS PayloadCMS 3.84.1 CVE
MEDIUM 5.3 CVE-2025-32423

AutoGPT: There is a DoS vulnerability in ExtractTextInformationBlock_CVE-2025-32423

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there i...

Significant-Gravitas AutoGPT < 0.6.32 CVE
MEDIUM 5.3 CVE-2025-32394

AutoGPT: There is a DoS vulnerability in AITextSummarizerBlock_CVE-2025-32394

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Prior to 0.6.32, there i...

Significant-Gravitas AutoGPT < 0.6.32 CVE
NONE B6A66232-7621-

Sql-injection-scanner_B6A66232-7621-5872-A51D-EDDA3F824073

Sql-injection-scanner Developing a security scanning tool that can quickly, reliably, and automatically detect SQL Injection vulnerabilities in web...

N/A N/A GITHUBEXPLOIT
NONE THN:7A6FC6E72B7...

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign_THN:7A6FC6E72B7906A66B33E84A6B61E75E

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHsYcZgd4WIkN0k-b4_j7JxBgi0R0dzj0jSwSWVgItyIy88VoZK5z8BAiwjmYnou7YLrNuckCgQvnHXV2KYH...

N/A N/A THN