https://radar.offseq.com/ hourly 1.0 https://radar.offseq.com/threats hourly 0.9 https://radar.offseq.com/map daily 0.8 https://radar.offseq.com/feeds daily 0.7 https://radar.offseq.com/threats?type=vulnerability daily 0.8 https://radar.offseq.com/threats?severity=critical daily 0.8 https://radar.offseq.com/threats?type=malware daily 0.7 https://radar.offseq.com/threat/cve-2026-17433-improper-authorization-in-nanocoai-nanoclaw-a6559797acd88f4a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-17433%3A%20Improper%20Authorization%20in%20nanocoai%20NanoClaw&severity=medium&id=6a6572fe9c2644c7f8768b6f https://radar.offseq.com/threat/cve-2026-17432-improper-access-controls-in-nousresearch-hermes-agent-63ccd03b197533aa 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-17432%3A%20Improper%20Access%20Controls%20in%20NousResearch%20hermes-agent&severity=low&id=6a655e049c2644c7f83a90e7 https://radar.offseq.com/threat/steam-forum-clickfix-attacks-infect-gamers-with-xmrig-cryptominers-867bfd77e7b3f987 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Steam%20forum%20ClickFix%20attacks%20infect%20gamers%20with%20XMRig%20cryptominers&severity=medium&id=6a6548a29c2644c7f8142c98 https://radar.offseq.com/threat/malicious-code-in-ks-radarradar-npm-3c6afc3e10fa1a9c 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20%40ks-radar%2Fradar%20(npm)&severity=high&id=6a6542049c2644c7f808147f https://radar.offseq.com/threat/malicious-code-in-blessclient-pypi-efb0ee8f0eca0e3b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20blessclient%20(PyPI)&severity=medium&id=6a6542049c2644c7f8081481 https://radar.offseq.com/threat/protonvpn-stores-your-authentication-private-key-in-plaintext-proton-says-its-intended-behavior-190e0251f1882648 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=ProtonVPN%20Stores%20Your%20Authentication%20Private%20Key%20in%20Plaintext%20%E2%80%94%20Proton%20Says%20It%E2%80%99s%20Intended%20Behavior&severity=medium&id=6a6525719c2644c7f8e8071c https://radar.offseq.com/threat/neo-radar-v111-2506f912597aaa5f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=NEO-Radar%20v1.11&severity=medium&id=6a654fc69c2644c7f81c41ae https://radar.offseq.com/threat/what-makes-a-dlp-solution-effective-for-remote-teams-f0585e4c459ee2eb 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=What%20Makes%20a%20DLP%20Solution%20Effective%20for%20Remote%20Teams%3F&severity=medium&id=6a64f4399c2644c7f8aa81e1 https://radar.offseq.com/threat/malicious-code-in-swiperangular-npm-1c59fe7548de78dd 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20swiper_angular%20(npm)&severity=high&id=6a6542049c2644c7f80814c5 https://radar.offseq.com/threat/malicious-sites-use-javascript-to-build-malware-in-browser-memory-23a35ba50ee0bf84 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Malicious%20sites%20use%20JavaScript%20to%20build%20malware%20in%20browser%20memory&severity=medium&id=6a64d49f9c2644c7f886b7f7 https://radar.offseq.com/threat/shinyhunters-data-leaks-fuel-2000-sextortion-email-scam-2ea8579c955d7ff3 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=ShinyHunters%20data%20leaks%20fuel%20%242%2C000%20sextortion%20email%20scam&severity=medium&id=6a64cd9d9c2644c7f87f4603 https://radar.offseq.com/threat/cve-2026-10681-race-in-zephyrproject-zephyr-4421225a751951eb 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-10681%3A%20race%20in%20zephyrproject%20zephyr&severity=medium&id=6a64bfa79c2644c7f86f1d7e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-drmhyperv-validate-resolutioncount-76f72da38acb9acc 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20drm%2Fhyperv%3A%20validate%20resolution_count%20and%20fix%20WIN8%20fallback%20A%E2%80%A6%20(CVE-2026-64524)&severity=medium&id=6a6542059c2644c7f8081b08 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-drmhyperv-validate-vmbus-packet-size-53aed6fea60f5831 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20drm%2Fhyperv%3A%20validate%20VMBus%20packet%20size%20in%20receive%20callback%20hyperv_receive_sub()%E2%80%A6%20(CVE-2026-64527)&severity=medium&id=6a6542059c2644c7f8081afe https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-qat-remove-unused-character-94ca678cacdc3818 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20qat%20-%20remove%20unused%20character%20device%20and%20IOCTLs%20The%20QAT%20driver%20exposes%20a%E2%80%A6%20(CVE-2026-64529)&severity=medium&id=6a6542059c2644c7f8081af2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-tty-serial-samsung-remove-redundant-9bb65999207f0f5c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20tty%3A%20serial%3A%20samsung%3A%20Remove%20redundant%20port%20lock%20acquisition%20in%20rx%20helpers%E2%80%A6%20(CVE-2026-64528)&severity=medium&id=6a6542059c2644c7f8081ae7 https://radar.offseq.com/threat/imagemagick-before-712-27-contains-a-memory-leak-vulnerability-in-the-magick-command-line-interface-bcbbb1d1a6af74c2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=ImageMagick%20before%207.1.2-27%20contains%20a%20memory%20leak%20vulnerability%20in%20the%20magick%20command-line%20interface%20when%20invalid%20options%20are%20provided.%20(CVE-2026-66011)&severity=medium&id=6a6542059c2644c7f8081ae2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-nethandshake-take-a-long-lived-file-a62313e0365f654c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20net%2Fhandshake%3A%20Take%20a%20long-lived%20file%20reference%20at%20submit%E2%80%A6%20(CVE-2026-64523)&severity=medium&id=6a6542059c2644c7f8081adc https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-pinctrl-meson-amlogic-a4-fix-6453a756ed8fbaf8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20pinctrl%3A%20meson%3A%20amlogic-a4%3A%20fix%20deadlock%20issue%20Accessing%20the%20pinconf-pins%20sysfs%E2%80%A6%20(CVE-2026-64521)&severity=medium&id=6a6542059c2644c7f8081ad6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-nfsd-fix-infinite-loop-in-layout-dc9152d12cb179c1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20NFSD%3A%20Fix%20infinite%20loop%20in%20layout%20state%20revocation%20find_one_sb_stid()%20skips%E2%80%A6%20(CVE-2026-64519)&severity=medium&id=6a6542059c2644c7f8081acf https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ethtool-tsconfig-fix-missing-890668df6fb71212 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ethtool%3A%20tsconfig%3A%20fix%20missing%20ethnl_ops_complete()%20tsconfig_prepare_data()%E2%80%A6%20(CVE-2026-64526)&severity=medium&id=6a6542059c2644c7f8081ac3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-drmxegsc-fix-double-free-of-managed-29a0e9e2b8c767fc 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20drm%2Fxe%2Fgsc%3A%20Fix%20double-free%20of%20managed%20BO%20in%20error%20path%20The%20error%20path%20in%E2%80%A6%20(CVE-2026-64517)&severity=medium&id=6a6542059c2644c7f80818a3 https://radar.offseq.com/threat/openremote-before-1262-contains-an-authentication-bypass-vulnerability-in-the-console-registration-api-214f0a64506c4565 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=OpenRemote%20before%201.26.2%20contains%20an%20authentication%20bypass%20vulnerability%20in%20the%20console%20registration%20API%20that%20allows%20unauthenticated%20attackers%20to%E2%80%A6%20(CVE-2026-66013)&severity=critical&id=6a6542059c2644c7f808189e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-tcp-fix-out-of-bounds-access-for-baccf16cd30631cf 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20tcp%3A%20Fix%20out-of-bounds%20access%20for%20twsk%20in%20tcp_ao_established_key().%20(CVE-2026-64518)&severity=medium&id=6a6542059c2644c7f8081897 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-firmware-armffa-bound-5ae672d745d8e0da 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20firmware%3A%20arm_ffa%3A%20Bound%20PARTITION_INFO_GET_REGS%20copies%20The%20register-based%E2%80%A6%20(CVE-2026-64520)&severity=medium&id=6a6542059c2644c7f8081891 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-xfrm-move-policybydst-rcu-sync-from-4f277ec4f1a8a375 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20xfrm%3A%20move%20policy_bydst%20RCU%20sync%20from%20per-netns%20.exit%20to%20.pre_exit%20The%20struct%E2%80%A6%20(CVE-2026-64525)&severity=medium&id=6a6542059c2644c7f808188a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-drmamdgpuvce1-fix-vce-1-firmware-549707c5799013b0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20drm%2Famdgpu%2Fvce1%3A%20Fix%20VCE%201%20firmware%20size%20and%20offsets%20The%20VCPU%20BO%20contains%20the%E2%80%A6%20(CVE-2026-64516)&severity=medium&id=6a6542059c2644c7f8081885 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-netmlx5e-fix-eswitch-mode-block-8b9b4ae1cd7a8d1e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20net%2Fmlx5e%3A%20Fix%20eswitch%20mode%20block%20underflow%20on%20IPsec%20acquire%20SA%E2%80%A6%20(CVE-2026-64522)&severity=medium&id=6a6542059c2644c7f8081874 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-wifi-mac80211-fix-mle-da8fa7f3ce4a0ee4 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20wifi%3A%20mac80211%3A%20fix%20MLE%20defragmentation%20If%20either%20reconf%20or%20EPCS%20multi-link%E2%80%A6%20(CVE-2026-64515)&severity=medium&id=6a6542059c2644c7f808186d https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-x86-unconditionally-recompute-724e9859b5240adf 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20x86%3A%20Unconditionally%20recompute%20CR8%20intercept%20on%20PPR%20update%20The%E2%80%A6%20(CVE-2026-64513)&severity=medium&id=6a6542069c2644c7f80820cd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-adc-adsigmadelta-fix-d3ad07ced61e054e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20adc%3A%20ad_sigma_delta%3A%20fix%20clear_pending_event%20for%20registerless%20devices%E2%80%A6%20(CVE-2026-64502)&severity=medium&id=6a6542069c2644c7f80820c7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-accel-bmc150-clamp-the-device-448939a6d57af75e 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20accel%3A%20bmc150%3A%20clamp%20the%20device-reported%20FIFO%20frame%20count%E2%80%A6%20(CVE-2026-64504)&severity=high&id=6a6542069c2644c7f80820bc https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-rust-block-fix-gendisk-cleanup-paths-2c459ad7a7127db1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20rust%3A%20block%3A%20fix%20GenDisk%20cleanup%20paths%20GenDiskBuilder%3A%3Abuild()%20still%20has%E2%80%A6%20(CVE-2026-64509)&severity=medium&id=6a6542069c2644c7f80820b5 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bpf-support-for-hardening-against-58e25bc793a0682f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20bpf%3A%20Support%20for%20hardening%20against%20JIT%20spraying%20The%20BPF%20JIT%20allocator%20packs%20many%E2%80%A6%20(CVE-2026-64508)&severity=medium&id=6a6542069c2644c7f80820ad https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-acpi-nfit-core-fix-acpinfitinit-4d4aed8bdefd73ba 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ACPI%3A%20NFIT%3A%20core%3A%20Fix%20acpi_nfit_init()%20error%20cleanup%20If%20acpi_nfit_init()%20fails%E2%80%A6%20(CVE-2026-64510)&severity=medium&id=6a6542069c2644c7f80820a2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-adc-adsigmadelta-fix-cs-held-77301b7eed37d84b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20adc%3A%20ad_sigma_delta%3A%20fix%20CS%20held%20asserted%20and%20state%20leaks%20In%E2%80%A6%20(CVE-2026-64501)&severity=medium&id=6a6542069c2644c7f808209c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-acpi-nfit-core-fix-possible-null-17cdbf9e92ee51a4 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ACPI%3A%20NFIT%3A%20core%3A%20Fix%20possible%20NULL%20pointer%20dereference%20After%20commit%E2%80%A6%20(CVE-2026-64511)&severity=medium&id=6a6542069c2644c7f8082094 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-accel-kxsd9-fix-runtime-pm-11711a6033d0fa93 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20accel%3A%20kxsd9%3A%20fix%20runtime%20PM%20imbalance%20on%20write_raw()%20error%E2%80%A6%20(CVE-2026-64503)&severity=low&id=6a6542069c2644c7f8082089 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-acpi-cppc-suppress-ubsan-warning-3e19247b9f9ed800 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ACPI%3A%20CPPC%3A%20Suppress%20UBSAN%20warning%20caused%20by%20field%20misuse%20The%20definition%20of%E2%80%A6%20(CVE-2026-64512)&severity=low&id=6a6542069c2644c7f8081dd4 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-adc-lpc32xx-initialize-020013b33dd87cef 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20adc%3A%20lpc32xx%3A%20Initialize%20completion%20before%20requesting%20IRQ%20In%20the%20report%E2%80%A6%20(CVE-2026-64500)&severity=medium&id=6a6542069c2644c7f8081dc9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-event-fix-event-fifo-reset-race-eb0d7214f71d10ce 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20event%3A%20Fix%20event%20FIFO%20reset%20race%20iio_event_getfd()%20creates%20the%20event%20file%E2%80%A6%20(CVE-2026-64496)&severity=high&id=6a6542069c2644c7f8081dbe https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-adc-ti-ads1119-fix-pm-reference-c8bcabd7d9d49387 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20adc%3A%20ti-ads1119%3A%20fix%20PM%20reference%20leak%20in%20buffer%20preenable%E2%80%A6%20(CVE-2026-64499)&severity=medium&id=6a6542069c2644c7f8081db7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-x86bugs-enable-ibpb-flush-on-bpf-jit-b742bbbbe8239bf2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20x86%2Fbugs%3A%20Enable%20IBPB%20flush%20on%20BPF%20JIT%20allocation%20Enable%20hardening%20against%20JIT%E2%80%A6%20(CVE-2026-64507)&severity=medium&id=6a6542069c2644c7f8081daf https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-chemical-scd30-cleanup-b5eaf6f33052ace0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20chemical%3A%20scd30%3A%20Cleanup%20initializations%20and%20fix%20sign-extension%20bug%20Include%E2%80%A6%20(CVE-2026-64497)&severity=medium&id=6a6542069c2644c7f8081da4 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-gadget-function-rndis-add-length-06fafae011047f65 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20gadget%3A%20function%3A%20rndis%3A%20add%20length%20check%20for%20header%20Add%20a%20length%20check%20for%E2%80%A6%20(CVE-2026-64505)&severity=medium&id=6a6542069c2644c7f8081d99 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-wifi-rtw89-correct-drop-logic-for-b1555bbd078239ec 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20wifi%3A%20rtw89%3A%20correct%20drop%20logic%20for%20malformed%20AMPDU%20frames%20The%20previous%20commit%E2%80%A6%20(CVE-2026-64506)&severity=medium&id=6a6542069c2644c7f8081d94 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-buffer-hw-consumer-free-scanmask-cf551da62f9f34cb 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20buffer%3A%20hw-consumer%3A%20free%20scan_mask%20on%20buffer%20release%20The%20scan_mask%E2%80%A6%20(CVE-2026-64498)&severity=medium&id=6a6542069c2644c7f8081d8f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-userfaultfd-gate-mustwait-a3de2a52d4fcf829 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20userfaultfd%3A%20gate%20must_wait%20writability%20check%20on%20pte_present()%E2%80%A6%20(CVE-2026-64514)&severity=medium&id=6a6542059c2644c7f808187a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-hdacs35l41-fix-firmware-load-7d5a033eb5bf1f79 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20hda%2Fcs35l41%3A%20Fix%20firmware%20load%20work%20teardown%20cs35l41_hda%20creates%20ALSA%E2%80%A6%20(CVE-2026-64481)&severity=medium&id=6a6542079c2644c7f80829f7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-vfiomlx5-fix-racy-bitfields-and-dba1f9f6c597f8e8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20vfio%2Fmlx5%3A%20Fix%20racy%20bitfields%20and%20tighten%20struct%20layout%20Bitfield%20operations%20are%E2%80%A6%20(CVE-2026-64472)&severity=medium&id=6a6542079c2644c7f80829e3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-virtio-validate-control-4eb3386b6dae9a5a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20virtio%3A%20Validate%20control%20metadata%20from%20the%20device%20virtio-snd%20control%E2%80%A6%20(CVE-2026-64490)&severity=medium&id=6a6542079c2644c7f80829dc https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-compress-fix-task-creation-5c2112ca02d8ad57 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20compress%3A%20Fix%20task%20creation%20error%20unwind%20snd_compr_task_new()%20allocates%E2%80%A6%20(CVE-2026-64485)&severity=medium&id=6a6542079c2644c7f80829d6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-xhci-fix-sleep-in-atomic-context-02b3a85296306326 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20xhci%3A%20Fix%20sleep%20in%20atomic%20context%20in%20xhci_free_streams()%20When%20a%20USB%20device%E2%80%A6%20(CVE-2026-64465)&severity=medium&id=6a6542079c2644c7f80829cb https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-ymfpci-check-sndctlnew1-return-1ce738761343b5cc 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20ymfpci%3A%20check%20snd_ctl_new1()%20return%20value%20snd_ctl_new1()%20can%20return%20NULL%E2%80%A6%20(CVE-2026-64489)&severity=medium&id=6a6542079c2644c7f80829c2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-seq-fix-uninitialised-heap-leak-3b8c78270cf33525 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20seq%3A%20Fix%20uninitialised%20heap%20leak%20in%20snd_seq_event_dup()%E2%80%A6%20(CVE-2026-64479)&severity=medium&id=6a6542079c2644c7f808271a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-vfio-prevent-infinite-loop-in-80b260f1fa70e77d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20vfio%3A%20prevent%20infinite%20loop%20in%20vfio_mig_get_next_state()%20on%20blocked%20arc%E2%80%A6%20(CVE-2026-64474)&severity=medium&id=6a6542079c2644c7f8082712 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-gus-check-sndctlnew1-return-edb658f8f163d5eb 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20gus%3A%20check%20snd_ctl_new1()%20return%20value%20snd_ctl_new1()%20can%20return%20NULL%20when%E2%80%A6%20(CVE-2026-64482)&severity=medium&id=6a6542079c2644c7f8082709 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-x86fsresctrl-prevent-out-of-bounds-37ad7faaf49ef5ca 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20x86%2Cfs%2Fresctrl%3A%20Prevent%20out-of-bounds%20access%20while%20offlining%20CPU%20when%20SNC%E2%80%A6%20(CVE-2026-64477)&severity=medium&id=6a6542079c2644c7f8082702 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-es1938-check-sndctlnew1-return-9c0745879ce58be5 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20es1938%3A%20check%20snd_ctl_new1()%20return%20value%20snd_ctl_new1()%20can%20return%20NULL%E2%80%A6%20(CVE-2026-64484)&severity=medium&id=6a6542079c2644c7f80826f7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-ice1712-check-sndctlnew1-return-ae1a50bfda09c5ed 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20ice1712%3A%20check%20snd_ctl_new1()%20return%20value%20snd_ctl_new1()%20can%20return%20NULL%E2%80%A6%20(CVE-2026-64480)&severity=medium&id=6a6542079c2644c7f80826ee https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-usx2y-us144mkii-fix-work-uaf-on-7bcb212400b240b4 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20usx2y%3A%20us144mkii%3A%20fix%20work%20UAF%20on%20disconnect%20tascam_disconnect()%20cancels%E2%80%A6%20(CVE-2026-64491)&severity=high&id=6a6542079c2644c7f80826e8 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-pressure-mpl115-fix-runtime-pm-e40c1d4efe8ca758 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20pressure%3A%20mpl115%3A%20fix%20runtime%20PM%20leak%20on%20read%20error%20mpl115_read_raw()%20takes%E2%80%A6%20(CVE-2026-64493)&severity=medium&id=6a6542079c2644c7f80826e0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-aoa-check-sndctlnew1-return-bcd275f5c101d38f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20aoa%3A%20check%20snd_ctl_new1()%20return%20value%20snd_ctl_new1()%20can%20return%20NULL%20when%E2%80%A6%20(CVE-2026-64488)&severity=medium&id=6a6542079c2644c7f808267c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-temperature-tmp006-use-f90ca372630e7156 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20temperature%3A%20tmp006%3A%20use%20devm_iio_trigger_register%20tmp006_probe()%20allocates%E2%80%A6%20(CVE-2026-64492)&severity=medium&id=6a6542079c2644c7f8082675 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-vfio-remove-device-debugfs-before-6e452e2268e6cb14 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20vfio%3A%20Remove%20device%20debugfs%20before%20releasing%20devres%20VFIO%20device%20debugfs%20files%E2%80%A6%20(CVE-2026-64473)&severity=medium&id=6a6542069c2644c7f80823d0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-binder-fix-uaf-in-a279fe5454ccc338 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20binder%3A%20fix%20UAF%20in%20binder_thread_release()%20When%20a%20thread%20exits%2C%E2%80%A6%20(CVE-2026-64469)&severity=high&id=6a6542069c2644c7f80823c5 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-btusb-fix-use-after-free-256a7db70e623d17 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20btusb%3A%20fix%20use-after-free%20on%20registration%20failure%20Make%20sure%20to%E2%80%A6%20(CVE-2026-64471)&severity=medium&id=6a6542069c2644c7f80823ba https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-firewire-isight-bound-the-4e3c64bb5c03ad93 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20firewire%3A%20isight%3A%20bound%20the%20sample%20count%20to%20the%20packet%20payload%E2%80%A6%20(CVE-2026-64483)&severity=medium&id=6a6542069c2644c7f80823af https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-vfiopci-latch-disableidled3-per-8715cf21f3f1accd 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20vfio%2Fpci%3A%20Latch%20disable_idle_d3%20per%20device%20When%20disable_idle_d3%20was%20introduced%E2%80%A6%20(CVE-2026-64476)&severity=medium&id=6a6542069c2644c7f80823a6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-vfiopci-release-the-vga-arbiter-5df0868cfa1f04ad 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20vfio%2Fpci%3A%20Release%20the%20VGA%20arbiter%20client%20on%20register_device()%20failure%20The%E2%80%A6%20(CVE-2026-64475)&severity=medium&id=6a6542069c2644c7f808239b https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-btusb-fix-use-after-free-fa189caf65c032bf 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20btusb%3A%20fix%20use-after-free%20on%20marvell%20probe%20failure%20Make%20sure%20to%20stop%E2%80%A6%20(CVE-2026-64470)&severity=medium&id=6a6542069c2644c7f8082390 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-cmipci-check-sndctlnew1-return-04ecb1ad6f1eddb3 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20cmipci%3A%20check%20snd_ctl_new1()%20return%20value%20snd_ctl_new1()%20can%20return%20NULL%E2%80%A6%20(CVE-2026-64486)&severity=medium&id=6a6542069c2644c7f8082387 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-usb-audio-avoid-kobject-path-f73763f628bddf5c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20usb-audio%3A%20avoid%20kobject%20path%20lookup%20in%20DualSense%20match%20The%20DualSense%E2%80%A6%20(CVE-2026-64478)&severity=medium&id=6a6542069c2644c7f808237c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-alsa-caiaq-fix-out-of-bounds-read-in-8265c94acda1e4f0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ALSA%3A%20caiaq%3A%20fix%20out-of-bounds%20read%20in%20the%20Traktor%20Kontrol%20S4%20input%20parser%E2%80%A6%20(CVE-2026-64487)&severity=medium&id=6a6542069c2644c7f8082371 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-light-gp2ap002-fix-runtime-pm-257658ca497d4391 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20light%3A%20gp2ap002%3A%20fix%20runtime%20PM%20leak%20on%20read%20error%20gp2ap002_read_raw()%E2%80%A6%20(CVE-2026-64494)&severity=low&id=6a6542069c2644c7f808207e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iio-gyro-bmg160-bail-out-when-5be6c828a8697690 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iio%3A%20gyro%3A%20bmg160%3A%20bail%20out%20when%20bandwidth%2Ffilter%20is%20not%20in%20table%E2%80%A6%20(CVE-2026-64495)&severity=medium&id=6a6542069c2644c7f8081d84 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-restrict-implied-bcc0-34fb9a0d5dbea743 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20restrict%20implied%20bcc%5B0%5D%20exemption%20to%20responses%20without%20data%20area%E2%80%A6%20(CVE-2026-64448)&severity=medium&id=6a6542099c2644c7f808329e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-rtl8723bs-fix-heap-buffer-0f90a4b41810ca16 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20rtl8723bs%3A%20fix%20heap%20buffer%20overflow%20in%20rtw_cfg80211_set_wpa_ie()%E2%80%A6%20(CVE-2026-64446)&severity=medium&id=6a6542089c2644c7f8082ff5 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-pciiov-skip-vf-resizable-bar-restore-434e86c4928193d3 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20PCI%2FIOV%3A%20Skip%20VF%20Resizable%20BAR%20restore%20on%20read%20error%E2%80%A6%20(CVE-2026-64460)&severity=medium&id=6a6542089c2644c7f8082fef https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-misc-usbio-fix-disconnect-uaf-in-d69cd889247c4e76 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20misc%3A%20usbio%3A%20fix%20disconnect%20UAF%20in%20client%20teardown%20usbio_disconnect()%20walks%E2%80%A6%20(CVE-2026-64453)&severity=medium&id=6a6542089c2644c7f8082fe9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-rustbinder-clear-freeze-listener-on-58cbd75cbcd0b4a2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20rust_binder%3A%20clear%20freeze%20listener%20on%20node%20removal%20Generally%20userspace%20is%E2%80%A6%20(CVE-2026-64466)&severity=medium&id=6a6542089c2644c7f8082fe3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-tcp-restore-rcu-grace-period-in-cd2b01ad8547851c 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20tcp%3A%20restore%20RCU%20grace%20period%20in%20tcp_ao_destroy_sock%20Commit%2051e547e8c89c%20(%22tcp%3A%E2%80%A6%20(CVE-2026-64459)&severity=high&id=6a6542089c2644c7f8082fdd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-pci-mediatek-fix-irq-domain-leak-6edb3963a229ff06 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20PCI%3A%20mediatek%3A%20Fix%20IRQ%20domain%20leak%20when%20port%20fails%20to%20enable%20When%E2%80%A6%20(CVE-2026-64461)&severity=medium&id=6a6542089c2644c7f8082fd2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hwrng-virtio-clamp-device-reported-480c9f27152f085f 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20hwrng%3A%20virtio%3A%20clamp%20device-reported%20used.len%20at%20copy_data()%20random_recv_done()%E2%80%A6%20(CVE-2026-64456)&severity=high&id=6a6542089c2644c7f8082fc7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-rtl8723bs-fix-oob-read-in-b3766157394377de 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20rtl8723bs%3A%20fix%20OOB%20read%20in%20OnAssocRsp()%20IE%20loop%20The%20IE%20parsing%20loop%20in%E2%80%A6%20(CVE-2026-64444)&severity=medium&id=6a6542089c2644c7f8082fbd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-6lowpan-fix-nhc-entry-use-after-free-3734b379fa61ed0d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%206lowpan%3A%20fix%20NHC%20entry%20use-after-free%20on%20error%20path%E2%80%A6%20(CVE-2026-64452)&severity=medium&id=6a6542089c2644c7f8082fb2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-dwc3-run-gadget-disconnect-from-d9952eec688b2bca 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20dwc3%3A%20run%20gadget%20disconnect%20from%20sleepable%20suspend%20context%E2%80%A6%20(CVE-2026-64454)&severity=medium&id=6a6542089c2644c7f8082fa8 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-rtl8723bs-fix-oob-read-in-60a9abf38e47bf95 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20rtl8723bs%3A%20fix%20OOB%20read%20in%20update_beacon_info()%20IE%20loop%20The%20IE%20parsing%E2%80%A6%20(CVE-2026-64443)&severity=medium&id=6a6542089c2644c7f8082d00 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-typec-tcpcirt1711h-unregister-4ee5993cdbd3bdc7 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20typec%3A%20tcpci_rt1711h%3A%20unregister%20TCPCI%20port%20with%20devres%20rt1711h_probe()%E2%80%A6%20(CVE-2026-64463)&severity=medium&id=6a6542089c2644c7f8082cf8 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mmdamonops-common-handle-extreme-3a58004001c935e1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%2Fdamon%2Fops-common%3A%20handle%20extreme%20intervals%20in%20damon_hot_score()%20Fix%20three%E2%80%A6%20(CVE-2026-64458)&severity=medium&id=6a6542089c2644c7f8082cef https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-vmeuser-bound-slave-0b9ab41ffca9c0d2 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20vme_user%3A%20bound%20slave%20read%2Fwrite%20to%20the%20kern_buf%20size%20The%20SLAVE-path%E2%80%A6%20(CVE-2026-64449)&severity=high&id=6a6542089c2644c7f8082ce6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-rtl8723bs-fix-wep-length-746231fccf7ac9dc 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20rtl8723bs%3A%20fix%20WEP%20length%20underflow%20and%20OOB%20read%20in%20OnAuth()%20OnAuth()%E2%80%A6%20(CVE-2026-64445)&severity=medium&id=6a6542089c2644c7f8082cdb https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-virtiopci-fix-vq-info-pointer-lookup-9c65c6ed70d86381 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20virtio_pci%3A%20fix%20vq%20info%20pointer%20lookup%20via%20wrong%20index%20Unbinding%20a%20virtio%E2%80%A6%20(CVE-2026-64457)&severity=medium&id=6a6542089c2644c7f8082cd4 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-tipc-fix-out-of-bounds-read-in-292bba547cc9ff4a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20tipc%3A%20fix%20out-of-bounds%20read%20in%20broadcast%20Gap%20ACK%20blocks%20A%20broadcast%E2%80%A6%20(CVE-2026-64450)&severity=medium&id=6a6542089c2644c7f8082cc9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-rustbinder-use-a-u64-stride-when-1780994b35ae69f3 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20rust_binder%3A%20use%20a%20u64%20stride%20when%20cleaning%20up%20the%20offsets%20array%20Allocation's%E2%80%A6%20(CVE-2026-64467)&severity=medium&id=6a6542089c2644c7f8082cc3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-media-ipu7-fix-double-free-da551e91ae36ef5b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20media%3A%20ipu7%3A%20fix%20double-free%20and%20use-after-free%20in%20error%20paths%20In%20both%E2%80%A6%20(CVE-2026-64447)&severity=medium&id=6a6542089c2644c7f8082cbd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-xhci-sideband-fix-ring-sg-table-af62348aee5d4fd1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20xhci%3A%20sideband%3A%20fix%20ring%20sg%20table%20pages%20leak%20xhci_ring_to_sgtable()%20allocates%20a%E2%80%A6%20(CVE-2026-64464)&severity=medium&id=6a6542089c2644c7f8082cb7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-chaoskey-fix-slab-use-after-free-0b3a3e39b5ad94f2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20chaoskey%3A%20Fix%20slab-use-after-free%20in%20chaoskey_release()%20The%20chaoskey%20driver%E2%80%A6%20(CVE-2026-64455)&severity=medium&id=6a6542079c2644c7f8082a0e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-pci-altera-fix-resource-leaks-on-75aaef270e8c142b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20PCI%3A%20altera%3A%20Fix%20resource%20leaks%20on%20probe%20failure%20The%20chained%20IRQ%20handler%20is%20set%E2%80%A6%20(CVE-2026-64462)&severity=medium&id=6a6542079c2644c7f8082a03 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-tracing-fix-null-pointer-dereference-7e6129d670e288e3 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20tracing%3A%20Fix%20NULL%20pointer%20dereference%20in%20func_set_flag()%20func_set_flag()%E2%80%A6%20(CVE-2026-64451)&severity=medium&id=6a6542079c2644c7f80829fe https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-binder-fix-uaf-in-40bc5130c6120053 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20binder%3A%20fix%20UAF%20in%20binder_free_transaction()%20In%20binder_free_transaction()%2C%20the%E2%80%A6%20(CVE-2026-64468)&severity=high&id=6a6542079c2644c7f80829ec https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-gpio-sch-use-rawspinlockt-in-the-irq-c2a80e16e379554d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20gpio%3A%20sch%3A%20use%20raw_spinlock_t%20in%20the%20irq%20startup%20path%20sch_irq_unmask()%20enables%E2%80%A6%20(CVE-2026-64428)&severity=medium&id=6a6542099c2644c7f80838e1 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-netpoll-fix-a-use-after-free-on-f7cc4730736a3537 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20netpoll%3A%20fix%20a%20use-after-free%20on%20shutdown%20path%20There%20is%20a%20use-after-free%20error%E2%80%A6%20(CVE-2026-64424)&severity=medium&id=6a6542099c2644c7f80838da https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fsntfs3-validate-dirty-page-table-f873d25050842d5e 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fs%2Fntfs3%3A%20validate%20Dirty%20Page%20Table%20capacity%20in%20log_replay%20copy_lcns%20In%20the%E2%80%A6%20(CVE-2026-64432)&severity=high&id=6a6542099c2644c7f80838d0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-gpio-eic-sprd-use-rawspinlockt-in-f9a55006c4720a54 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20gpio%3A%20eic-sprd%3A%20use%20raw_spinlock_t%20in%20the%20irq%20startup%20path%20sprd_eic_irq_unmask()%E2%80%A6%20(CVE-2026-64429)&severity=medium&id=6a6542099c2644c7f80838c5 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ntfs-avoid-calling-postwritemstfixup-d8a84d734a6b4b5b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ntfs%3A%20avoid%20calling%20post_write_mst_fixup()%20for%20invalid%20index_block%E2%80%A6%20(CVE-2026-64431)&severity=medium&id=6a6542099c2644c7f80838c0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-rtl8723bs-fix-oob-reads-in-0aefacc8c72ba23e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20rtl8723bs%3A%20fix%20OOB%20reads%20in%20IE%20loops%20in%20issue_assocreq()%20and%E2%80%A6%20(CVE-2026-64442)&severity=medium&id=6a6542099c2644c7f80838b5 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-rtl8723bs-fix-oob-reads-in-2c69ad8434c06ce6 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20rtl8723bs%3A%20fix%20OOB%20reads%20in%20rtw_get_sec_ie()%2C%20rtw_get_wapi_ie()%2C%20and%E2%80%A6%20(CVE-2026-64441)&severity=medium&id=6a6542099c2644c7f80838ab https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-l2cap-fix-uaf-in-channel-40af0153568fd06c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20L2CAP%3A%20Fix%20UAF%20in%20channel%20timeout%20by%20holding%20conn%20ref%E2%80%A6%20(CVE-2026-64434)&severity=medium&id=6a6542099c2644c7f80838a3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-krb5-filter-out-async-aead-69aa402019ffe429 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20krb5%20-%20filter%20out%20async%20aead%20implementations%20at%20alloc%E2%80%A6%20(CVE-2026-64439)&severity=high&id=6a6542099c2644c7f808389d https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-mgmt-fix-uaf-of-992274a077a4e36f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20MGMT%3A%20Fix%20UAF%20of%20hci_conn_params%20in%20add_device_complete%E2%80%A6%20(CVE-2026-64433)&severity=medium&id=6a6542099c2644c7f80835f7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-ipv4-bound-tcp-reordering-sysctl-0282aa16cbb24dff 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20net%3A%20ipv4%3A%20bound%20TCP%20reordering%20sysctl%20writes%20and%20MTU%20probe%20sizes%20Reject%20invalid%E2%80%A6%20(CVE-2026-64422)&severity=medium&id=6a6542099c2644c7f80835ec https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-audit-fix-data-races-of-skbqueuelen-05339b97b5d8971c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20audit%3A%20Fix%20data%20races%20of%20skb_queue_len()%20readers%20on%20audit_queue%20Multiple%20readers%E2%80%A6%20(CVE-2026-64435)&severity=medium&id=6a6542099c2644c7f80835e1 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-qat-fix-vf2pf-work-teardown-3eeb5cc6dc81ad1e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20qat%20-%20fix%20VF2PF%20work%20teardown%20race%20in%20adf_disable_sriov()%20The%20VF2PF%E2%80%A6%20(CVE-2026-64438)&severity=medium&id=6a6542099c2644c7f80835cd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-media-nxp-imx8-isi-fix-use-after-3db11d594e6858e6 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20media%3A%20nxp%3A%20imx8-isi%3A%20Fix%20use-after-free%20on%20remove%20KASAN%20reports%20a%E2%80%A6%20(CVE-2026-64421)&severity=medium&id=6a6542099c2644c7f80835c5 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hid-logitech-dj-fix-maxfield-check-3f09a9b5ac910b3c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20HID%3A%20logitech-dj%3A%20Fix%20maxfield%20check%20in%20DJ%20short%20report%20validation%20Commit%E2%80%A6%20(CVE-2026-64427)&severity=medium&id=6a6542099c2644c7f80835c0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-staging-rtl8723bs-fix-oob-write-in-7268d91e2aa29289 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20staging%3A%20rtl8723bs%3A%20fix%20OOB%20write%20in%20HT_caps_handler()%20HT_caps_handler()%E2%80%A6%20(CVE-2026-64440)&severity=high&id=6a6542099c2644c7f80835b6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-afkey-initialize-algkeylen-for-4c2f057b2f5880e9 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20net%3A%20af_key%3A%20initialize%20alg_key_len%20for%20IPComp%20states%20pfkey_msg2xfrm_state()%E2%80%A6%20(CVE-2026-64436)&severity=medium&id=6a6542099c2644c7f80835a0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iouringio-wq-re-check-iowqbitexit-3b05296d3568813c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20io_uring%2Fio-wq%3A%20re-check%20IO_WQ_BIT_EXIT%20for%20each%20linked%20work%20item%20commit%E2%80%A6%20(CVE-2026-64425)&severity=medium&id=6a6542099c2644c7f80832f7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iouringnop-fix-file-reference-leak-2203237242aa33bd 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20io_uring%2Fnop%3A%20fix%20file%20reference%20leak%20with%20IOSQE_FIXED_FILE%20NOP%20file-acquisition%E2%80%A6%20(CVE-2026-64426)&severity=medium&id=6a6542099c2644c7f80832e6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mfd-crosec-delay-devsetdrvdata-until-8289f524542f35f4 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mfd%3A%20cros_ec%3A%20Delay%20dev_set_drvdata()%20until%20probe%20success%20If%20ec_device_probe()%E2%80%A6%20(CVE-2026-64420)&severity=medium&id=6a6542099c2644c7f80832db https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ntb-epf-avoid-calling-pciirqvector-12c5bb8d6ab47723 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20NTB%3A%20epf%3A%20Avoid%20calling%20pci_irq_vector()%20from%20hardirq%20context%20ntb_epf_vec_isr()%E2%80%A6%20(CVE-2026-64430)&severity=medium&id=6a6542099c2644c7f80832d1 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ipv4-igmp-remove-multicast-group-09b7bbafcd3e0ab4 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ipv4%3A%20igmp%3A%20remove%20multicast%20group%20from%20hash%20table%20on%20device%20destruction%20When%20a%E2%80%A6%20(CVE-2026-64423)&severity=high&id=6a6542099c2644c7f80832c6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-fix-use-after-free-of-a-6c82a5b507faf2bf 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20fix%20use-after-free%20of%20a%20deferred%20file_lock%20on%20SMB2_CLOSE%20then%20SMB2_CANCEL%E2%80%A6%20(CVE-2026-64437)&severity=high&id=6a6542099c2644c7f80832b2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-require-source-read-access-for-64317196b1b5f402 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20require%20source%20read%20access%20for%20duplicate%20extents%E2%80%A6%20(CVE-2026-64395)&severity=high&id=6a65420a9c2644c7f808443f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-netfilter-ebtables-zero-chainstack-d0307f1a204c2d0e 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20netfilter%3A%20ebtables%3A%20zero%20chainstack%20array%20sashiko%20reports%3A%20looking%20at%20ebtables%E2%80%A6%20(CVE-2026-64413)&severity=low&id=6a65420a9c2644c7f8084434 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-serialize-querydirectory-80d648ff4d85b94e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20serialize%20QUERY_DIRECTORY%20requests%20per%20file%20smb2_query_dir()%20stores%20a%E2%80%A6%20(CVE-2026-64397)&severity=medium&id=6a65420a9c2644c7f808418d https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-coresight-ultrasoc-smb-fix-oob-write-12b02e84eebd4c3f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20coresight%3A%20ultrasoc-smb%3A%20Fix%20OOB%20write%20in%20smb_sync_perf_buffer()%20When%20the%20SMB%E2%80%A6%20(CVE-2026-64402)&severity=medium&id=6a65420a9c2644c7f8084185 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-prevent-path-traversal-bypass-aaf094f837980c1e 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20prevent%20path%20traversal%20bypass%20by%20restricting%20caseless%20retry%E2%80%A6%20(CVE-2026-64400)&severity=high&id=6a65420a9c2644c7f8084180 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-add-a-permission-check-for-2c85e6d197a22edd 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20add%20a%20permission%20check%20for%20FSCTL_SET_ZERO_DATA%20FSCTL_SET_ZERO_DATA%20in%E2%80%A6%20(CVE-2026-64398)&severity=high&id=6a65420a9c2644c7f8084177 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-use-opener-credentials-for-21bed17256f026d0 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20use%20opener%20credentials%20for%20delete-on-close%20Delete-on-close%20can%20be%E2%80%A6%20(CVE-2026-64392)&severity=high&id=6a65420a9c2644c7f808416f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mmswap-add-condresched-in-7df2f624d2a531fb 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%2Fswap%3A%20add%20cond_resched()%20in%20swap_reclaim_full_clusters%20to%20prevent%20softlockup%E2%80%A6%20(CVE-2026-64415)&severity=medium&id=6a65420a9c2644c7f8084168 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-iso-avoid-null-deref-of-9ddfd53c678c12c8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20ISO%3A%20avoid%20NULL%20deref%20of%20conn%20in%20iso_conn_big_sync()%E2%80%A6%20(CVE-2026-64404)&severity=medium&id=6a65420a9c2644c7f8084161 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mm-shrinker-fix-null-pointer-d77e6f5e35c79d68 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%3A%20shrinker%3A%20fix%20NULL%20pointer%20dereference%20in%20debugfs%20shrinker_debugfs_add()%E2%80%A6%20(CVE-2026-64417)&severity=medium&id=6a65420a9c2644c7f8084158 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mm-swapcgroup-fix-null-deref-in-1b2bf626bc212e88 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%3A%20swap_cgroup%3A%20fix%20NULL%20deref%20in%20lookup_swap_cgroup_id%20on%20swapless%20host%E2%80%A6%20(CVE-2026-64416)&severity=medium&id=6a65420a9c2644c7f8084151 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-netfilter-flowtable-ipip-tunnel-d984158c4386ef3a 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20netfilter%3A%20flowtable%3A%20IPIP%20tunnel%20hardware%20offload%20is%20not%20yet%20support%20No%20driver%E2%80%A6%20(CVE-2026-64410)&severity=low&id=6a65420a9c2644c7f808414c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-resolve-swn-tcon-from-a42e224696e241e3 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20resolve%20SWN%20tcon%20from%20live%20registrations%20cifs_swn_notify()%20looks%20up%E2%80%A6%20(CVE-2026-64401)&severity=medium&id=6a65420a9c2644c7f8083be2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-add-a-writedacwriteowner-check-25f7d2a4395a7dc6 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20add%20a%20WRITE_DAC%2FWRITE_OWNER%20check%20to%20SMB2%20SET_INFO%20SECURITY%20commit%E2%80%A6%20(CVE-2026-64394)&severity=high&id=6a65420a9c2644c7f8083bd9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-add-permission-checks-for-05f96bef66847e4d 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20add%20permission%20checks%20for%20FSCTL_DUPLICATE_EXTENTS_TO_FILE%20The%E2%80%A6%20(CVE-2026-64399)&severity=high&id=6a65420a9c2644c7f8083bd0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-netfilter-handle-unreadable-frags-bc50c5626254f08a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20netfilter%3A%20handle%20unreadable%20frags%20sashiko%20reports%3A%20When%20an%20skb%20with%20unreadable%E2%80%A6%20(CVE-2026-64414)&severity=medium&id=6a65420a9c2644c7f8083bc9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mm-shrinker-fix-shrinkerinfo-15232fb787128cdc 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%3A%20shrinker%3A%20fix%20shrinker_info%20teardown%20race%20with%20expansion%E2%80%A6%20(CVE-2026-64418)&severity=medium&id=6a65420a9c2644c7f8083bc2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-run-set-info-with-opener-b3e550787e8b3b4a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20run%20set%20info%20with%20opener%20credentials%20SMB2%20SET_INFO%20handlers%20call%E2%80%A6%20(CVE-2026-64393)&severity=medium&id=6a65420a9c2644c7f8083bb9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-fix-uaf-in-btacceptdequeue-e38fa67173a946f6 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20fix%20UAF%20in%20bt_accept_dequeue()%20bt_accept_get()%20takes%20a%20temporary%E2%80%A6%20(CVE-2026-64406)&severity=medium&id=6a65420a9c2644c7f8083bae https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-btnxpuart-fix-out-of-65c392e5dc407523 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20btnxpuart%3A%20Fix%20out-of-bounds%20firmware%20read%20in%20nxp_recv_fw_req_v3()%E2%80%A6%20(CVE-2026-64407)&severity=medium&id=6a65420a9c2644c7f8083ba6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-fix-uaf-of-struct-filelock-in-ca30202746df717d 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20fix%20UAF%20of%20struct%20file_lock%20in%20SMB2_LOCK%20deferred-lock%20cancellation%20When%E2%80%A6%20(CVE-2026-64396)&severity=high&id=6a65420a9c2644c7f8083b9d https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-l2cap-validate-option-54ec7d6bd755bd3d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20L2CAP%3A%20validate%20option%20length%20before%20reading%20conf%20opt%20value%E2%80%A6%20(CVE-2026-64403)&severity=medium&id=6a65420a9c2644c7f8083b92 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-hciconn-fix-null-ptr-deref-bc9369ffcfc7d2e8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20hci_conn%3A%20Fix%20null%20ptr%20deref%20in%20hci_abort_conn()%20hci_abort_conn()%E2%80%A6%20(CVE-2026-64405)&severity=medium&id=6a6542099c2644c7f80838eb https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mmshrinker-do-not-hold-rcu-lock-in-2ab66812ccf2ec01 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%2Fshrinker%3A%20do%20not%20hold%20RCU%20lock%20in%20shrinker_debugfs_count_show()%20Reading%20the%E2%80%A6%20(CVE-2026-64419)&severity=medium&id=6a6542099c2644c7f80835d8 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-bnep-pin-l2cap-connection-94f20f1a656b93bd 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20bnep%3A%20pin%20L2CAP%20connection%20during%20netdev%20registration%E2%80%A6%20(CVE-2026-64408)&severity=medium&id=6a6542099c2644c7f80835ab https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-netfilter-ebtables-module-names-must-9da4230b1cb01444 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20netfilter%3A%20ebtables%3A%20module%20names%20must%20be%20null-terminated%20We%20need%20to%20explicitly%E2%80%A6%20(CVE-2026-64412)&severity=medium&id=6a6542099c2644c7f80832ec https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-netfilter-ebtables-terminate-table-4573e481cef0354c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20netfilter%3A%20ebtables%3A%20terminate%20table%20name%20before%20find_table_lock()%E2%80%A6%20(CVE-2026-64411)&severity=medium&id=6a6542099c2644c7f80832bb https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bluetooth-btmtksdio-fix-infinite-3505bcbb4ebf583b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Bluetooth%3A%20btmtksdio%3A%20fix%20infinite%20loop%20in%20btmtksdio_txrx_work()%20Every%20once%20in%20a%E2%80%A6%20(CVE-2026-64409)&severity=medium&id=6a6542099c2644c7f80832a9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-writeback-fix-race-between-38b9759f1eef17fe 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20writeback%3A%20fix%20race%20between%20cgroup_writeback_umount()%20and%20inode_switch_wbs()%E2%80%A6%20(CVE-2026-64378)&severity=medium&id=6a65420b9c2644c7f8084d27 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-proc-protect-ptracemayaccess-with-fd7f480288bc74fa 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20proc%3A%20protect%20ptrace_may_access()%20with%20exec_update_lock%20(FD%20links)%E2%80%A6%20(CVE-2026-64375)&severity=medium&id=6a65420b9c2644c7f8084d1c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hid-wacom-fix-slab-out-of-bounds-b5a443ed4996d5a3 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20HID%3A%20wacom%3A%20fix%20slab-out-of-bounds%20write%20in%20wacom_wac_queue_insert%E2%80%A6%20(CVE-2026-64366)&severity=high&id=6a65420b9c2644c7f8084a78 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-fix-queryinfo-replay-f35df624e145238b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20fix%20query_info()%20replay%20double-free%20A%20response-bearing%20attempt%20can%E2%80%A6%20(CVE-2026-64386)&severity=medium&id=6a65420b9c2644c7f8084a70 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hid-lg-g15-cancel-pending-work-on-5fd2f26b040a32c8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20HID%3A%20lg-g15%3A%20cancel%20pending%20work%20on%20remove%20to%20fix%20a%20use-after-free%20lg_g15_data%E2%80%A6%20(CVE-2026-64362)&severity=medium&id=6a65420b9c2644c7f8084a65 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-use-opener-credentials-for-ads-786debfe11484072 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20use%20opener%20credentials%20for%20ADS%20I%2FO%20Alternate%20data%20streams%20are%20stored%20as%E2%80%A6%20(CVE-2026-64391)&severity=medium&id=6a65420b9c2644c7f8084a5e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-harden-posix-sid-length-98169b222928247f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20harden%20POSIX%20SID%20length%20parsing%20posix_info_sid_size()%20reads%20sid%5B1%5D%E2%80%A6%20(CVE-2026-64380)&severity=medium&id=6a65420b9c2644c7f8084a53 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hid-letsketch-fix-uaf-on-0fbeba0e454fbd5d 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20HID%3A%20letsketch%3A%20fix%20UAF%20on%20inrange_timer%20at%20driver%20unbind%20letsketch_driver%20does%E2%80%A6%20(CVE-2026-64365)&severity=medium&id=6a65420b9c2644c7f8084a4a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-cpufreq-pcc-fix-use-after-free-and-ac1b765f8c56ecb5 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20cpufreq%3A%20pcc%3A%20fix%20use-after-free%20and%20double%20free%20in%20_OSC%20evaluation%E2%80%A6%20(CVE-2026-64372)&severity=medium&id=6a65420b9c2644c7f8084a3f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-cpufreq-qcom-cpufreq-hw-fix-possible-59c294f99cf1e2d8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20cpufreq%3A%20qcom-cpufreq-hw%3A%20Fix%20possible%20double%20free%20qcom_cpufreq.data%20is%E2%80%A6%20(CVE-2026-64377)&severity=medium&id=6a65420b9c2644c7f8084a38 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-fix-double-free-in-2bd383ca288bdb81 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20fix%20double-free%20in%20SMB2_open()%20replay%20A%20response-bearing%20attempt%E2%80%A6%20(CVE-2026-64382)&severity=medium&id=6a65420b9c2644c7f8084a30 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hid-multitouch-fix-out-of-bounds-bit-1ca5cad1305ccd8f 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20HID%3A%20multitouch%3A%20fix%20out-of-bounds%20bit%20access%20on%20mt_io_flags%20mt_io_flags%20is%20a%E2%80%A6%20(CVE-2026-64364)&severity=high&id=6a65420b9c2644c7f8084a25 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-posix-cpu-timers-fix-pid-refcount-944c4e6827a7bebd 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20posix-cpu-timers%3A%20Fix%20pid%20refcount%20leak%20in%20do_cpu_nanosleep()%20error%20path%20In%E2%80%A6%20(CVE-2026-64370)&severity=medium&id=6a65420b9c2644c7f808477c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-schedrt-have-rtpushipi-be-default-1333788f9d29a9ab 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20sched%2Frt%3A%20Have%20RT_PUSH_IPI%20be%20default%20off%20for%20non%20PREEMPT_RT%20RT%20migration%20is%E2%80%A6%20(CVE-2026-64374)&severity=medium&id=6a65420b9c2644c7f8084771 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hid-appleir-fix-uaf-on-pending-f3903893d3bf447a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20HID%3A%20appleir%3A%20fix%20UAF%20on%20pending%20key_up_timer%20in%20remove()%20appleir_remove()%20runs%E2%80%A6%20(CVE-2026-64363)&severity=high&id=6a65420b9c2644c7f8084766 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-mask-server-provided-mode-d04f0afa523b804c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20mask%20server-provided%20mode%20to%2007777%20in%20modefromsid%20When%20modefromsid%E2%80%A6%20(CVE-2026-64379)&severity=medium&id=6a65420b9c2644c7f808475b https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-validate-ntlmv2-response-8d8ad2a971846798 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20validate%20NTLMv2%20response%20before%20updating%20session%20key%20ksmbd_auth_ntlmv2()%E2%80%A6%20(CVE-2026-64389)&severity=high&id=6a65420b9c2644c7f8084755 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-fix-change-notify-replay-36bc73e78d71e973 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20fix%20change%20notify%20replay%20double-free%20A%20response-bearing%20attempt%20can%E2%80%A6%20(CVE-2026-64384)&severity=medium&id=6a65420b9c2644c7f808474d https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-fix-double-free-in-ceb33a7c950f45f7 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20fix%20double-free%20in%20SMB2_flush()%20replay%20SMB2_flush()%20keeps%20its%E2%80%A6%20(CVE-2026-64383)&severity=medium&id=6a65420b9c2644c7f8084745 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mmslab-do-not-limit-zeroing-to-d3499cfae100d655 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%2Fslab%3A%20do%20not%20limit%20zeroing%20to%20orig_size%20when%20only%20red%20zoning%20is%20enabled%20When%E2%80%A6%20(CVE-2026-64368)&severity=medium&id=6a65420b9c2644c7f808473d https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-fix-query-directory-ea4e9582470de80b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20fix%20query%20directory%20replay%20double-free%20A%20response-bearing%20attempt%E2%80%A6%20(CVE-2026-64387)&severity=medium&id=6a65420b9c2644c7f8084735 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-proc-protect-ptracemayaccess-with-8b7ec661ece18d38 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20proc%3A%20protect%20ptrace_may_access()%20with%20exec_update_lock%20(part%201)%20Fix%20the%20easy%E2%80%A6%20(CVE-2026-64371)&severity=medium&id=6a65420b9c2644c7f808472a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hid-hid-goodix-spi-validate-report-a4539f751bcd16f3 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20HID%3A%20hid-goodix-spi%3A%20validate%20report%20size%20to%20prevent%20stack%20buffer%20overflow%E2%80%A6%20(CVE-2026-64367)&severity=high&id=6a65420a9c2644c7f8084485 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smbclient-fix-chownchgrp-with-smb3-b345c84efbbe0920 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%2Fclient%3A%20fix%20chown%2Fchgrp%20with%20SMB3%20POSIX%20Extensions%20Ownership%20(chown)%20and%E2%80%A6%20(CVE-2026-64388)&severity=medium&id=6a65420a9c2644c7f8084480 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-ksmbd-track-the-connection-owning-a-432604ca6c5189ee 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20ksmbd%3A%20track%20the%20connection%20owning%20a%20byte-range%20lock%20SMB2_LOCK%20adds%20each%20granted%E2%80%A6%20(CVE-2026-64390)&severity=high&id=6a65420a9c2644c7f8084476 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-cpufreq-fix-hotplug-suspend-race-26d3bbca3f032766 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20cpufreq%3A%20Fix%20hotplug-suspend%20race%20during%20reboot%20During%20system%20reboot%2C%E2%80%A6%20(CVE-2026-64373)&severity=medium&id=6a65420a9c2644c7f808446b https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-fix-next-buffer-leak-in-453e203d3cdaf49c 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20Fix%20next%20buffer%20leak%20in%20receive_encrypted_standard()%E2%80%A6%20(CVE-2026-64381)&severity=low&id=6a65420a9c2644c7f8084460 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-firmwareloader-fix-device-reference-6e343a546d790ac4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20firmware_loader%3A%20fix%20device%20reference%20leak%20in%20firmware_upload_register()%E2%80%A6%20(CVE-2026-64376)&severity=medium&id=6a65420a9c2644c7f8084457 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-fix-double-free-in-36620dcf03867e27 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20fix%20double-free%20in%20SMB2_ioctl()%20replay%20A%20response-bearing%20attempt%E2%80%A6%20(CVE-2026-64385)&severity=medium&id=6a65420a9c2644c7f808444f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-s390-revert-support-for-a8d6ba08f015ad63 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20s390%3A%20Revert%20support%20for%20DCACHE_WORD_ACCESS%20load_unaligned_zeropad()%20reads%20eight%E2%80%A6%20(CVE-2026-64369)&severity=medium&id=6a65420a9c2644c7f8084448 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-dwc3-fix-dwc3readl-and-e31cebecdab8c0d5 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20dwc3%3A%20fix%20dwc3_readl()%20and%20dwc3_writel()%20calls%20in%20dwc3_ulpi_setup()%20The%E2%80%A6%20(CVE-2026-64349)&severity=medium&id=6a65420c9c2644c7f808566f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-cdnsp-fix-stream-context-array-b57756149a43890c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20cdnsp%3A%20fix%20stream%20context%20array%20leak%20in%20cdnsp_alloc_stream_info()%E2%80%A6%20(CVE-2026-64350)&severity=medium&id=6a65420c9c2644c7f80853bb https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-nilfs2-reject-cleansegments-ioctl-434079dfaf14e59b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20nilfs2%3A%20reject%20CLEAN_SEGMENTS%20ioctl%20with%20out-of-range%20segment%20numbers%20Syzbot%E2%80%A6%20(CVE-2026-64359)&severity=medium&id=6a65420c9c2644c7f80853b0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hfshfsplus-zero-initialize-buffer-in-bd2432bf98874f89 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20hfs%2Fhfsplus%3A%20zero-initialize%20buffer%20in%20hfs_bnode_read%20hfs_bnode_read()%20can%E2%80%A6%20(CVE-2026-64360)&severity=medium&id=6a65420c9c2644c7f80853a5 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-gadget-udc-fix-use-after-free-in-f18aea9882f97316 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20gadget%3A%20udc%3A%20Fix%20use-after-free%20in%20gadget_match_driver%20The%20udc%20structure%E2%80%A6%20(CVE-2026-64346)&severity=medium&id=6a65420c9c2644c7f8085390 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-usb-kalmia-bound-rx-frame-length-13a45ebde9d78901 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20net%3A%20usb%3A%20kalmia%3A%20bound%20RX%20frame%20length%20in%20kalmia_rx_fixup()%20kalmia_rx_fixup()%E2%80%A6%20(CVE-2026-64351)&severity=medium&id=6a65420c9c2644c7f8085385 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-iowarrior-fix-use-after-free-on-b1df0af35f7f15b6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20iowarrior%3A%20fix%20use-after-free%20on%20disconnect%20Submitted%20write%20URBs%20are%20not%E2%80%A6%20(CVE-2026-64342)&severity=medium&id=6a65420c9c2644c7f808536f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-free-iso-schedules-on-failed-e9042463aa7a2761 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20free%20iso%20schedules%20on%20failed%20submit%20EHCI%20and%20FOTG210%20isochronous%20submits%E2%80%A6%20(CVE-2026-64348)&severity=medium&id=6a65420c9c2644c7f8085366 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-xfs-fix-exchmaps-reservation-limit-dbafde18465bf9c1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20xfs%3A%20fix%20exchmaps%20reservation%20limit%20check%20xfs_exchmaps_estimate_overhead()%20adds%E2%80%A6%20(CVE-2026-64357)&severity=medium&id=6a65420c9c2644c7f808535f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-media-mtk-jpeg-cancel-workqueue-on-f1568e3558320be2 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20media%3A%20mtk-jpeg%3A%20cancel%20workqueue%20on%20release%20for%20supported%20platforms%20only%20Since%E2%80%A6%20(CVE-2026-64358)&severity=low&id=6a65420c9c2644c7f808508b https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-gadget-composite-fix-dead-empty-75f2e23413777703 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20gadget%3A%20composite%3A%20fix%20dead%20empty%20check%20in%20the%20USB_DT_OTG%20handler%20The%20OTG%E2%80%A6%20(CVE-2026-64347)&severity=medium&id=6a65420c9c2644c7f8085080 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-ldusb-fix-use-after-free-on-bfab5d0615243d4b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20ldusb%3A%20fix%20use-after-free%20on%20disconnect%20race%20mutex_unlock()%20may%20access%20the%E2%80%A6%20(CVE-2026-64343)&severity=medium&id=6a65420c9c2644c7f8085075 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-idmouse-fix-use-after-free-on-b1950325c9e6376d 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20idmouse%3A%20fix%20use-after-free%20on%20disconnect%20race%20mutex_unlock()%20may%20access%E2%80%A6%20(CVE-2026-64344)&severity=medium&id=6a65420c9c2644c7f808506a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-gadget-fprinter-take-kref-only-702414ae7bc50dc9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20gadget%3A%20f_printer%3A%20take%20kref%20only%20for%20successful%20open%20printer_open()%E2%80%A6%20(CVE-2026-64345)&severity=medium&id=6a65420c9c2644c7f8085061 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-xfs-fix-memory-leak-in-eea70a260434d931 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20xfs%3A%20fix%20memory%20leak%20in%20xfs_dqinode_metadir_create()%20If%20xfs_metadir_create()%E2%80%A6%20(CVE-2026-64356)&severity=medium&id=6a65420c9c2644c7f808504b https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bpf-allow-lpm-map-access-from-de12bac0ee658447 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20bpf%3A%20Allow%20LPM%20map%20access%20from%20sleepable%20BPF%20programs%20trie_lookup_elem()%E2%80%A6%20(CVE-2026-64352)&severity=low&id=6a65420c9c2644c7f808502e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-legousbtower-fix-use-after-free-f48b4a8f7f021961 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20legousbtower%3A%20fix%20use-after-free%20on%20disconnect%20race%20mutex_unlock()%20may%E2%80%A6%20(CVE-2026-64340)&severity=medium&id=6a65420c9c2644c7f8085021 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bpf-validate-btf-repeated-field-1087e52061a4179a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20bpf%3A%20Validate%20BTF%20repeated%20field%20counts%20before%20expansion%E2%80%A6%20(CVE-2026-64354)&severity=high&id=6a65420b9c2644c7f8084d62 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-hfshfsplus-fix-u32-overflow-in-ca64623344538a79 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20hfs%2Fhfsplus%3A%20fix%20u32%20overflow%20in%20check_and_correct_requested_length%E2%80%A6%20(CVE-2026-64361)&severity=medium&id=6a65420b9c2644c7f8084d57 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bpf-keep-dynamic-inner-array-lookups-cae9f28a2862c3dc 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20bpf%3A%20Keep%20dynamic%20inner%20array%20lookups%20nullable%20An%20ARRAY_OF_MAPS%20can%20use%20an%20array%E2%80%A6%20(CVE-2026-64353)&severity=medium&id=6a65420b9c2644c7f8084d51 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-bpf-reject-fragmented-frames-in-95924ad381fdd032 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20bpf%3A%20Reject%20fragmented%20frames%20in%20devmap%20Devmap%20broadcast%20redirects%20clone%20the%E2%80%A6%20(CVE-2026-64355)&severity=medium&id=6a65420b9c2644c7f8084d3c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-partitions-aix-bound-the-ppcount-ca281a2b8d7eb92f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20partitions%3A%20aix%3A%20bound%20the%20pp_count%20scan%20to%20the%20ppe%20array%20aix_partition()%20reads%E2%80%A6%20(CVE-2026-64318)&severity=medium&id=6a65420d9c2644c7f8085cd9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-pcrypt-restore-callback-for-e4bbe7c5942ff5b4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20pcrypt%20-%20restore%20callback%20for%20non-parallel%20fallback%20pcrypt%20installs%E2%80%A6%20(CVE-2026-64312)&severity=medium&id=6a65420d9c2644c7f8085cb3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-typec-tcpm-validate-svid-index-25df4aa34d4034cf 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20typec%3A%20tcpm%3A%20Validate%20SVID%20index%20in%20svdm_consume_modes()%20In%E2%80%A6%20(CVE-2026-64330)&severity=medium&id=6a65420d9c2644c7f80859fb https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-wifi-mt76-mt7921mt7925-fix-null-7332cf9bf695d9a4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20wifi%3A%20mt76%3A%20mt7921%2Fmt7925%3A%20fix%20NULL%20dereference%20in%20CSA%20beacon%20This%20patch%20is%E2%80%A6%20(CVE-2026-64325)&severity=medium&id=6a65420d9c2644c7f80859f6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-nvme-target-rdma-fix-ndev-refcount-6a1180b3ac1c7242 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20nvme%3A%20target%3A%20rdma%3A%20fix%20ndev%20refcount%20leak%20on%20queue%20connect%E2%80%A6%20(CVE-2026-64321)&severity=medium&id=6a65420d9c2644c7f80859ef https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-nvmet-auth-validate-reply-message-5a2d80e0a18c78c8 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20nvmet-auth%3A%20validate%20reply%20message%20payload%20bounds%20against%20transfer%20length%E2%80%A6%20(CVE-2026-64319)&severity=high&id=6a65420d9c2644c7f80859e7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-caam-use-printhexdumpdevel-to-371e240e1ac03121 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20caam%20-%20use%20print_hex_dump_devel%20to%20guard%20key%20hex%20dumps%20Use%E2%80%A6%20(CVE-2026-64316)&severity=medium&id=6a65420d9c2644c7f80859d6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-gadget-ffs-initialize-epfile-in-4f8d52bb61bae47f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20gadget%3A%20f_fs%3A%20Initialize%20epfile-%3Ein%20early%20to%20fix%20endpoint%20direction%20checks%E2%80%A6%20(CVE-2026-64327)&severity=medium&id=6a65420d9c2644c7f80859cf https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-block-skip-syncblockdev-on-surprise-4dd077fc6e7f845e 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20block%3A%20skip%20sync_blockdev()%20on%20surprise%20removal%20in%20bdev_mark_dead()%E2%80%A6%20(CVE-2026-64326)&severity=medium&id=6a65420d9c2644c7f80859c7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-iowarrior-fix-use-after-free-on-6c91a0fc0d681d62 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20iowarrior%3A%20fix%20use-after-free%20on%20disconnect%20race%20mutex_unlock()%20may%20access%E2%80%A6%20(CVE-2026-64341)&severity=medium&id=6a65420d9c2644c7f80859c1 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-udf-validate-free-block-extents-ab6b802f053116ac 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20udf%3A%20validate%20free%20block%20extents%20against%20the%20partition%20length%20udf_free_blocks()%E2%80%A6%20(CVE-2026-64324)&severity=medium&id=6a65420d9c2644c7f80859b6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-caam-use-printhexdumpdevel-to-0cfb5adbd1b3f40c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20caam%20-%20use%20print_hex_dump_devel%20to%20guard%20key%20hex%20dumps%20Use%E2%80%A6%20(CVE-2026-64315)&severity=medium&id=6a65420d9c2644c7f80856c8 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-nvmet-fix-pre-auth-out-of-bounds-fdf00090447389e3 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20nvmet%3A%20fix%20pre-auth%20out-of-bounds%20heap%20read%20in%20Discovery%20Get%20Log%20Page%E2%80%A6%20(CVE-2026-64320)&severity=high&id=6a65420d9c2644c7f80856b6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-udf-validate-sparing-table-length-as-65478ae874560f2e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20udf%3A%20validate%20sparing%20table%20length%20as%20an%20entry%20count%2C%20not%20a%20byte%20count%E2%80%A6%20(CVE-2026-64322)&severity=high&id=6a65420d9c2644c7f80856ab https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-udf-validate-vat-header-length-e26c0b5cded15996 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20udf%3A%20validate%20VAT%20header%20length%20against%20the%20VAT%20inode%20size%20udf_load_vat()%20takes%E2%80%A6%20(CVE-2026-64323)&severity=medium&id=6a65420d9c2644c7f80856a0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-gadget-ffs-fix-dma-fence-leak-in-1a8dc94cd60f2904 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20gadget%3A%20f_fs%3A%20Fix%20DMA%20fence%20leak%20In%20ffs_dmabuf_transfer()%2C%20a%20ffs_dma_fence%E2%80%A6%20(CVE-2026-64328)&severity=medium&id=6a65420d9c2644c7f8085699 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-ecc-fix-carry-overflow-in-vli-0e5acc89fe4d66d5 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20ecc%20-%20Fix%20carry%20overflow%20in%20vli%20multiplication%20The%20carry%20flag%E2%80%A6%20(CVE-2026-64313)&severity=medium&id=6a65420d9c2644c7f808568e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usbip-vudc-fix-null-deref-in-ba9ad8a98d3c29c7 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usbip%3A%20vudc%3A%20fix%20NULL%20deref%20in%20vep_dequeue()%20vep_alloc_request()%20wasn't%E2%80%A6%20(CVE-2026-64331)&severity=medium&id=6a65420d9c2644c7f8085683 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-typec-ucsi-ccg-fix-use-after-5031df037a4c4893 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20typec%3A%20ucsi%3A%20ccg%3A%20Fix%20use-after-free%20of%20ucsi%20on%20remove%20The%20threaded%20IRQ%E2%80%A6%20(CVE-2026-64329)&severity=high&id=6a65420c9c2644c7f8085676 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-ulpi-fix-memory-leak-on-6a24c9c28bac368a 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20ulpi%3A%20fix%20memory%20leak%20on%20registration%20failure%20The%20allocated%20device%20name%20is%E2%80%A6%20(CVE-2026-64332)&severity=low&id=6a65420c9c2644c7f808539a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-serial-digiacceleport-fix-write-6be010199910c502 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20serial%3A%20digi_acceleport%3A%20fix%20write%20buffer%20corruption%20The%E2%80%A6%20(CVE-2026-64333)&severity=medium&id=6a65420c9c2644c7f808537a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-misc-usbio-bound-bulk-in-361cef71d8807f36 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20misc%3A%20usbio%3A%20bound%20bulk%20IN%20response%20length%20to%20the%20received%20transfer%E2%80%A6%20(CVE-2026-64339)&severity=medium&id=6a65420c9c2644c7f808505b https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-serial-keyspanpda-fix-ce644fb62bfd4a2f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20serial%3A%20keyspan_pda%3A%20fix%20information%20leak%20The%20write()%20callback%20is%20supposed%E2%80%A6%20(CVE-2026-64336)&severity=medium&id=6a65420c9c2644c7f8085051 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-serial-digiacceleport-fix-broken-912d847e22e9f8f5 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20serial%3A%20digi_acceleport%3A%20fix%20broken%20rx%20after%20throttle%20If%20the%20port%20is%20closed%E2%80%A6%20(CVE-2026-64335)&severity=medium&id=6a65420b9c2644c7f8084d74 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-misc-uss720-unregister-parport-352a04d59ccd8bb9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20misc%3A%20uss720%3A%20unregister%20parport%20on%20probe%20failure%20uss720_probe()%20registers%E2%80%A6%20(CVE-2026-64338)&severity=medium&id=6a65420b9c2644c7f8084d69 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-serial-digiacceleport-fix-hard-54b999966c5ac065 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20USB%3A%20serial%3A%20digi_acceleport%3A%20fix%20hard%20lockup%20on%20disconnect%20If%20submitting%20the%E2%80%A6%20(CVE-2026-64334)&severity=medium&id=6a65420b9c2644c7f8084d46 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-usb-mtu3-unmap-request-dma-on-queue-3750ff6569bc1fe1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20usb%3A%20mtu3%3A%20unmap%20request%20DMA%20on%20queue%20failure%20mtu3_gadget_queue()%20maps%20the%E2%80%A6%20(CVE-2026-64337)&severity=medium&id=6a65420b9c2644c7f8084d31 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-module-decompress-check-return-value-55a2f0c39da54e9f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20module%3A%20decompress%3A%20check%20return%20value%20of%20module_extend_max_pages()%E2%80%A6%20(CVE-2026-64297)&severity=medium&id=6a65420e9c2644c7f8086045 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-qat-validate-rsa-crt-90ba9dcaae5c2ee8 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20qat%20-%20validate%20RSA%20CRT%20component%20lengths%20The%20generic%20RSA%20key%20parser%E2%80%A6%20(CVE-2026-64304)&severity=high&id=6a65420e9c2644c7f808603a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-perfaux-fix-page-uaf-in-maprange-e9fd3630932b3708 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20perf%2Faux%3A%20Fix%20page%20UAF%20in%20map_range()%20map_range()%20reads%20rb-%3Eaux_pages%5B%5D%2C%E2%80%A6%20(CVE-2026-64300)&severity=high&id=6a65420e9c2644c7f8086034 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-exfat-bound-uniname-advance-in-93a2a9f9d5c8bcc4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20exfat%3A%20bound%20uniname%20advance%20in%20exfat_find_dir_entry()%20In%E2%80%A6%20(CVE-2026-64296)&severity=medium&id=6a65420e9c2644c7f8086029 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-spi-fsl-lpspi-terminate-the-rx-9ccd80c1475198e3 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20spi%3A%20fsl-lpspi%3A%20terminate%20the%20RX%20channel%20on%20TX%20prepare%20failure%20path%20When%E2%80%A6%20(CVE-2026-64303)&severity=medium&id=6a65420e9c2644c7f808601e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-ccp-do-not-initialize-snp-for-7b469c0fc2722f86 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20ccp%20-%20Do%20not%20initialize%20SNP%20for%20ioctl(SNP_COMMIT)%20Sashiko%20notes%3A%20%3E%20if%E2%80%A6%20(CVE-2026-64309)&severity=medium&id=6a65420e9c2644c7f8086017 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-drbg-fix-returning-success-on-c56b091ca5ca0b14 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20drbg%20-%20Fix%20returning%20success%20on%20failure%20in%20CTR_DRBG%20drbg_ctr_generate()%E2%80%A6%20(CVE-2026-64306)&severity=medium&id=6a65420e9c2644c7f808600c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-ccp-do-not-initialize-snp-for-c4cbcb368770dc6f 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20ccp%20-%20Do%20not%20initialize%20SNP%20for%20SEV%20ioctls%20Sashiko%20notes%3A%20%3E%20if%20SEV%E2%80%A6%20(CVE-2026-64310)&severity=high&id=6a65420e9c2644c7f8086005 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-tracing-prevent-out-of-bounds-read-706dddb68b60d3e8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20tracing%3A%20Prevent%20out-of-bounds%20read%20in%20glob%20matching%20String%20event%20fields%20are%20not%E2%80%A6%20(CVE-2026-64299)&severity=medium&id=6a65420d9c2644c7f8085d1c https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-regulator-scmi-fix-ofnode-refcount-e131762f6aaa9ea2 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20regulator%3A%20scmi%3A%20fix%20of_node%20refcount%20leak%20in%20scmi_regulator_probe()%E2%80%A6%20(CVE-2026-64301)&severity=low&id=6a65420d9c2644c7f8085d11 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-ccp-do-not-initialize-snp-for-661328a6695c2f19 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20ccp%20-%20Do%20not%20initialize%20SNP%20for%20ioctl(SNP_VLEK_LOAD)%20Sashiko%20notes%3A%20%3E%20if%E2%80%A6%20(CVE-2026-64308)&severity=medium&id=6a65420d9c2644c7f8085d09 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-nfsv4-include-maywrite-in-open-10dd522c26309b57 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20NFSv4%3A%20include%20MAY_WRITE%20in%20open%20permission%20mask%20for%20O_TRUNC%20POSIX%20requires%E2%80%A6%20(CVE-2026-64298)&severity=medium&id=6a65420d9c2644c7f8085cfe https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-qat-protect-service-table-0a92d3231381e207 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20qat%20-%20protect%20service%20table%20iterations%20with%20service_lock%20The%E2%80%A6%20(CVE-2026-64305)&severity=medium&id=6a65420d9c2644c7f8085cf7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-x86mm-fix-freeing-of-pmd-sized-50a6b3ed7e8de952 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20x86%2Fmm%3A%20Fix%20freeing%20of%20PMD-sized%20vmemmap%20pages%20Commit%20bf9e4e30f353%20(%22x86%2Fmm%3A%20use%E2%80%A6%20(CVE-2026-64302)&severity=medium&id=6a65420d9c2644c7f8085cf1 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-ccp-do-not-initialize-snp-for-25c22d8d62825ee9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20ccp%20-%20Do%20not%20initialize%20SNP%20for%20ioctl(SNP_CONFIG)%20Sashiko%20notes%3A%20%3E%20if%E2%80%A6%20(CVE-2026-64307)&severity=medium&id=6a65420d9c2644c7f8085cea https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-loongson-remove-broken-and-cebf45ad2c85d870 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20loongson%20-%20Remove%20broken%20and%20unused%20loongson-rng%20The%20loongson-rng%E2%80%A6%20(CVE-2026-64311)&severity=medium&id=6a65420d9c2644c7f8085ce4 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-crypto-chacha20poly1305-validate-d629d6c5a4a14e03 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20crypto%3A%20chacha20poly1305%20-%20validate%20poly1305%20template%20argument%E2%80%A6%20(CVE-2026-64314)&severity=medium&id=6a65420d9c2644c7f80859e1 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-isofs-bound-rock-ridge-symlink-871496864264b1f4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20isofs%3A%20bound%20Rock%20Ridge%20symlink%20components%20to%20the%20SL%20record%20get_symlink_chunk()%E2%80%A6%20(CVE-2026-64317)&severity=medium&id=6a65420d9c2644c7f80856bd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-arm64-nv-avoid-dereferencing-a2e13dd5e384609f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20arm64%3A%20nv%3A%20Avoid%20dereferencing%20NULL%20VNCR%20pseudo-TLB%20VNCR%20TLB%20invalidation%E2%80%A6%20(CVE-2026-64288)&severity=medium&id=6a65420e9c2644c7f80865f3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-arm64-clear-hyprunningvcpu-when-9af30f8cdd4de8b2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20arm64%3A%20Clear%20__hyp_running_vcpu%20when%20flushing%20the%20pKVM%20hyp%20vCPU%E2%80%A6%20(CVE-2026-64286)&severity=medium&id=6a65420e9c2644c7f80865eb https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-guestmemfd-treat-memslot-binding-2b0db836447265a1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20guest_memfd%3A%20Treat%20memslot%20binding%20offset%2Bsize%20as%20unsigned%20values%20When%E2%80%A6%20(CVE-2026-64283)&severity=medium&id=6a65420e9c2644c7f80865e6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iommufd-set-veventqdepth-upper-bound-c1e336e6b98c3b48 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iommufd%3A%20Set%20veventq_depth%20upper%20bound%20iommufd_veventq_alloc()%20accepts%20any%20!0%E2%80%A6%20(CVE-2026-64291)&severity=medium&id=6a65420e9c2644c7f80865e0 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-sev-pin-source-page-for-write-1716807587d9df2a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20SEV%3A%20Pin%20source%20page%20for%20write%20when%20adding%20CPUID%20data%20for%20SNP%20guest%20When%E2%80%A6%20(CVE-2026-64285)&severity=medium&id=6a65420e9c2644c7f80865db https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iommufd-move-vevent-memory-2b801d57898b240b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iommufd%3A%20Move%20vevent%20memory%20allocation%20outside%20spinlock%20The%20veventq%20memory%E2%80%A6%20(CVE-2026-64292)&severity=medium&id=6a65420e9c2644c7f8086337 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-x86-ensure-vendors-exit-handler-fe7983a54ee85041 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20x86%3A%20Ensure%20vendor's%20exit%20handler%20runs%20before%20fastpath%20userspace%20exits%20Move%E2%80%A6%20(CVE-2026-64284)&severity=medium&id=6a65420e9c2644c7f8086330 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-arm64-bound-usedlrs-when-92da6ba81c3e6392 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20arm64%3A%20Bound%20used_lrs%20when%20flushing%20the%20pKVM%20hyp%20vCPU%20flush_hyp_vcpu()%E2%80%A6%20(CVE-2026-64287)&severity=medium&id=6a65420e9c2644c7f8086328 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fpga-dfl-afu-validate-dma-mapping-9e2298a9ac2cf53c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fpga%3A%20dfl-afu%3A%20validate%20DMA%20mapping%20length%20in%20afu_dma_map_region()%E2%80%A6%20(CVE-2026-64280)&severity=medium&id=6a65420e9c2644c7f8086322 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iommufd-set-upper-bounds-on-cache-d3d71c8c41434bbd 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iommufd%3A%20Set%20upper%20bounds%20on%20cache%20invalidation%20entry_num%20and%20entry_len%E2%80%A6%20(CVE-2026-64289)&severity=medium&id=6a65420e9c2644c7f808631b https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-i2c-core-fix-adapter-deregistration-4c41179db3aec760 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20i2c%3A%20core%3A%20fix%20adapter%20deregistration%20race%20Adapters%20can%20be%20looked%20up%20by%20their%20id%E2%80%A6%20(CVE-2026-64279)&severity=medium&id=6a65420e9c2644c7f8086311 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mm-do-file-ownership-checks-with-the-bad7418807442ca2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%3A%20do%20file%20ownership%20checks%20with%20the%20proper%20mount%20idmap%20Ever%20since%20idmapped%E2%80%A6%20(CVE-2026-64294)&severity=medium&id=6a65420e9c2644c7f8086309 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iommufd-use-sizeofhdr-instead-of-d75d902f8f2f857c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iommufd%3A%20Use%20sizeof(hdr)%20instead%20of%20sizeof(hdr)%20in%20veventq%20read%20The%20bound-check%E2%80%A6%20(CVE-2026-64293)&severity=medium&id=6a65420e9c2644c7f8086303 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-kvm-arm64-dont-leak-pfn-when-fe5a7d9ee622cdba 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20KVM%3A%20arm64%3A%20Don't%20leak%20PFN%20when%20kvm_translate_vncr()%20races%20MMU%20notifier%20In%20the%E2%80%A6%20(CVE-2026-64282)&severity=medium&id=6a65420e9c2644c7f80862fd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-mm-pageext-add-count-limit-to-300394949c7db94a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20mm%3A%20page_ext%3A%20add%20count%20limit%20to%20page_ext_iter_next%20to%20prevent%20invalid%20PFN%E2%80%A6%20(CVE-2026-64295)&severity=medium&id=6a65420e9c2644c7f80862f7 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-iommufd-break-the-loop-on-failure-in-47ae763ec0255c02 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20iommufd%3A%20Break%20the%20loop%20on%20failure%20in%20iommufd_fault_fops_read()%20On%20a%E2%80%A6%20(CVE-2026-64290)&severity=medium&id=6a65420e9c2644c7f8086053 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-svcrdma-wake-sq-waiters-when-the-81fd4d7a191f99d4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20svcrdma%3A%20wake%20sq%20waiters%20when%20the%20transport%20closes%20Threads%20parked%20in%E2%80%A6%20(CVE-2026-64281)&severity=medium&id=6a65420e9c2644c7f808604e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-uring-fix-moving-cancelled-16a2b78e56cc77d1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse-uring%3A%20fix%20moving%20cancelled%20entry%20to%20ent_in_userspace%20list%E2%80%A6%20(CVE-2026-64263)&severity=medium&id=6a65420f9c2644c7f8086c2a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-uring-fix-efault-clobber-in-70b448fe4fa18383 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse-uring%3A%20fix%20EFAULT%20clobber%20in%20fuse_uring_commit%20copy_from_user()%20returns%20the%E2%80%A6%20(CVE-2026-64264)&severity=medium&id=6a65420f9c2644c7f8086c23 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-clear-intrentry-in-fuseresend-cc92f644cab28a8e 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse%3A%20clear%20intr_entry%20in%20fuse_resend%20and%20fuse_remove_pending_req%20When%E2%80%A6%20(CVE-2026-64265)&severity=high&id=6a65420f9c2644c7f808691e https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-elani2c-prevent-division-by-80a8c599ea11dc8c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20elan_i2c%20-%20prevent%20division%20by%20zero%20and%20arithmetic%20underflow%20The%20Elan%20I2C%E2%80%A6%20(CVE-2026-64275)&severity=medium&id=6a65420f9c2644c7f8086913 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-synaptics-rmi4-bound-the-f30-62a59ad2634fb85a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20synaptics-rmi4%20-%20bound%20the%20F30%20keymap%20to%20the%20GPIO%2FLED%20count%E2%80%A6%20(CVE-2026-64276)&severity=medium&id=6a65420f9c2644c7f8086908 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-rdmasiw-bound-read-response-ea42a692789305e9 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20RDMA%2Fsiw%3A%20bound%20Read%20Response%20placement%20to%20the%20RREAD%20length%20In%E2%80%A6%20(CVE-2026-64268)&severity=high&id=6a65420f9c2644c7f80868fd https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-rdmartrs-srv-bound-rdma-write-length-712c52ff22799ba1 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20RDMA%2Frtrs-srv%3A%20Bound%20RDMA-Write%20length%20to%20chunk%20size%20in%20rdma_write_sg%20When%20the%E2%80%A6%20(CVE-2026-64269)&severity=high&id=6a65420f9c2644c7f80868f3 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-iforce-bound-the-device-db3fb3d3f42268cb 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20iforce%20-%20bound%20the%20device-reported%20force-feedback%20effect%20index%E2%80%A6%20(CVE-2026-64273)&severity=high&id=6a65420f9c2644c7f80868e2 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-i2c-imx-lpi2c-mark-i2c-adapter-when-42a0cd7c0df752ce 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20i2c%3A%20imx-lpi2c%3A%20mark%20I2C%20adapter%20when%20hardware%20is%20powered%20down%20On%20some%20i.MX%E2%80%A6%20(CVE-2026-64278)&severity=medium&id=6a65420f9c2644c7f80868dc https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-synaptics-rmi4-bound-the-f3a-2e1d84e6843c049a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20synaptics-rmi4%20-%20bound%20the%20F3A%20keymap%20to%20the%20GPIO%20count%E2%80%A6%20(CVE-2026-64277)&severity=high&id=6a65420f9c2644c7f80868d1 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-goodix-clamp-the-device-abce0135b6b86d13 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20goodix%20-%20clamp%20the%20device-reported%20contact%20count%E2%80%A6%20(CVE-2026-64274)&severity=high&id=6a65420f9c2644c7f80868c6 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-avoid-32-bit-prune-notification-e7f942ce73bf3e58 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse%3A%20avoid%2032-bit%20prune%20notification%20count%20wrap%20FUSE_NOTIFY_PRUNE%20validates%20the%E2%80%A6%20(CVE-2026-64267)&severity=medium&id=6a65420e9c2644c7f808661f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-mms114-fix-touch-indexing-for-9096705e38e0a11c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20mms114%20-%20fix%20touch%20indexing%20for%20MMS134S%20and%20MMS136%20The%20MMS134S%20and%20MMS136%E2%80%A6%20(CVE-2026-64272)&severity=medium&id=6a65420e9c2644c7f8086617 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-mms114-reject-an-oversized-980dbabb355834cc 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20mms114%20-%20reject%20an%20oversized%20device%20packet%20size%20mms114_interrupt()%20reads%E2%80%A6%20(CVE-2026-64270)&severity=high&id=6a65420e9c2644c7f808660f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-input-touchwin-reset-the-packet-d2da81423facdd3b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20Input%3A%20touchwin%20-%20reset%20the%20packet%20index%20on%20every%20complete%20packet%20tw_interrupt()%E2%80%A6%20(CVE-2026-64271)&severity=high&id=6a65420e9c2644c7f8086604 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-re-lock-request-before-641b6894d4fcdc40 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse%3A%20re-lock%20request%20before%20returning%20from%20fuse_ref_folio()%20fuse_ref_folio()%E2%80%A6%20(CVE-2026-64266)&severity=medium&id=6a65420e9c2644c7f80865f9 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-uring-avoid-use-after-free-in-b84f24f1839bce5b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse-uring%3A%20Avoid%20use-after-free%20in%20fuse_uring_async_stop_queues%E2%80%A6%20(CVE-2026-64261)&severity=medium&id=6a65420f9c2644c7f8086c55 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-uring-make-a-fusereq-on-sqe-1858dfef1e145e06 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse-uring%3A%20make%20a%20fuse_req%20on%20SQE%20commit%20only%20findable%20after%20memcpy%20Bad%E2%80%A6%20(CVE-2026-64259)&severity=medium&id=6a65420f9c2644c7f8086c4f https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-uring-remove-request-less-4610a38d033bd1ba 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse-uring%3A%20remove%20request-less%20entries%20from%20ent_w_req_queue%20to%20fix%20NULL%20deref%E2%80%A6%20(CVE-2026-64258)&severity=medium&id=6a65420f9c2644c7f8086c49 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-uring-avoid-queue-stopped-races-07052e64e7c80622 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse-uring%3A%20Avoid%20queue-%3Estopped%20races%20and%20set%2Fread%20that%20value%20under%20lock%20There%E2%80%A6%20(CVE-2026-64260)&severity=medium&id=6a65420f9c2644c7f8086c43 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-smb-client-reject-overlapping-data-07b18852be261ef1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20smb%3A%20client%3A%20reject%20overlapping%20data%20areas%20in%20SMB2%20responses%20Commit%2053b7c271f06b%E2%80%A6%20(CVE-2026-64257)&severity=medium&id=6a65420f9c2644c7f8086c3a https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-xfs-dont-wrap-around-quota-ids-in-2a11341c4e0897ed 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20xfs%3A%20don't%20wrap%20around%20quota%20ids%20in%20dqiterate%20LOLLM%20noticed%20that%20q_id%20is%20an%E2%80%A6%20(CVE-2026-64256)&severity=medium&id=6a65420f9c2644c7f8086c32 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-fuse-uring-end-fusereq-on-io-uring-8c81aee33653d46f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20the%20Linux%20kernel%2C%20the%20following%20vulnerability%20has%20been%20resolved%3A%20fuse-uring%3A%20end%20fuse_req%20on%20io-uring%20cancel%20task%20work%20When%20io_uring%20delivers%E2%80%A6%20(CVE-2026-64262)&severity=medium&id=6a65420f9c2644c7f80868ed https://radar.offseq.com/threat/malicious-code-in-page-navigation-npm-0708934719119d6f 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20page-navigation%20(npm)&severity=high&id=6a65420f9c2644c7f8086c5b https://radar.offseq.com/threat/cve-2026-66012-missing-authorization-in-siyuan-note-siyuan-af31715ea5b396b1 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-66012%3A%20Missing%20Authorization%20in%20siyuan-note%20siyuan&severity=critical&id=6a6498f89c2644c7f8408917 https://radar.offseq.com/threat/a-featured-chrome-extension-planet-search-2m-installs-routes-every-query-to-the-nextgeekercom-hijacker-57866f03e3bfaa07 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=A%20featured%20Chrome%20extension%20%22Planet%20Search%22%20(2M%20installs)%20routes%20every%20query%20to%20the%20nextgeeker%5B.%5Dcom%20hijacker%20network&severity=medium&id=6a64954c9c2644c7f83c439e https://radar.offseq.com/threat/foos-tool-z-privesc-100-privesc-detection-in-265s-for-54-linux-kernel-4e663dcbb7e5c2ad 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=%5BFOOS%20Tool%5D%20Z-Privesc%20%E2%80%93%20100%25%20privesc%20detection%20in%202.65s%20for%205.4%2B%20Linux%20kernel&severity=medium&id=6a648e479c2644c7f8343006 https://radar.offseq.com/threat/malicious-code-in-identityscimapiserv-npm-a93956087670de52 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20identityscimapiserv%20(npm)&severity=high&id=6a65420f9c2644c7f8086eb2 https://radar.offseq.com/threat/malicious-code-in-xo-member-components-npm-19227206998cf01d 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20xo-member-components%20(npm)&severity=high&id=6a65420f9c2644c7f8086eb4 https://radar.offseq.com/threat/malicious-code-in-f0-form-manipulator-npm-fe8afbba3f39b359 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20f0-form-manipulator%20(npm)&severity=high&id=6a65420f9c2644c7f8086eb6 https://radar.offseq.com/threat/malicious-code-in-preferenceslifecycle-paypal-npm-9a765312fd726ca7 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20preferenceslifecycle-paypal%20(npm)&severity=high&id=6a6542109c2644c7f8086f27 https://radar.offseq.com/threat/malicious-code-in-merchantprefsservice-paypal-npm-d57b36077d7071b9 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20merchantprefsservice-paypal%20(npm)&severity=high&id=6a6542109c2644c7f8086f2f https://radar.offseq.com/threat/openai-confirms-chatgpt-is-down-worldwide-f91e602dccf61da4 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=OpenAI%20confirms%20ChatGPT%20is%20down%20worldwide&severity=low&id=6a6483c29c2644c7f82788f4 https://radar.offseq.com/threat/malicious-code-in-gpaas-paypal-npm-2ab32121f207450a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20gpaas-paypal%20(npm)&severity=high&id=6a6542109c2644c7f8086f45 https://radar.offseq.com/threat/malicious-code-in-pp-react-ui5-npm-55515f078c371a5d 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20pp-react-ui5%20(npm)&severity=high&id=6a6542109c2644c7f8086f47 https://radar.offseq.com/threat/malicious-code-in-payoutsvettingserv-paypal-npm-3ec12cb399db4945 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20payoutsvettingserv-paypal%20(npm)&severity=high&id=6a6542119c2644c7f8086fa6 https://radar.offseq.com/threat/rockwell-patches-code-execution-flaws-in-arena-simulation-software-d1234e0c241996a2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Rockwell%20Patches%20Code%20Execution%20Flaws%20in%20Arena%20Simulation%20Software&severity=medium&id=6a6475b19c2644c7f815e817 https://radar.offseq.com/threat/malicious-code-in-fundraiserservicepp-npm-c7bd3169cf78a39a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20fundraiserservicepp%20(npm)&severity=high&id=6a6542119c2644c7f8086fa8 https://radar.offseq.com/threat/cve-2026-16766-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-9e7c09567b0712f8 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-16766%3A%20CWE-78%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20('OS%20Command%20Injection')%20in%20RRWO%20Catalyst%3A%3AView%3A%3AWkhtmltopdf&severity=critical&id=6a6475dc9c2644c7f8160fd5 https://radar.offseq.com/threat/cve-2026-10818-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-wpforms-wpforms-pro-98bc8d14f7da8c03 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-10818%3A%20CWE-434%20Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type%20in%20WPForms%20WPForms%20Pro&severity=high&id=6a64644b9c2644c7f8ff2053 https://radar.offseq.com/threat/cve-2026-15425-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-b74b4fa242819cd2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15425%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20yoast%20Yoast%20SEO%20%E2%80%93%20Advanced%20SEO%20with%20real-time%20guidance%20and%20built-in%20AI&severity=medium&id=6a64644b9c2644c7f8ff2057 https://radar.offseq.com/threat/cve-2026-14955-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-d8d9785f53d6fda6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-14955%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20Themehigh%20Checkout%20Field%20Editor%20for%20WooCommerce%20(Pro)&severity=medium&id=6a6459bd9c2644c7f8de9fc6 https://radar.offseq.com/threat/redis-before-880-in-the-unusual-case-where-an-authenticated-attacker-can-execute-restore-allows-remote-73f5b4e46a17c365 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Redis%20before%208.8.0%2C%20in%20the%20unusual%20case%20where%20an%20authenticated%20attacker%20can%20execute%20RESTORE%2C%20allows%20remote%20code%20execution%20via%20a%20RESTORE%20payload%E2%80%A6%20(CVE-2026-66373)&severity=high&id=6a6542129c2644c7f808717a https://radar.offseq.com/threat/reverse-engineering-windows-data-deduplication-from-research-to-an-open-source-recovery-tool-651e0de855de2e45 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Reverse%20Engineering%20Windows%20Data%20Deduplication%3A%20From%20Research%20to%20an%20Open-Source%20Recovery%20Tool&severity=medium&id=6a641dcb9c2644c7f82de94f https://radar.offseq.com/threat/a-flaw-was-found-in-libsoup-the-chunked-transfer-encoding-parser-uses-a-permissive-parsing-function-9956069093ad642a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=A%20flaw%20was%20found%20in%20libsoup.%20The%20chunked%20transfer%20encoding%20parser%20uses%20a%20permissive%20parsing%20function%20for%20chunk%20sizes%20that%20silently%20accepts%20inputs%E2%80%A6%20(CVE-2026-66338)&severity=medium&id=6a6542159c2644c7f8087677 https://radar.offseq.com/threat/a-flaw-was-found-in-libsoup-after-a-connect-tunnel-is-established-through-an-http-proxy-libsoup-54ff97e56b7399e5 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=A%20flaw%20was%20found%20in%20libsoup.%20After%20a%20CONNECT%20tunnel%20is%20established%20through%20an%20HTTP%20proxy%2C%20libsoup%20incorrectly%20attaches%20the%20Proxy-Authorization%E2%80%A6%20(CVE-2026-66339)&severity=medium&id=6a6542159c2644c7f8087666 https://radar.offseq.com/threat/a-flaw-was-found-in-libsoup-an-unsigned-integer-underflow-in-the-soupfilterinputstreamreaduntil-46525a9f1ea9926f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=A%20flaw%20was%20found%20in%20libsoup.%20An%20unsigned%20integer%20underflow%20in%20the%20soup_filter_input_stream_read_until()%20function%20causes%20a%20heap%20buffer%20over-read%20when%E2%80%A6%20(CVE-2026-66337)&severity=medium&id=6a6542159c2644c7f8087661 https://radar.offseq.com/threat/nltk-natural-language-toolkit-before-version-393-contains-an-eval-injection-vulnerability-in-the-a791aa51e08bf28d 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=NLTK%20(Natural%20Language%20Toolkit)%20before%20version%203.9.3%20contains%20an%20eval%20injection%20vulnerability%20in%20the%20nltk.collocations%20module%20that%20allows%20an%E2%80%A6%20(CVE-2025-71408)&severity=high&id=6a6542169c2644c7f8087919 https://radar.offseq.com/threat/an-attacker-can-modify-data-that-should-be-restricted-to-readonly-access-cve-2026-60135-8af94e5159de365e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=An%20attacker%20can%20modify%20data%20that%20should%20be%20restricted%20to%20read%E2%80%91only%20access.%20(CVE-2026-60135)&severity=high&id=6a6542169c2644c7f8087913 https://radar.offseq.com/threat/cve-2026-66374-cwe-1284-improper-validation-of-specified-quantity-in-input-in-nic-knot-resolver-5be96c99268edca2 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-66374%3A%20CWE-1284%20Improper%20Validation%20of%20Specified%20Quantity%20in%20Input%20in%20nic%20Knot%20Resolver&severity=high&id=6a6408d59c2644c7f8eca0f6 https://radar.offseq.com/threat/threatfox-iocs-for-2026-07-25-6b101d76d7f27e7e 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=ThreatFox%20IOCs%20for%202026-07-25&severity=medium&id=6a6556a59c2644c7f82375b3 https://radar.offseq.com/threat/engineering-a-zero-copy-sqlite-carver-for-nists-425gb-nsrl-database-on-free-tier-ci-and-the-two-50364341605e68bf 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Engineering%20a%20zero-copy%20SQLite%20carver%20for%20NIST's%20425GB%20NSRL%20database%20on%20free-tier%20CI%20%E2%80%94%20and%20the%20two%20production%20surprises%20that%20broke%20our%20first%20design&severity=medium&id=6a63f3969c2644c7f8bc84b5 https://radar.offseq.com/threat/cve-2026-66337-out-of-bounds-read-in-red-hat-red-hat-enterprise-linux-10-d73084ba73d5f9e9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66337%3A%20Out-of-bounds%20Read%20in%20Red%20Hat%20Red%20Hat%20Enterprise%20Linux%2010&severity=medium&id=6a63f3c69c2644c7f8bc974e https://radar.offseq.com/threat/cve-2026-66338-inconsistent-interpretation-of-http-requests-http-requestresponse-smuggling-in-red-hat-395e183f7403df38 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66338%3A%20Inconsistent%20Interpretation%20of%20HTTP%20Requests%20('HTTP%20Request%2FResponse%20Smuggling')%20in%20Red%20Hat%20Red%20Hat%20Enterprise%20Linux%2010&severity=medium&id=6a63f3c69c2644c7f8bc9752 https://radar.offseq.com/threat/cve-2026-66339-insertion-of-sensitive-information-into-sent-data-in-red-hat-red-hat-enterprise-linux-10-65d00373f27e8d8a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66339%3A%20Insertion%20of%20Sensitive%20Information%20Into%20Sent%20Data%20in%20Red%20Hat%20Red%20Hat%20Enterprise%20Linux%2010&severity=medium&id=6a63f3c69c2644c7f8bc9756 https://radar.offseq.com/threat/v3-etcd-tlslisteneracceptloop-spawns-unbounded-handshake-goroutines-with-no-deadline-70cf22c999adf5a8 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=V3%3A%20etcd%3A%20%60tlsListener.acceptLoop%60%20spawns%20unbounded%20handshake%20goroutines%20with%20no%20deadline&severity=high&id=6a6542179c2644c7f8087d04 https://radar.offseq.com/threat/adapters-frontmcp-server-side-request-forgery-ssrf-in-the-openapi-adapter-spec-change-poller-86df5b95146d225f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Adapters%3A%20FrontMCP%3A%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20the%20OpenAPI%20adapter%20spec-change%20poller&severity=medium&id=6a6542179c2644c7f8087d0e https://radar.offseq.com/threat/kin-openapi-kin-openapi-openapi3filter-unauthenticated-nil-pointer-panic-when-validating-a-request-42b7f0fb0152ec41 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Kin%20openapi%3A%20kin-openapi%20openapi3filter%3A%20unauthenticated%20nil-pointer%20panic%20when%20validating%20a%20request%20against%20a%20%60content%60%20parameter%20whose%20media%20type%20has%20no%20schema&severity=medium&id=6a6542179c2644c7f8087d15 https://radar.offseq.com/threat/v3-etcd-watch-api-authorization-bypass-via-open-ended-range-requests-837515cc207a892e 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=V3%3A%20etcd%3A%20Watch%20API%20authorization%20bypass%20via%20open-ended%20range%20requests&severity=high&id=6a6542179c2644c7f8087d2e https://radar.offseq.com/threat/libp2p-yamux-connection-dos-via-oversized-data-frame-34610f5ebbcb25ac 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=libp2p%3A%20yamux%20connection%20DoS%20via%20oversized%20data%20frame&severity=high&id=6a6542179c2644c7f8087d5d https://radar.offseq.com/threat/quasar-prototype-pollution-in-the-extend-utility-04c1987a4a578362 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Quasar%3A%20Prototype%20pollution%20in%20the%20extend()%20utility&severity=medium&id=6a6542199c2644c7f8087e31 https://radar.offseq.com/threat/oh-my-posh-arbitrary-command-execution-via-template-injection-in-the-path-segment-17906612a51a30c4 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Oh%20My%20Posh%3A%20Arbitrary%20command%20execution%20via%20template%20injection%20in%20the%20path%20segment&severity=high&id=6a6542199c2644c7f8087e37 https://radar.offseq.com/threat/oh-my-posh-terminal-escape-sequence-injection-via-unsanitized-prompt-segment-data-ead3a1c1b57b9cbd 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Oh%20My%20Posh%3A%20Terminal%20escape%20sequence%20injection%20via%20unsanitized%20prompt%20segment%20data&severity=medium&id=6a6542199c2644c7f8087e3e https://radar.offseq.com/threat/orgomnifacesomnifaces-omnifaces-forged-combined-resource-ids-and-related-outputpush-boundaries-233144f866d33da0 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Org.omnifaces%3Aomnifaces%3A%20OmniFaces%3A%20Forged%20combined-resource%20IDs%20and%20related%20output%2Fpush%20boundaries&severity=high&id=6a6542199c2644c7f8087e45 https://radar.offseq.com/threat/shescape-quadratic-time-denial-of-service-in-the-flag-protection-c90c133e51132f43 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Shescape%3A%20Quadratic-time%20denial%20of%20service%20in%20the%20flag-protection&severity=high&id=6a6542199c2644c7f8087e4e https://radar.offseq.com/threat/shescape-home-directory-disclosure-in-assignment-context-on-unix-with-dash-aad83dbc6015d0f9 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Shescape%3A%20Home-directory%20disclosure%20in%20assignment%20context%20on%20Unix%20with%20Dash&severity=medium&id=6a6542199c2644c7f8087e59 https://radar.offseq.com/threat/shescape-shell-injection-via-unescaped-parentheses-on-windows-with-cmd-c79e8541b171ba0b 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=Shescape%3A%20Shell%20injection%20via%20unescaped%20parentheses%20on%20Windows%20with%20CMD&severity=critical&id=6a6542199c2644c7f8087e64 https://radar.offseq.com/threat/shescape-path-disclosure-on-unix-with-zsh-6e0f19978a67dbbe 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Shescape%3A%20Path%20disclosure%20on%20Unix%20with%20Zsh&severity=medium&id=6a6542199c2644c7f8087e6f https://radar.offseq.com/threat/v4-openlist-arbitrary-file-read-via-path-prefix-confusion-in-share-creation-api-87f1baa1ed37b998 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=V4%3A%20OpenList%3A%20Arbitrary%20File%20Read%20via%20Path%20Prefix%20Confusion%20in%20Share%20Creation%20API&severity=medium&id=6a6542199c2644c7f8087e83 https://radar.offseq.com/threat/v4-openlist-search-metadatacount-disclosure-via-non-separator-aware-path-check-in-bleve-search-c547c7c85cb4d33d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=V4%3A%20OpenList%3A%20Search%20metadata%2Fcount%20disclosure%20via%20Non-Separator-Aware%20Path%20Check%20in%20Bleve%20Search&severity=medium&id=6a65421d9c2644c7f8088070 https://radar.offseq.com/threat/v4-openlist-authenticated-users-can-rename-files-outside-their-base-path-via-batch-rename-srcname-97ffa12657c9fcb7 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=V4%3A%20OpenList%3A%20Authenticated%20users%20can%20rename%20files%20outside%20their%20base%20path%20via%20batch%20rename%20%60src_name%60%20traversal&severity=high&id=6a65421d9c2644c7f8088077 https://radar.offseq.com/threat/orghttp4shttp4s-blaze-server-213-blaze-unbounded-websocket-message-aggregation-in-http4s-blaze-server-798e6ee7df32d68e 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Org.http4s%3Ahttp4s%20blaze%20server%202.13%3A%20blaze%3A%20Unbounded%20WebSocket%20message%20aggregation%20in%20http4s-blaze-server&severity=high&id=6a65421d9c2644c7f808807d https://radar.offseq.com/threat/orghttp4sblaze-http-213-blaze-chunked-body-trailer-fields-promoted-into-requestheaders-in-blaze-server-1a54f2739bf9e0b6 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Org.http4s%3Ablaze%20http%202.13%3A%20blaze%3A%20Chunked-body%20trailer%20fields%20promoted%20into%20Request.headers%20in%20blaze-server%20(front-end%20header-sanitization%20bypass)&severity=high&id=6a65421d9c2644c7f8088086 https://radar.offseq.com/threat/orghttp4shttp4s-blaze-server-213-blaze-multiple-http11-request-smuggling-primitives-in-blazes-java-c00fa09e28d5fe06 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Org.http4s%3Ahttp4s%20blaze%20server%202.13%3A%20blaze%3A%20Multiple%20HTTP%2F1.1%20request-smuggling%20primitives%20in%20blaze's%20Java%20wire%20parser&severity=high&id=6a65421d9c2644c7f808808d https://radar.offseq.com/threat/cve-2026-60134-cwe-784-in-weintek-cmt3092x-firmware-f0cd2481475cd7d7 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-60134%3A%20CWE-784%20in%20Weintek%20cMT3092X%20firmware&severity=high&id=6a63e5b19c2644c7f8ab11f1 https://radar.offseq.com/threat/cve-2026-61892-cwe-732-in-weintek-cmt3092x-firmware-472036f3e4ff09df 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-61892%3A%20CWE-732%20in%20Weintek%20cMT3092X%20firmware&severity=high&id=6a63e5b19c2644c7f8ab1200 https://radar.offseq.com/threat/cve-2026-61886-cwe-256-in-weintek-cmt3092x-firmware-2781d609eb196000 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-61886%3A%20CWE-256%20in%20Weintek%20cMT3092X%20firmware&severity=medium&id=6a63e5b19c2644c7f8ab11fb https://radar.offseq.com/threat/cve-2026-60135-cwe-286-in-weintek-cmt3092x-firmware-d885895cc5d950b8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-60135%3A%20CWE-286%20in%20Weintek%20cMT3092X%20firmware&severity=medium&id=6a63e5b19c2644c7f8ab11f6 https://radar.offseq.com/threat/cve-2026-16280-cwe-190-integer-overflow-or-wraparound-in-imagination-technologies-graphics-ddk-8c522f1cf02d79b5 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16280%3A%20CWE-190%3A%20Integer%20Overflow%20or%20Wraparound%20in%20Imagination%20Technologies%20Graphics%20DDK&severity=high&id=6a63e5b19c2644c7f8ab11ee https://radar.offseq.com/threat/malicious-code-in-trongridy-pypi-19c14f040477c9f7 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20trongridy%20(PyPI)&severity=high&id=6a65421f9c2644c7f8088167 https://radar.offseq.com/threat/poweradmin-oidc-sub-collation-bypass-in-poweradmin-leading-to-account-takeover-f41185b424605dfa 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Poweradmin%3A%20OIDC%20%60sub%60%20collation%20bypass%20in%20Poweradmin%20leading%20to%20account%20takeover&severity=high&id=6a65421f9c2644c7f808816b https://radar.offseq.com/threat/feed-it-your-linpeas-output-and-it-draws-every-path-from-a-low-priv-user-to-root-af09b99da5d18a9f 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=Feed%20it%20your%20LinPEAS%20output%20and%20it%20draws%20every%20path%20from%20a%20low-priv%20user%20to%20root&severity=low&id=6a63e5869c2644c7f8aaf807 https://radar.offseq.com/threat/poweradmin-broken-access-control-idor-any-zone-owner-can-modify-dns-records-in-zones-they-do-not-own-2764d4f66904083b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Poweradmin%3A%20Broken%20access%20control%20(IDOR)%3A%20any%20zone%20owner%20can%20modify%20DNS%20records%20in%20zones%20they%20do%20not%20own&severity=high&id=6a65421f9c2644c7f8088173 https://radar.offseq.com/threat/poweradmin-api-user-update-endpoint-leads-to-a-non-admin-reset-any-users-password-and-take-over-the-fc2529f85d04295d 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Poweradmin%3A%20API%20user-update%20endpoint%20leads%20to%20a%20non-admin%20reset%20any%20user's%20password%20and%20take%20over%20the%20superuser%20account&severity=high&id=6a65421f9c2644c7f808817d https://radar.offseq.com/threat/pheditor-authentication-bypass-in-forced-password-change-flow-via-unverified-current-password-d92e545e3cb927f3 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=Pheditor%3A%20Authentication%20Bypass%20in%20Forced%20Password-Change%20Flow%20via%20Unverified%20Current%20Password&severity=critical&id=6a65421f9c2644c7f8088187 https://radar.offseq.com/threat/sm-crypto-predictable-sm2-key-generation-in-nodejs-default-rng-uses-mathrandom-wall-clock-3564dcc0ea9ebb61 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=sm-crypto%3A%20Predictable%20SM2%20key%20generation%20in%20Node.js%3A%20default%20RNG%20uses%20Math.random%20%2B%20wall%20clock&severity=critical&id=6a65421f9c2644c7f808819c https://radar.offseq.com/threat/v4-cloudreve-adminread-oauth-tokens-can-trigger-server-side-node-test-requests-ed519c8d6840e1fa 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=V4%3A%20Cloudreve%20Admin.Read%20OAuth%20tokens%20can%20trigger%20server-side%20node%20test%20requests&severity=medium&id=6a6542219c2644c7f80884b3 https://radar.offseq.com/threat/vantage6-algorithm-developer-can-edit-another-developers-algorithm-that-is-pending-under-review-db14822251a20668 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=vantage6%3A%20Algorithm%20developer%20can%20edit%20another%20developer's%20algorithm%20that%20is%20pending%20%2F%20under%20review&severity=high&id=6a6542219c2644c7f80884b9 https://radar.offseq.com/threat/hubuum-client-library-rust-sensitive-data-may-be-exposed-through-default-diagnostics-2ec6b39a901c55d0 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=Hubuum%20client%20library%20(Rust)%3A%20Sensitive%20data%20may%20be%20exposed%20through%20default%20diagnostics&severity=low&id=6a6542219c2644c7f80884bd https://radar.offseq.com/threat/hubuum-client-library-rust-configured-custom-transports-may-be-bypassed-exposing-credentials-and-dec43eee83347171 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Hubuum%20client%20library%20(Rust)%3A%20Configured%20custom%20transports%20may%20be%20bypassed%2C%20exposing%20credentials%20and%20network%20traffic&severity=medium&id=6a6542219c2644c7f80884c3 https://radar.offseq.com/threat/hubuum-client-library-rust-authenticated-requests-may-escape-the-configured-base-path-through-redirects-421bcae5dafdc244 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Hubuum%20client%20library%20(Rust)%3A%20Authenticated%20requests%20may%20escape%20the%20configured%20base%20path%20through%20redirects&severity=medium&id=6a6542219c2644c7f80884c9 https://radar.offseq.com/threat/frp-unauthenticated-remote-denial-of-service-in-the-frp-ssh-tunnel-gateway-via-integer-overflow-5330d448a80155bb 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=frp%3A%20Unauthenticated%20Remote%20Denial%20of%20Service%20in%20the%20frp%20SSH%20Tunnel%20Gateway%20via%20Integer%20Overflow&severity=high&id=6a6542219c2644c7f80884ce https://radar.offseq.com/threat/anephenixhub-unauthenticated-websocket-rpc-waiter-resource-exhaustion-165e0da775fac654 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=%40anephenix%2Fhub%3A%20Unauthenticated%20WebSocket%20RPC%20Waiter%20Resource%20Exhaustion&severity=high&id=6a6542219c2644c7f80884d5 https://radar.offseq.com/threat/kite-kubernetes-proxy-path-traversal-allows-authenticated-users-to-bypass-rbac-and-read-cluster-wide-9d8af6b88302ea07 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Kite%20Kubernetes%20proxy%20path%20traversal%20allows%20authenticated%20users%20to%20bypass%20RBAC%20and%20read%20cluster-wide%20resources&severity=medium&id=6a6542219c2644c7f80884db https://radar.offseq.com/threat/orgopenidentityplatformopendjopendj-server-legacy-opendj-sasl-plain-authzid-bypassing-the-proxy-aci-1ddcd87653a0497b 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Org.openidentityplatform.opendj%3Aopendj%20server%20legacy%3A%20OpenDJ%20SASL%20PLAIN%20authzid%20bypassing%20the%20proxy%20ACI%20scope%20check&severity=critical&id=6a6542219c2644c7f80884e3 https://radar.offseq.com/threat/orgopenidentityplatformopendjopendj-dsml-servlet-opendj-unauthenticated-ssrf-local-file-read-and-41e2db457287a433 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Org.openidentityplatform.opendj%3Aopendj%20dsml%20servlet%3A%20OpenDJ%20unauthenticated%20SSRF%2C%20local%20file%20read%20and%20unbounded-read%20DoS%20in%20the%20DSMLv2%20gateway&severity=critical&id=6a6542219c2644c7f80884e9 https://radar.offseq.com/threat/pheditor-terminal-command-allowlist-bypass-via-argument-injection-leads-to-rce-surviving-vector-after-6e108ffa755ed7ba 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Pheditor%3A%20Terminal%20command-allowlist%20bypass%20via%20argument%20injection%20leads%20to%20RCE%20%E2%80%94%20surviving%20vector%20after%20the%20metacharacter-sanitization%20fixes&severity=high&id=6a6542259c2644c7f8089cf4 https://radar.offseq.com/threat/gitpython-environment-variable-exfiltration-via-repocreateremote-remoteadd-url-incomplete-fix-of-ghsa-9cb37a77a15bda8b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=GitPython%3A%20Environment-variable%20exfiltration%20via%20Repo.create_remote()%20%2F%20Remote.add()%20URL%20(incomplete%20fix%20of%20GHSA-rwj8-pgh3-r573)&severity=high&id=6a6542259c2644c7f8089cfa https://radar.offseq.com/threat/server-budibase-ssrf-via-bare-fetch-in-uploadurl-during-ai-table-generation-d987465911758b0e 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20SSRF%20via%20bare%20fetch()%20in%20uploadUrl%20during%20AI%20table%20generation&severity=medium&id=6a6542259c2644c7f8089d00 https://radar.offseq.com/threat/server-budibase-ssrf-via-dns-rebinding-in-the-rest-datasource-integration-d3ea9ebd40448eb6 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20SSRF%20via%20DNS%20rebinding%20in%20the%20REST%20datasource%20integration&severity=high&id=6a6542259c2644c7f8089d07 https://radar.offseq.com/threat/server-budibase-nosql-injection-in-mongodb-integration-collection-dump-where-js-exec-cross-collection-5d732dff178318d5 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20NoSQL%20injection%20in%20MongoDB%20integration%3A%20collection%20dump%2C%20%24where%20JS%20exec%2C%20cross-collection%20pivot%2C%20arbitrary%20update%2Fdelete&severity=high&id=6a6542259c2644c7f8089d10 https://radar.offseq.com/threat/server-budibase-account-enumeration-via-login-lockout-response-differential-46987f8616e59b43 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20Account%20Enumeration%20via%20Login%20Lockout%20Response%20Differential&severity=medium&id=6a6542259c2644c7f8089d17 https://radar.offseq.com/threat/server-budibase-chat-link-handoff-identity-confusion-same-tenant-account-link-csrf-5e68b2320774b81e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20Chat-Link%20Handoff%20Identity%20Confusion%20(Same-Tenant%20Account-Link%20CSRF)&severity=high&id=6a6542259c2644c7f8089d1e https://radar.offseq.com/threat/cve-2026-61884-cwe-288-in-tycon-systems-tpdin-monitor-web2-38fd252c1e4f018a 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-61884%3A%20CWE-288%20in%20Tycon%20Systems%20TPDIN-Monitor-WEB2&severity=critical&id=6a63e22b9c2644c7f8a60474 https://radar.offseq.com/threat/cve-2026-55985-cwe-312-in-tycon-systems-tpdin-monitor-web2-0392c70fa73e4596 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-55985%3A%20CWE-312%20in%20Tycon%20Systems%20TPDIN-Monitor-WEB2&severity=medium&id=6a63e22b9c2644c7f8a6046f https://radar.offseq.com/threat/ffmpeg-through-812-fixed-in-commit-5d7112c-contains-a-heap-out-of-bounds-write-vulnerability-in-the-c45dd8904917222d 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20through%208.1.2%2C%20fixed%20in%20commit%205d7112c%2C%20contains%20a%20heap%20out-of-bounds%20write%20vulnerability%20in%20the%20vf_hqdn3d%20filter%20that%20allows%20attackers%20to%E2%80%A6%20(CVE-2026-66036)&severity=high&id=6a65422a9c2644c7f808a1a7 https://radar.offseq.com/threat/ffmpeg-through-812-fixed-in-commit-b506faf-contains-a-heap-out-of-bounds-write-vulnerability-in-the-b926ad0ff6ec4f8d 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20through%208.1.2%2C%20fixed%20in%20commit%20b506faf%2C%20contains%20a%20heap%20out-of-bounds%20write%20vulnerability%20in%20the%20native%20PNG%20and%20APNG%20encoders%20that%20allows%E2%80%A6%20(CVE-2026-66040)&severity=high&id=6a65422a9c2644c7f808a1a1 https://radar.offseq.com/threat/milkdown-before-7213-contains-a-dom-cross-site-scripting-vulnerability-in-the-milkdownplugin-emoji-ba3cd2d381a222c4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Milkdown%20before%207.21.3%20contains%20a%20DOM%20cross-site%20scripting%20vulnerability%20in%20the%20%40milkdown%2Fplugin-emoji%20package%20that%20allows%20unauthenticated%20attackers%E2%80%A6%20(CVE-2026-57531)&severity=medium&id=6a65422a9c2644c7f808a199 https://radar.offseq.com/threat/ffmpeg-through-812-fixed-in-commit-aafb5c6-contains-a-signed-integer-overflow-vulnerability-in-the-86e9bfa56f3dc784 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20through%208.1.2%2C%20fixed%20in%20commit%20aafb5c6%2C%20contains%20a%20signed%20integer%20overflow%20vulnerability%20in%20the%20MACE6%20audio%20decoder%20that%20allows%20attackers%20to%E2%80%A6%20(CVE-2026-66039)&severity=high&id=6a6542289c2644c7f808a029 https://radar.offseq.com/threat/ffmpeg-through-812-fixed-in-commit-8670835-contains-an-information-disclosure-vulnerability-in-the-998a4167dc009d65 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20through%208.1.2%2C%20fixed%20in%20commit%208670835%2C%20contains%20an%20information%20disclosure%20vulnerability%20in%20the%20LCL%2FZLIB%20video%20decoder%20that%20allows%20attackers%E2%80%A6%20(CVE-2026-66038)&severity=high&id=6a6542289c2644c7f808a023 https://radar.offseq.com/threat/milkdown-before-7213-contains-a-stored-cross-site-scripting-vulnerability-in-the-milkdownpreset-0d636ae19a7e8da0 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Milkdown%20before%207.21.3%20contains%20a%20stored%20cross-site%20scripting%20vulnerability%20in%20the%20%40milkdown%2Fpreset-commonmark%20and%20%40milkdown%2Fcomponents%20packages%E2%80%A6%20(CVE-2026-57530)&severity=medium&id=6a6542289c2644c7f808a01a https://radar.offseq.com/threat/ffmpeg-70-through-812-fixed-in-commit-4da9812-contains-a-heap-out-of-bounds-write-vulnerability-in-the-193334dc7a6e23a4 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%207.0%20through%208.1.2%2C%20fixed%20in%20commit%204da9812%2C%20contains%20a%20heap%20out-of-bounds%20write%20vulnerability%20in%20the%20vf_quirc%20filter%20that%20allows%20an%20attacker%E2%80%A6%20(CVE-2026-66041)&severity=high&id=6a6542289c2644c7f808a014 https://radar.offseq.com/threat/ffmpeg-through-812-fixed-in-commit-5d7112c-contains-an-uncontrolled-resource-consumption-vulnerability-1ec65b3369adbc8a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20through%208.1.2%2C%20fixed%20in%20commit%205d7112c%2C%20contains%20an%20uncontrolled%20resource%20consumption%20vulnerability%20in%20the%20IAMF%20demuxer%20that%20allows%20an%E2%80%A6%20(CVE-2026-66037)&severity=high&id=6a6542289c2644c7f808a004 https://radar.offseq.com/threat/a-flaw-was-found-in-the-cluster-proxy-service-proxy-component-used-in-red-hat-advanced-cluster-b79eb257907ba168 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=A%20flaw%20was%20found%20in%20the%20cluster-proxy%20service-proxy%20component%20used%20in%20Red%20Hat%20Advanced%20Cluster%20Management%20for%20Kubernetes%20(RHACM)%20and%E2%80%A6%20(CVE-2026-17107)&severity=high&id=6a6542289c2644c7f8089ff3 https://radar.offseq.com/threat/improper-authorization-in-azure-portal-allows-an-unauthorized-attacker-to-disclose-information-over-a-aaa3cacbc23ce5c0 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Improper%20authorization%20in%20Azure%20Portal%20allows%20an%20unauthorized%20attacker%20to%20disclose%20information%20over%20a%20network.%20(CVE-2026-62835)&severity=critical&id=6a6542289c2644c7f8089fc8 https://radar.offseq.com/threat/server-budibase-mysql-describe-backtick-injection-via-multiplestatements-in-database-connector-46c924178ef9d1a2 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20MySQL%20DESCRIBE%20Backtick%20Injection%20via%20multipleStatements%20in%20Database%20Connector&severity=high&id=6a65422c9c2644c7f808a485 https://radar.offseq.com/threat/server-budibase-nosql-injection-via-json-parameter-interpolation-in-mongodb-query-execution-253373b9e73b5857 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20NoSQL%20Injection%20via%20JSON%20Parameter%20Interpolation%20in%20MongoDB%20Query%20Execution&severity=high&id=6a65422c9c2644c7f808a48c https://radar.offseq.com/threat/server-budibase-oauth2-token-disclosure-via-automation-test-results-broadcast-to-other-builders-39e26308655e0230 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20OAuth2%20Token%20Disclosure%20via%20Automation%20Test%20Results%20Broadcast%20to%20Other%20Builders&severity=medium&id=6a65422c9c2644c7f808a493 https://radar.offseq.com/threat/server-budibase-unauthenticated-user-information-disclosure-via-public-tenant-user-lookup-endpoint-ee7109dec2e2a586 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20Unauthenticated%20user%20information%20disclosure%20via%20public%20tenant%20user%20lookup%20endpoint&severity=high&id=6a65422e9c2644c7f808a5ee https://radar.offseq.com/threat/server-budibase-unauthenticated-rest-datasource-credential-theft-via-cross-origin-auth-leak-b3289fddaf47b17b 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20Unauthenticated%20REST%20Datasource%20Credential%20Theft%20via%20Cross-Origin%20Auth%20Leak&severity=critical&id=6a65422e9c2644c7f808a5f5 https://radar.offseq.com/threat/v4-cloudreve-wopi-view-sessions-can-write-files-and-wopi-access-token-secret-is-ignored-cve-2026-62323-dd821cc7b0044a8b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=V4%3A%20Cloudreve%20WOPI%20view%20sessions%20can%20write%20files%20and%20WOPI%20access%20token%20secret%20is%20ignored%20(CVE-2026-62323)&severity=medium&id=6a65422e9c2644c7f808a5fc https://radar.offseq.com/threat/server-budibase-oidc-sso-account-takeover-incoming-identity-linked-by-email-without-checking-5957d62fa1838118 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20OIDC%20SSO%20account%20takeover%3A%20incoming%20identity%20linked%20by%20email%20without%20checking%20email_verified&severity=critical&id=6a65422e9c2644c7f808a601 https://radar.offseq.com/threat/server-budibase-dns-rebinding-ssrf-bypasses-remain-in-openapi-import-and-rest-query-execution-487c3be914c87dda 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20DNS%20rebinding%20SSRF%20bypasses%20remain%20in%20OpenAPI%20import%20and%20REST%20query%20execution&severity=high&id=6a65422e9c2644c7f808a607 https://radar.offseq.com/threat/server-budibase-s3-presigned-url-endpoint-authorization-regression-in-v3394-allows-basic-users-to-d7b099fadb732881 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20S3%20presigned%20URL%20endpoint%20authorization%20regression%20in%20v3.39.4%20allows%20BASIC%20users%20to%20obtain%20S3%20PutObject%20presigned%20URLs&severity=high&id=6a65422e9c2644c7f808a610 https://radar.offseq.com/threat/budibase-server-filesystem-existenceread-oracle-via-builder-controlled-mongodb-tlscertificatekeyfile-1183235a97035a0d 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Budibase%3A%20Server%20Filesystem%20Existence%2FRead%20Oracle%20via%20Builder-Controlled%20MongoDB%20tlsCertificateKeyFile&severity=high&id=6a6542309c2644c7f808a736 https://radar.offseq.com/threat/server-budibase-sql-injection-via-multiplestatements-true-3b00631cb39a1028 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20SQL%20Injection%20via%20%60multipleStatements%3A%20true%60&severity=critical&id=6a6542309c2644c7f808a752 https://radar.offseq.com/threat/server-budibase-email-change-idor-via-post-apiv2email-allows-full-account-takeover-accountid-not-53eab05dab9e1fdd 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20Email%20Change%20IDOR%20via%20POST%20%2Fapi%2Fv2%2Femail%20allows%20full%20Account%20Takeover%20(accountId%20not%20validated%20against%20session)&severity=high&id=6a6542309c2644c7f808a757 https://radar.offseq.com/threat/server-budibase-sso-oauth2-token-leakage-via-user-metadata-endpoints-to-power-role-users-4d826c26c16086d3 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20SSO%20OAuth2%20Token%20Leakage%20via%20User%20Metadata%20Endpoints%20to%20Power-Role%20Users&severity=medium&id=6a6542309c2644c7f808a75c https://radar.offseq.com/threat/server-budibase-missing-rbac-on-get-apiglobalgroups-allows-basic-users-to-enumerate-all-tenant-groups-404a199e757dab6f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20Missing%20RBAC%20on%20GET%20%2Fapi%2Fglobal%2Fgroups%20allows%20BASIC%20users%20to%20enumerate%20all%20tenant%20groups%20and%20role%20mappings&severity=medium&id=6a6542309c2644c7f808a76b https://radar.offseq.com/threat/server-budibase-privilege-escalation-via-public-role-assignment-api-missing-app-level-authorization-9f5b529b21da48db 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Server%3A%20Budibase%3A%20Privilege%20escalation%20via%20public%20role%20assignment%20API%20missing%20app-level%20authorization&severity=high&id=6a6542309c2644c7f808a772 https://radar.offseq.com/threat/orgopenidentityplatformopenamopenam-core-openam-unauthenticated-remote-code-execution-via-classforname-7678e3fe5efb8e5c 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Org.openidentityplatform.openam%3Aopenam%20core%3A%20OpenAM%3A%20Unauthenticated%20Remote%20Code%20Execution%20via%20Class.forName%20in%20AuthXMLUtils.createCustomCallback%20(CVE-2026-62379)&severity=critical&id=6a6542309c2644c7f808a77c https://radar.offseq.com/threat/ontrac-notifies-customers-of-data-breach-after-network-hack-66cbfb4cabdb216b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=OnTrac%20notifies%20customers%20of%20data%20breach%20after%20network%20hack&severity=medium&id=6a63ccf29c2644c7f88b355a https://radar.offseq.com/threat/cve-2026-62835-cwe-285-improper-authorization-in-microsoft-azure-portal-defd11bbcf2e17c7 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-62835%3A%20CWE-285%3A%20Improper%20Authorization%20in%20Microsoft%20Azure%20Portal&severity=critical&id=6a63c2e79c2644c7f87c2d4a https://radar.offseq.com/threat/hermes-ai-agent-used-to-automate-attack-on-thai-finance-ministry-dd2f8286f80f52bf 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Hermes%20AI%20agent%20used%20to%20automate%20attack%20on%20Thai%20Finance%20Ministry&severity=medium&id=6a63bee19c2644c7f876a61c https://radar.offseq.com/threat/how-are-you-handling-false-positives-from-wildcard-dns-and-catch-all-responses-in-automated-content-abcab92d94a68f9c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=How%20are%20you%20handling%20false%20positives%20from%20wildcard%20DNS%20and%20catch%20all%20responses%20in%20automated%20content%20discovery%3F&severity=medium&id=6a63b7d79c2644c7f86cc30c https://radar.offseq.com/threat/cve-2026-17107-unintended-proxy-or-intermediary-confused-deputy-in-red-hat-multicluster-engine-for-7ab6b2ce7b62d558 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-17107%3A%20Unintended%20Proxy%20or%20Intermediary%20('Confused%20Deputy')%20in%20Red%20Hat%20Multicluster%20Engine%20for%20Kubernetes&severity=high&id=6a63b7fc9c2644c7f86ce7a3 https://radar.offseq.com/threat/cve-2026-48037-cwe-693-protection-mechanism-failure-in-kerberosmansour-hulumi-1be4b6f28c4980ae 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48037%3A%20CWE-693%3A%20Protection%20Mechanism%20Failure%20in%20kerberosmansour%20hulumi&severity=medium&id=6a63b7fc9c2644c7f86ce7c1 https://radar.offseq.com/threat/cve-2026-48036-cwe-755-improper-handling-of-exceptional-conditions-in-kerberosmansour-hulumi-b006f05105bf7fc5 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-48036%3A%20CWE-755%3A%20Improper%20Handling%20of%20Exceptional%20Conditions%20in%20kerberosmansour%20hulumi&severity=high&id=6a63b7fc9c2644c7f86ce7bc https://radar.offseq.com/threat/cve-2026-48035-cwe-1059-insufficient-technical-documentation-in-kerberosmansour-hulumi-1e249fa6cdcc5084 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-48035%3A%20CWE-1059%3A%20Insufficient%20Technical%20Documentation%20in%20kerberosmansour%20hulumi&severity=high&id=6a63b7fc9c2644c7f86ce7b7 https://radar.offseq.com/threat/cve-2026-48033-cwe-693-protection-mechanism-failure-in-kerberosmansour-hulumi-113b9c704d91c1c5 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-48033%3A%20CWE-693%3A%20Protection%20Mechanism%20Failure%20in%20kerberosmansour%20hulumi&severity=high&id=6a63b7fc9c2644c7f86ce7ac https://radar.offseq.com/threat/cve-2026-48032-cwe-697-incorrect-comparison-in-kerberosmansour-hulumi-8a67197227328109 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-48032%3A%20CWE-697%3A%20Incorrect%20Comparison%20in%20kerberosmansour%20hulumi&severity=high&id=6a63b7fc9c2644c7f86ce7a7 https://radar.offseq.com/threat/cve-2026-48034-cwe-284-improper-access-control-in-kerberosmansour-hulumi-dba1176adac66880 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-48034%3A%20CWE-284%3A%20Improper%20Access%20Control%20in%20kerberosmansour%20hulumi&severity=high&id=6a63b7fc9c2644c7f86ce7b1 https://radar.offseq.com/threat/cve-2026-48021-cwe-295-improper-certificate-validation-in-med-united-epa4all-26e8e441c1a877ee 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-48021%3A%20CWE-295%3A%20Improper%20Certificate%20Validation%20in%20med-united%20epa4all&severity=critical&id=6a63b0f39c2644c7f8639546 https://radar.offseq.com/threat/cve-2026-54342-cwe-295-improper-certificate-validation-in-med-united-epa4all-197ff69699c3cb06 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-54342%3A%20CWE-295%3A%20Improper%20Certificate%20Validation%20in%20med-united%20epa4all&severity=high&id=6a63b0f39c2644c7f863954b https://radar.offseq.com/threat/announcing-the-external-penetration-testing-program-pack-c87cacf9a39eabb5 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Announcing%20the%20External%20Penetration%20Testing%20Program%20Pack&severity=medium&id=6a63a9c09c2644c7f85af86b https://radar.offseq.com/threat/hackers-hijack-hotel-wi-fi-dns-to-steal-microsoft-365-accounts-1ca7fc85aa3a43c1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Hackers%20hijack%20hotel%20Wi-Fi%20DNS%20to%20steal%20Microsoft%20365%20accounts&severity=medium&id=6a63a9c99c2644c7f85afae0 https://radar.offseq.com/threat/openais-cyber-eval-models-escaped-their-sandbox-and-hacked-hugging-face-to-cheat-on-a-test-55ff03d5e06c8fc4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=OpenAI's%20cyber%20eval%20models%20escaped%20their%20sandbox%20and%20hacked%20Hugging%20Face%20to%20cheat%20on%20a%20test&severity=medium&id=6a639f369c2644c7f84d1ae9 https://radar.offseq.com/threat/cve-2026-65623-cwe-407-inefficient-algorithmic-complexity-in-mtrudel-bandit-2c38ed851f27485b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65623%3A%20CWE-407%20Inefficient%20Algorithmic%20Complexity%20in%20mtrudel%20bandit&severity=high&id=6a6398959c2644c7f843de5c https://radar.offseq.com/threat/why-live-chat-agents-can-read-your-messages-before-you-hit-send-kaspersky-official-blog-635700af333451b6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Why%20live%20chat%20agents%20can%20read%20your%20messages%20before%20you%20hit%20%E2%80%9CSend%E2%80%9D%20%7C%20Kaspersky%20official%20blog&severity=medium&id=6a6391a49c2644c7f839e3ea https://radar.offseq.com/threat/cve-2026-65711-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-c313c22fdb7eccfa 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65711%3A%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20('OS%20Command%20Injection')%20in%20nuxsmin%20sysPass&severity=high&id=6a6398959c2644c7f843de72 https://radar.offseq.com/threat/cve-2026-65710-authorization-bypass-through-user-controlled-key-in-nuxsmin-syspass-e6572567032b6e18 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65710%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20nuxsmin%20sysPass&severity=high&id=6a6398959c2644c7f843de6e https://radar.offseq.com/threat/cve-2026-65709-authorization-bypass-through-user-controlled-key-in-nuxsmin-syspass-6e3b6d893cb4beb2 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65709%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20nuxsmin%20sysPass&severity=high&id=6a6398959c2644c7f843de6a https://radar.offseq.com/threat/cve-2026-65708-authorization-bypass-through-user-controlled-key-in-nuxsmin-syspass-6a430e335199c137 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65708%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20nuxsmin%20sysPass&severity=high&id=6a6398959c2644c7f843de66 https://radar.offseq.com/threat/cve-2026-65707-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-in-3861a10413822e27 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65707%3A%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20likeadmin-likeshop%20likeshop&severity=high&id=6a6398959c2644c7f843de62 https://radar.offseq.com/threat/microsoft-blames-massive-microsoft-365-outage-on-maintenance-bug-d2e3ad4c48541dea 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Microsoft%20blames%20massive%20Microsoft%20365%20outage%20on%20maintenance%20bug&severity=medium&id=6a638a299c2644c7f82fa402 https://radar.offseq.com/threat/incorrect-calculation-of-buffer-size-vulnerability-in-apache-nimble-when-processing-legacy-advertising-537873fad983b9a3 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Incorrect%20Calculation%20of%20Buffer%20Size%20vulnerability%20in%20Apache%20NimBLE%20when%20processing%20Legacy%20Advertising%20Report%20HCI%20event.%20(CVE-2026-45812)&severity=medium&id=6a65422b9c2644c7f808a29e https://radar.offseq.com/threat/buffer-copy-without-checking-size-of-input-classic-buffer-overflow-vulnerability-in-apache-nimble-cve-a217f059cf8b1c7b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Buffer%20Copy%20without%20Checking%20Size%20of%20Input%20('Classic%20Buffer%20Overflow')%20vulnerability%20in%20Apache%20NimBLE.%20(CVE-2026-45811)&severity=high&id=6a65422b9c2644c7f808a298 https://radar.offseq.com/threat/null-pointer-dereference-vulnerability-in-apache-nimble-in-le-long-term-key-request-event-cve-2026-c430281f913b39ca 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=NULL%20Pointer%20Dereference%20vulnerability%20in%20Apache%20NimBLE%20in%20LE%20Long%20Term%20Key%20Request%20event.%20(CVE-2026-45816)&severity=high&id=6a6542289c2644c7f8089ffe https://radar.offseq.com/threat/improper-input-validation-vulnerability-in-apache-nimble-in-mesh-proxy-sar-reassembly-could-result-in-09df70da2f92dee2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Improper%20Input%20Validation%20vulnerability%20in%20Apache%20NimBLE%20in%20Mesh%20Proxy%20SAR%20reassembly%20could%20result%20in%20passing%20broken%20data%20toward%20application%E2%80%A6%20(CVE-2026-46452)&severity=medium&id=6a6542289c2644c7f8089fcc https://radar.offseq.com/threat/cve-2026-66027-missing-authorization-in-kortix-ai-suna-c079776d27d400cd 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-66027%3A%20Missing%20Authorization%20in%20kortix-ai%20suna&severity=high&id=6a638a5d9c2644c7f82fb854 https://radar.offseq.com/threat/cve-2026-17039-incorrect-authorization-in-red-hat-red-hat-certificate-system-10-92dbb00f0459d599 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-17039%3A%20Incorrect%20Authorization%20in%20Red%20Hat%20Red%20Hat%20Certificate%20System%2010&severity=low&id=6a638a5d9c2644c7f82fb84a https://radar.offseq.com/threat/cve-2026-58586-cwe-1395-dependency-on-vulnerable-third-party-component-in-zapad-imagewebp-dc735fe090fd6da1 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-58586%3A%20CWE-1395%20Dependency%20on%20Vulnerable%20Third-Party%20Component%20in%20ZAPAD%20Image%3A%3AWebP&severity=high&id=6a637ff99c2644c7f8203e22 https://radar.offseq.com/threat/cve-2026-66007-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-9ae7434cc0763864 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66007%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20huggingface%20datasets&severity=medium&id=6a637ffa9c2644c7f8203e4f https://radar.offseq.com/threat/cve-2026-66006-missing-authentication-for-critical-function-in-treeverse-lakefs-d22c2d97ddb3f330 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66006%3A%20Missing%20Authentication%20for%20Critical%20Function%20in%20treeverse%20lakeFS&severity=medium&id=6a637ffa9c2644c7f8203e49 https://radar.offseq.com/threat/cve-2026-66005-permissive-list-of-allowed-inputs-in-janhq-jan-f543feaca21e02cf 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66005%3A%20Permissive%20List%20of%20Allowed%20Inputs%20in%20janhq%20jan&severity=medium&id=6a637ffa9c2644c7f8203e43 https://radar.offseq.com/threat/cve-2026-49326-cwe-862-missing-authorization-in-apache-software-foundation-apache-hbase-baed08f1110e307f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-49326%3A%20CWE-862%20Missing%20Authorization%20in%20Apache%20Software%20Foundation%20Apache%20HBase&severity=medium&id=6a637ff99c2644c7f8203e19 https://radar.offseq.com/threat/cve-2026-16802-cwe-312-cleartext-storage-of-sensitive-information-in-devolutions-powershell-universal-bac0fb84759d240b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16802%3A%20CWE-312%20Cleartext%20storage%20of%20sensitive%20information%20in%20Devolutions%20PowerShell%20Universal&severity=medium&id=6a637ff99c2644c7f8203e16 https://radar.offseq.com/threat/cve-2026-16801-cwe-94-improper-control-of-generation-of-code-code-injection-in-devolutions-powershell-e6df9b4a815b847e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16801%3A%20CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')%20in%20Devolutions%20PowerShell%20Universal&severity=high&id=6a637ff99c2644c7f8203e13 https://radar.offseq.com/threat/cve-2026-16800-cwe-94-improper-control-of-generation-of-code-code-injection-in-devolutions-powershell-09606fa0230f9864 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16800%3A%20CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')%20in%20Devolutions%20PowerShell%20Universal&severity=high&id=6a637ff99c2644c7f8203e10 https://radar.offseq.com/threat/cve-2026-16799-cwe-862-missing-authorization-in-devolutions-powershell-universal-cb246cc955a73654 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16799%3A%20CWE-862%3A%20Missing%20Authorization%20in%20Devolutions%20PowerShell%20Universal&severity=medium&id=6a637ff99c2644c7f8203e0d https://radar.offseq.com/threat/cve-2026-16798-cwe-201-insertion-of-sensitive-information-into-sent-data-in-devolutions-powershell-6cef4395ddc2ba12 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16798%3A%20CWE-201%20Insertion%20of%20sensitive%20information%20into%20sent%20data%20in%20Devolutions%20PowerShell%20Universal&severity=medium&id=6a637ff99c2644c7f8203e0a https://radar.offseq.com/threat/cve-2026-66004-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-ahujasid-eb8ddd72f88f772c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66004%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20ahujasid%20blender-mcp&severity=medium&id=6a637ffa9c2644c7f8203e3d https://radar.offseq.com/threat/cve-2026-56163-cwe-306-missing-authentication-for-critical-function-in-microsoft-azure-kubernetes-c5571c5da7b404e3 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-56163%3A%20CWE-306%3A%20Missing%20Authentication%20for%20Critical%20Function%20in%20Microsoft%20Azure%20Kubernetes%20Service&severity=critical&id=6a637ff99c2644c7f8203e1c https://radar.offseq.com/threat/cve-2026-58630-cwe-284-improper-access-control-in-microsoft-azure-app-service-for-linux-12c1219307778a3e 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-58630%3A%20CWE-284%3A%20Improper%20Access%20Control%20in%20Microsoft%20Azure%20App%20Service%20for%20Linux&severity=critical&id=6a637ff99c2644c7f8203e26 https://radar.offseq.com/threat/cve-2026-57106-cwe-918-server-side-request-forgery-ssrf-in-microsoft-microsoft-purview-data-governance-0983080847f54f67 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-57106%3A%20CWE-918%3A%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20Microsoft%20Microsoft%20Purview%20Data%20Governance&severity=critical&id=6a637ff99c2644c7f8203e1f https://radar.offseq.com/threat/cve-2026-8789-cwe-863-incorrect-authorization-in-easyappointments-easy-appointments-4bfb4797443ff7fb 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-8789%3A%20CWE-863%20Incorrect%20Authorization%20in%20easyappointments%20Easy%20Appointments&severity=high&id=6a637ffa9c2644c7f8203e55 https://radar.offseq.com/threat/in-other-news-dolphin-x-ai-powered-malware-car-anti-theft-device-hack-400-linux-kernel-flaws-ce51f3166a9921d6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=In%20Other%20News%3A%20Dolphin%20X%20AI-Powered%20Malware%2C%20Car%20Anti-Theft%20Device%20Hack%2C%20400%20Linux%20Kernel%20Flaws&severity=medium&id=6a63750e9c2644c7f8102c1d https://radar.offseq.com/threat/cve-2026-8308-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-a9441160bcbbc89e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-8308%3A%20CWE-79%20Improper%20neutralization%20of%20input%20during%20web%20page%20generation%20('cross-site%20scripting')%20in%20Polen%20Media%20Software%20and%20Information%20Services%20Website%20Template&severity=medium&id=6a6378c69c2644c7f8151ed8 https://radar.offseq.com/threat/cve-2026-17059-authorization-bypass-through-user-controlled-key-in-red-hat-red-hat-build-of-keycloak-17f3e5f02bb3c845 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-17059%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20Red%20Hat%20Red%20Hat%20Build%20of%20Keycloak&severity=medium&id=6a6378c49c2644c7f8151c37 https://radar.offseq.com/threat/chick-fil-a-data-breach-affects-more-than-13000-customers-bcae701eaf3ee40d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Chick-fil-A%20data%20breach%20affects%20more%20than%2013%2C000%20customers&severity=medium&id=6a63751f9c2644c7f8103cd6 https://radar.offseq.com/threat/slopsquatting-phantom-domains-and-hallusquatting-are-the-same-ai-attack-37f666aa2185556b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Slopsquatting%2C%20Phantom%20Domains%2C%20and%20HalluSquatting%20Are%20the%20Same%20AI%20Attack&severity=medium&id=6a63751f9c2644c7f8103cd9 https://radar.offseq.com/threat/cve-2026-55732-cwe-125-out-of-bounds-read-in-loytec-lip-me20xc-692155386ada85de 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-55732%3A%20CWE-125%20Out-of-bounds%20read%20in%20Loytec%20LIP-ME20xC&severity=high&id=6a6378c49c2644c7f8151c47 https://radar.offseq.com/threat/cve-2026-55731-cwe-606-unchecked-input-for-loop-condition-in-loytec-lip-me20xc-c19e468034dd5a06 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-55731%3A%20CWE-606%20Unchecked%20input%20for%20loop%20condition%20in%20Loytec%20LIP-ME20xC&severity=medium&id=6a6378c49c2644c7f8151c44 https://radar.offseq.com/threat/cve-2026-55730-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-7a2b920ee0429123 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-55730%3A%20CWE-79%20Improper%20neutralization%20of%20input%20during%20web%20page%20generation%20('cross-site%20scripting')%20in%20Loytec%20LWEB-802&severity=high&id=6a6378c49c2644c7f8151c41 https://radar.offseq.com/threat/cve-2026-55729-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-loytec-lweb-802-bd2c388a5f65fbd6 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-55729%3A%20CWE-200%20Exposure%20of%20sensitive%20information%20to%20an%20unauthorized%20actor%20in%20Loytec%20LWEB-802&severity=high&id=6a6378c49c2644c7f8151c3e https://radar.offseq.com/threat/cve-2026-55728-cwe-121-stack-based-buffer-overflow-in-loytec-lip-me20xc-8e0b3d499c63674f 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-55728%3A%20CWE-121%20Stack-based%20buffer%20overflow%20in%20Loytec%20LIP-ME20xC&severity=low&id=6a6378c49c2644c7f8151c3b https://radar.offseq.com/threat/cve-2026-12504-cwe-287-improper-authentication-in-loytec-lip-me20xc-5e47ef22f11730b5 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12504%3A%20CWE-287%20Improper%20authentication%20in%20Loytec%20LIP-ME20xC&severity=high&id=6a6378c49c2644c7f8151c34 https://radar.offseq.com/threat/cve-2026-12503-cwe-59-improper-link-resolution-before-file-access-link-following-in-loytec-lip-me20xc-acfbe89cb621dc0e 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-12503%3A%20CWE-59%20Improper%20link%20resolution%20before%20file%20access%20('link%20following')%20in%20Loytec%20LIP-ME20xC&severity=critical&id=6a6378c49c2644c7f8151c31 https://radar.offseq.com/threat/cve-2026-12502-cwe-269-improper-privilege-management-in-loytec-lip-me20xc-48445449a932c511 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12502%3A%20CWE-269%20Improper%20privilege%20management%20in%20Loytec%20LIP-ME20xC&severity=high&id=6a6378c49c2644c7f8151c2e https://radar.offseq.com/threat/cve-2026-12496-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-e45d516bfe9b25a0 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12496%3A%20CWE-79%20Improper%20neutralization%20of%20input%20during%20web%20page%20generation%20('cross-site%20scripting')%20in%20Loytec%20LIP-ME20xC&severity=high&id=6a6378c49c2644c7f8151c2b https://radar.offseq.com/threat/cve-2026-7007-dos-in-zephyrproject-zephyr-c91648dd3a282948 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-7007%3A%20dos%20in%20zephyrproject%20zephyr&severity=medium&id=6a6378c69c2644c7f8151ed4 https://radar.offseq.com/threat/cve-2026-17048-exposure-of-sensitive-information-to-an-unauthorized-actor-in-red-hat-red-hat-build-of-3e6ceed7d611c350 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-17048%3A%20Exposure%20of%20Sensitive%20Information%20to%20an%20Unauthorized%20Actor%20in%20Red%20Hat%20Red%20Hat%20Build%20of%20Keycloak&severity=medium&id=6a636e369c2644c7f806025a https://radar.offseq.com/threat/is-hitl-perception-test-for-dnstwister-results-useful-6bfb8cba6ed85f68 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=%C4%B0s%20HITL%20perception%20test%20for%20DNStwister%20results%20useful&severity=medium&id=6a6366fc9c2644c7f8fc57ff https://radar.offseq.com/threat/europol-flags-4340-urls-for-removal-in-the-com-crackdown-2d5cc279bf754686 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Europol%20flags%204%2C340%20URLs%20for%20removal%20in%20'The%20Com'%20crackdown&severity=medium&id=6a6363899c2644c7f8f7ccd9 https://radar.offseq.com/threat/cve-2026-16743-improper-privilege-management-in-red-hat-red-hat-enterprise-linux-10-c6c4fff0b1f9d42c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16743%3A%20Improper%20Privilege%20Management%20in%20Red%20Hat%20Red%20Hat%20Enterprise%20Linux%2010&severity=medium&id=6a636e369c2644c7f806025e https://radar.offseq.com/threat/june-2026-threat-trend-report-on-apt-attacks-south-korea-2407b567fc44e14f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=June%202026%20Threat%20Trend%20Report%20on%20APT%20Attacks%20(South%20Korea)&severity=medium&id=6a637c169c2644c7f81a7542 https://radar.offseq.com/threat/ongoing-plc-exploitation-against-critical-us-infrastructure-8adfe5e4512efbc9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Ongoing%20PLC%20Exploitation%20Against%20Critical%20U.S.%20Infrastructure&severity=medium&id=6a637c169c2644c7f81a7521 https://radar.offseq.com/threat/cve-2026-7484-cwe-472-external-control-of-assumed-immutable-web-parameter-in-abis-technology-ltd-co-ed25da4a4507249b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-7484%3A%20CWE-472%20External%20control%20of%20Assumed-Immutable%20web%20parameter%20in%20ABIS%20Technology%20Ltd.%20Co.%20AVES%C4%B0S&severity=medium&id=6a63602f9c2644c7f8f15060 https://radar.offseq.com/threat/cve-2026-9765-vulnerability-in-grafana-grafana-irm-d2f04c854b65825b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-9765%3A%20Vulnerability%20in%20Grafana%20Grafana%20IRM&severity=high&id=6a63602f9c2644c7f8f15063 https://radar.offseq.com/threat/cve-2026-46452-cwe-20-improper-input-validation-in-apache-software-foundation-apache-nimble-8ca4a0e4793ab6ef 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-46452%3A%20CWE-20%20Improper%20Input%20Validation%20in%20Apache%20Software%20Foundation%20Apache%20NimBLE&severity=medium&id=6a63602d9c2644c7f8f15038 https://radar.offseq.com/threat/cve-2026-45816-cwe-476-null-pointer-dereference-in-apache-software-foundation-apache-nimble-b396fa0fe7e0bd44 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-45816%3A%20CWE-476%20NULL%20Pointer%20Dereference%20in%20Apache%20Software%20Foundation%20Apache%20NimBLE&severity=high&id=6a63602d9c2644c7f8f15034 https://radar.offseq.com/threat/cve-2026-45815-cwe-617-reachable-assertion-in-apache-software-foundation-apache-nimble-6a093d999e7c82ef 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-45815%3A%20CWE-617%20Reachable%20Assertion%20in%20Apache%20Software%20Foundation%20Apache%20NimBLE&severity=high&id=6a63602d9c2644c7f8f15030 https://radar.offseq.com/threat/cve-2026-45813-cwe-787-out-of-bounds-write-in-apache-software-foundation-apache-nimble-d818e5f91a78ad93 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-45813%3A%20CWE-787%20Out-of-bounds%20Write%20in%20Apache%20Software%20Foundation%20Apache%20NimBLE&severity=high&id=6a63602d9c2644c7f8f1502c https://radar.offseq.com/threat/cve-2026-45812-cwe-131-incorrect-calculation-of-buffer-size-in-apache-software-foundation-apache-nimble-8c51f00ad61ec3d6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-45812%3A%20CWE-131%20Incorrect%20Calculation%20of%20Buffer%20Size%20in%20Apache%20Software%20Foundation%20Apache%20NimBLE&severity=medium&id=6a63602d9c2644c7f8f15028 https://radar.offseq.com/threat/cve-2026-45811-cwe-120-buffer-copy-without-checking-size-of-input-classic-buffer-overflow-in-apache-687347e19ddad58e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-45811%3A%20CWE-120%20Buffer%20Copy%20without%20Checking%20Size%20of%20Input%20('Classic%20Buffer%20Overflow')%20in%20Apache%20Software%20Foundation%20Apache%20NimBLE&severity=high&id=6a63602d9c2644c7f8f15024 https://radar.offseq.com/threat/cve-2026-66144-cwe-400-uncontrolled-resource-consumption-in-apache-software-foundation-apache-neethi-d74852711065eaaa 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-66144%3A%20CWE-400%20Uncontrolled%20Resource%20Consumption%20in%20Apache%20Software%20Foundation%20Apache%20Neethi&severity=high&id=6a63602f9c2644c7f8f1505d https://radar.offseq.com/threat/cve-2026-66010-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-7b6435d281fd3b31 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66010%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cure53%20DOMPurify&severity=medium&id=6a63602d9c2644c7f8f15044 https://radar.offseq.com/threat/cve-2026-66009-generation-of-error-message-containing-sensitive-information-in-parse-community-parse-39578e5615856b60 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66009%3A%20Generation%20of%20Error%20Message%20Containing%20Sensitive%20Information%20in%20parse-community%20parse-server&severity=medium&id=6a63602d9c2644c7f8f15040 https://radar.offseq.com/threat/cve-2026-66008-generation-of-error-message-containing-sensitive-information-in-parse-community-parse-8c65d32364c23ac0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66008%3A%20Generation%20of%20Error%20Message%20Containing%20Sensitive%20Information%20in%20parse-community%20parse-server&severity=medium&id=6a63602d9c2644c7f8f1503c https://radar.offseq.com/threat/cve-2026-66143-cwe-400-uncontrolled-resource-consumption-in-apache-software-foundation-apache-neethi-2294ef039fa9565a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-66143%3A%20CWE-400%20Uncontrolled%20Resource%20Consumption%20in%20Apache%20Software%20Foundation%20Apache%20Neethi&severity=high&id=6a63602f9c2644c7f8f1505a https://radar.offseq.com/threat/cve-2026-66142-cwe-400-uncontrolled-resource-consumption-in-apache-software-foundation-apache-neethi-a7c014d9c66eb545 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-66142%3A%20CWE-400%20Uncontrolled%20Resource%20Consumption%20in%20Apache%20Software%20Foundation%20Apache%20Neethi&severity=high&id=6a63602d9c2644c7f8f15048 https://radar.offseq.com/threat/aegisai-raises-36-million-for-ai-powered-email-security-b1a4eab3a3917634 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=AegisAI%20Raises%20%2436%20Million%20for%20AI-Powered%20Email%20Security&severity=medium&id=6a6355699c2644c7f8e24e5c https://radar.offseq.com/threat/cve-2026-15243-cwe-297-improper-validation-of-certificate-with-host-mismatch-in-apereo-java-apereo-cas-689a992bdf875495 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15243%3A%20CWE-297%20Improper%20validation%20of%20certificate%20with%20host%20mismatch%20in%20Apereo%20Java%20Apereo%20CAS%20Client&severity=high&id=6a6355a19c2644c7f8e269d7 https://radar.offseq.com/threat/cve-2026-16730-improper-handling-of-exceptional-conditions-in-red-hat-red-hat-enterprise-linux-10-2a53c5c9dce3ec95 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16730%3A%20Improper%20Handling%20of%20Exceptional%20Conditions%20in%20Red%20Hat%20Red%20Hat%20Enterprise%20Linux%2010&severity=medium&id=6a6355a19c2644c7f8e269db https://radar.offseq.com/threat/industry-reactions-to-openai-models-hacking-hugging-face-feedback-friday-89b9e23f92a9de52 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Industry%20Reactions%20to%20OpenAI%20Models%20Hacking%20Hugging%20Face%3A%20Feedback%20Friday&severity=medium&id=6a634ade9c2644c7f8d416a7 https://radar.offseq.com/threat/man-gets-six-years-for-hacking-750-womens-snapchat-accounts-ba93e81113ff46c6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Man%20gets%20six%20years%20for%20hacking%20750%20women's%20Snapchat%20accounts&severity=medium&id=6a6351e99c2644c7f8de28fc https://radar.offseq.com/threat/cve-2026-10610-cwe-269-improper-privilege-management-in-eset-spol-sro-eset-endpoint-security-for-macos-d0c76e9245ffd0ef 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-10610%3A%20CWE-269%20Improper%20Privilege%20Management%20in%20ESET%20spol.%20s.r.o.%20ESET%20Endpoint%20Security%20for%20macOS&severity=high&id=6a634e8e9c2644c7f8d8e08b https://radar.offseq.com/threat/cve-2026-15810-cwe-79-improper-neutralization-of-input-during-web-page-generation-xss-or-cross-site-3f1a8c9d6d4ede96 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15810%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20(XSS%20or%20'Cross-site%20Scripting')%20in%20Google%20Cloud%20Looker&severity=high&id=6a634e8e9c2644c7f8d8e08e https://radar.offseq.com/threat/red-hat-security-advisory-kernel-rt-security-update-ebc487cf8d98908b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Red%20Hat%20Security%20Advisory%3A%20kernel-rt%20security%20update&severity=high&id=6a6542129c2644c7f8087182 https://radar.offseq.com/threat/cve-2026-7483-cwe-269-improper-privilege-management-in-eset-spol-sro-eset-endpoint-security-for-macos-66fb82a20c19a25a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-7483%3A%20CWE-269%20Improper%20Privilege%20Management%20in%20ESET%20spol.%20s.r.o.%20ESET%20Endpoint%20Security%20for%20macOS&severity=high&id=6a63396e9c2644c7f8bb3cc4 https://radar.offseq.com/threat/cve-2026-10033-cwe-862-missing-authorization-in-eventon-eventon-action-user-4a2080d8cdb382e9 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-10033%3A%20CWE-862%20Missing%20Authorization%20in%20EventON%20EventON%20Action%20User&severity=high&id=6a63396e9c2644c7f8bb3c9e https://radar.offseq.com/threat/cve-2026-15663-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-b7968ddbe50e5cf8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15663%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20kstover%20Ninja%20Forms%20%E2%80%93%20The%20Contact%20Form%20Builder%20That%20Grows%20With%20You&severity=medium&id=6a63396e9c2644c7f8bb3cb2 https://radar.offseq.com/threat/cve-2026-15401-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-52157d85446579e9 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15401%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20e4jvikwp%20VikBooking%20Hotel%20Booking%20Engine%20%26%20PMS&severity=high&id=6a63396e9c2644c7f8bb3ca2 https://radar.offseq.com/threat/cve-2026-16634-cwe-1104-use-of-unmaintained-third-party-components-in-felipe-tomlxs-9558777479139a51 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16634%3A%20CWE-1104%20Use%20of%20Unmaintained%20Third%20Party%20Components%20in%20FELIPE%20TOML%3A%3AXS&severity=high&id=6a63396e9c2644c7f8bb3cba https://radar.offseq.com/threat/cve-2026-49745-cwe-cwe-823-use-of-out-of-range-pointer-offset-416-in-imagination-technologies-graphics-d93be8c12e46c1fd 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-49745%3A%20CWE%20-%20CWE-823%3A%20Use%20of%20Out-of-range%20Pointer%20Offset%20(4.16)%20in%20Imagination%20Technologies%20Graphics%20DDK&severity=high&id=6a632edf9c2644c7f8ac5a40 https://radar.offseq.com/threat/cve-2026-49744-cwe-cwe-823-use-of-out-of-range-pointer-offset-416-in-imagination-technologies-graphics-3649f501a0a62976 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-49744%3A%20CWE%20-%20CWE-823%3A%20Use%20of%20Out-of-range%20Pointer%20Offset%20(4.16)%20in%20Imagination%20Technologies%20Graphics%20DDK&severity=high&id=6a632edf9c2644c7f8ac5a3d https://radar.offseq.com/threat/cve-2026-49743-cwe-416-use-after-free-420-in-imagination-technologies-graphics-ddk-7fb7f15ed672cc23 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-49743%3A%20CWE-416%3A%20Use%20After%20Free%20(4.20)%20in%20Imagination%20Technologies%20Graphics%20DDK&severity=high&id=6a632edf9c2644c7f8ac5a3a https://radar.offseq.com/threat/cve-2026-12702-insufficient-checks-on-the-project-trigger-actions-allows-an-unauthorized-user-to-1ea12d7df76d7356 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-12702%3A%20Insufficient%20checks%20on%20the%20project%20trigger%20actions%20allows%20an%20unauthorized%20user%20to%20trigger%20a%20deployment%20in%20Octopus%20Deploy%20Octopus%20Server&severity=medium&id=6a632edf9c2644c7f8ac5a34 https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sunnet-technology-co-ltd-fe23deeb060f5b6d 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-24727%3A%20CWE-434%20Unrestricted%20upload%20of%20file%20with%20dangerous%20type%20in%20SUNNET%20Technology%20Co.%2C%20Ltd.%20Corporate%20Training%20Management%20System&severity=critical&id=6a632edf9c2644c7f8ac5a37 https://radar.offseq.com/threat/kimi-k3-ai-agent-discovers-multiple-redis-zero-day-vulnerabilities-prompting-emergency-patches-4b06eddee0bca9c7 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Kimi%20K3%20AI%20Agent%20Discovers%20Multiple%20Redis%20Zero-Day%20Vulnerabilities%20Prompting%20Emergency%20Patches&severity=high&id=6a6321819c2644c7f8990a4f https://radar.offseq.com/threat/cve-2026-63317-cwe-470-use-of-externally-controlled-input-to-select-classes-or-code-unsafe-reflection-d5f1fbc812b97f3f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-63317%3A%20CWE-470%20Use%20of%20Externally-Controlled%20Input%20to%20Select%20Classes%20or%20Code%20('Unsafe%20Reflection')%20in%20Apache%20Software%20Foundation%20Apache%20OpenNLP&severity=medium&id=6a6320db9c2644c7f8989bae https://radar.offseq.com/threat/cve-2026-15346-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-8db11e7b30ca8f1a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15346%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20e4jvikwp%20VikBooking%20Hotel%20Booking%20Engine%20%26%20PMS&severity=medium&id=6a6320db9c2644c7f8989b7e https://radar.offseq.com/threat/cve-2026-15739-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-a53788c8376cdbb5 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15739%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20widgetpack%20Rich%20Showcase%20for%20Google%20Reviews&severity=medium&id=6a6320db9c2644c7f8989b90 https://radar.offseq.com/threat/cve-2026-15821-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-ff4c54541f4e1afe 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15821%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20brainstormforce%20SureDash%20%E2%80%93%20Community%2C%20Courses%20%26%20Member%20Dashboard&severity=medium&id=6a6320db9c2644c7f8989b9c https://radar.offseq.com/threat/cve-2026-56392-cwe-122-heap-based-buffer-overflow-in-gnu-coreutils-9555b60711b1641f 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-56392%3A%20CWE-122%20Heap-based%20Buffer%20Overflow%20in%20GNU%20coreutils&severity=low&id=6a6320db9c2644c7f8989ba9 https://radar.offseq.com/threat/cve-2026-56391-cwe-125-out-of-bounds-read-in-gnu-coreutils-70ec26c13b15dcf9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-56391%3A%20CWE-125%20Out-of-bounds%20Read%20in%20GNU%20coreutils&severity=medium&id=6a6320db9c2644c7f8989ba4 https://radar.offseq.com/threat/cve-2026-15704-cwe-863-in-eclipse-foundation-eclipse-basyx-go-components-eeb4ef03f595d434 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-15704%3A%20CWE-863%20in%20Eclipse%20Foundation%20Eclipse%20BaSyx%20Go%20Components&severity=critical&id=6a6320db9c2644c7f8989b8a https://radar.offseq.com/threat/clop-ransomware-targets-windchill-flexplm-in-data-theft-attacks-f0d62574e58514fb 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Clop%20ransomware%20targets%20Windchill%2C%20FlexPLM%20in%20data%20theft%20attacks&severity=medium&id=6a6316219c2644c7f88767e7 https://radar.offseq.com/threat/cve-2026-16519-cwe-427-uncontrolled-search-path-element-dll-search-order-hijacking-dll-side-loading-in-97365e0c63a177da 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16519%3A%20CWE-427%3A%20Uncontrolled%20Search%20Path%20Element%20(DLL%20Search%20Order%20Hijacking%20%2F%20DLL%20Side-Loading)%20in%20GeoVision%20Inc.%20GV-IP%20Device%20Utility&severity=high&id=6a63164a9c2644c7f88787ba https://radar.offseq.com/threat/cve-2026-15464-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-13024cdf39fd4c52 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15464%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20thimpress%20WP%20Hotel%20Booking&severity=medium&id=6a63164a9c2644c7f8878792 https://radar.offseq.com/threat/cve-2026-15653-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-4686038f72bc794a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15653%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20themeisle%20Visualizer%20%E2%80%93%20Tables%20%26%20Charts%20Manager%20with%20Built-in%20AI%20Generator&severity=medium&id=6a63164a9c2644c7f887879f https://radar.offseq.com/threat/cve-2026-12654-cwe-862-missing-authorization-in-paymentplugins-payment-plugins-for-stripe-woocommerce-d5e4c229a5cc3fab 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-12654%3A%20CWE-862%20Missing%20Authorization%20in%20paymentplugins%20Payment%20Plugins%20for%20Stripe%20WooCommerce&severity=medium&id=6a63164a9c2644c7f8878762 https://radar.offseq.com/threat/cve-2026-15648-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-a4ac9012328333cd 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15648%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20berocket%20Brands%20for%20WooCommerce&severity=medium&id=6a63164a9c2644c7f8878798 https://radar.offseq.com/threat/cve-2026-15334-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-8529f3cb8d55c73d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15334%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cozythemes%20Cozy%20Blocks%20%E2%80%93%20Page%20Builder%20for%20Gutenberg%20Editor%20%26%20FSE%20with%20600%2B%20Patterns%2C%2058%20Blocks%20%26%20Templates&severity=medium&id=6a63164a9c2644c7f8878782 https://radar.offseq.com/threat/cve-2026-15755-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-a197290a06a38dd6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15755%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20100plugins%20Open%20User%20Map%20%E2%80%93%20Interactive%20Leaflet%20Maps&severity=medium&id=6a63164a9c2644c7f88787ae https://radar.offseq.com/threat/cve-2026-15333-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-56cc9f9e3b94b40b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15333%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cozythemes%20Cozy%20Blocks%20%E2%80%93%20Page%20Builder%20for%20Gutenberg%20Editor%20%26%20FSE%20with%20600%2B%20Patterns%2C%2058%20Blocks%20%26%20Templates&severity=medium&id=6a63164a9c2644c7f8878770 https://radar.offseq.com/threat/cve-2026-15665-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-38a67a999b731d42 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15665%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20wpmanageninja%20Fluent%20Support%20%E2%80%93%20Helpdesk%20%26%20Customer%20Support%20Ticket%20System&severity=medium&id=6a63164a9c2644c7f88787a6 https://radar.offseq.com/threat/cve-2026-16910-server-side-request-forgery-ssrf-in-red-hat-red-hat-openshift-update-service-fbd1c7d16b62f52c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16910%3A%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20Red%20Hat%20Red%20Hat%20OpenShift%20Update%20Service&severity=medium&id=6a63164a9c2644c7f88787bd https://radar.offseq.com/threat/in-openstack-ironic-python-agent-through-1160-a-project-scoped-user-with-the-manager-role-can-achieve-b21383e3b4f089ff 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=In%20OpenStack%20Ironic%20Python%20Agent%20through%2011.6.0%2C%20a%20project-scoped%20user%20with%20the%20manager%20role%20can%20achieve%20arbitrary%20code%20execution%20on%20a%20running%E2%80%A6%20(CVE-2026-66138)&severity=high&id=6a6542159c2644c7f808767c https://radar.offseq.com/threat/researchers-scanned-380000-vibe-coded-apps-heres-what-they-actually-found-eec2abf4fa49f7b9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Researchers%20scanned%20380%2C000%20vibe-coded%20apps.%20Here's%20what%20they%20actually%20found.&severity=medium&id=6a630b939c2644c7f87938f9 https://radar.offseq.com/threat/steam-workshop-maps-malware-dropper-for-meccha-chameleon-2bd0cecd301bd280 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Steam%20workshop%20maps%20malware%20dropper%20for%20Meccha%20Chameleon&severity=medium&id=6a6308089c2644c7f873a0ed https://radar.offseq.com/threat/cve-2026-14603-cwe-284-improper-access-control-in-wowoptin-next-gen-popup-maker-ce04cbc50beb2141 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-14603%3A%20CWE-284%20Improper%20Access%20Control%20in%20WowOptin%3A%20Next-Gen%20Popup%20Maker&severity=high&id=6a6308729c2644c7f873e5e9 https://radar.offseq.com/threat/cve-2026-12981-cwe-269-improper-privilege-management-in-cafehaus-api-47b92cb62ac9c312 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12981%3A%20CWE-269%20Improper%20Privilege%20Management%20in%20CAFEHAUS%20API&severity=high&id=6a6308729c2644c7f873e5e2 https://radar.offseq.com/threat/cve-2026-12877-cwe-287-improper-authentication-in-project-management-bug-and-issue-tracking-plugin-10081dfcab72da1e 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-12877%3A%20CWE-287%20Improper%20Authentication%20in%20Project%20Management%2C%20Bug%20and%20Issue%20Tracking%20Plugin&severity=critical&id=6a6308729c2644c7f873e5df https://radar.offseq.com/threat/cve-2026-12690-cwe-862-missing-authorization-in-profilegrid-d16cb35b74f48d30 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-12690%3A%20CWE-862%20Missing%20Authorization%20in%20ProfileGrid&severity=low&id=6a6308729c2644c7f873e5dc https://radar.offseq.com/threat/cve-2026-12689-cwe-862-missing-authorization-in-profilegrid-f576b732be38f035 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-12689%3A%20CWE-862%20Missing%20Authorization%20in%20ProfileGrid&severity=medium&id=6a6308729c2644c7f873e5d9 https://radar.offseq.com/threat/cve-2026-12688-cwe-284-improper-access-control-in-profilegrid-3cfd44e68ecda174 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-12688%3A%20CWE-284%20Improper%20Access%20Control%20in%20ProfileGrid&severity=medium&id=6a6308729c2644c7f873e5d6 https://radar.offseq.com/threat/cve-2026-12497-cwe-269-improper-privilege-management-in-paid-membership-plugin-ecommerce-user-aa51067366e161ee 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12497%3A%20CWE-269%20Improper%20Privilege%20Management%20in%20Paid%20Membership%20Plugin%2C%20Ecommerce%2C%20User%20Registration%20Form%2C%20Login%20Form%2C%20User%20Profile%20%26%20Restrict%20Content&severity=high&id=6a6308729c2644c7f873e5d3 https://radar.offseq.com/threat/data-breach-confirmed-after-australian-energy-giant-origin-is-hacked-399416bb6d3e92cc 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Data%20Breach%20Confirmed%20After%20Australian%20Energy%20Giant%20Origin%20Is%20Hacked&severity=medium&id=6a6301399c2644c7f8695766 https://radar.offseq.com/threat/cve-2026-14172-cwe-250-execution-with-unnecessary-privileges-in-rapid7-insightvm-b9e34cf70b68b366 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-14172%3A%20CWE-250%20Execution%20with%20Unnecessary%20Privileges%20in%20Rapid7%20InsightVM&severity=high&id=6a6308729c2644c7f873e5e5 https://radar.offseq.com/threat/cve-2026-16870-stack-based-buffer-overflow-in-snowflake-snowflake-libsnowflakeclient-04e94bf122f13ccd 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16870%3A%20Stack-based%20Buffer%20Overflow%20in%20Snowflake%20Snowflake%20libsnowflakeclient&severity=high&id=6a62fdb39c2644c7f8629a74 https://radar.offseq.com/threat/cve-2026-66139-cwe-306-missing-authentication-for-critical-function-in-openstack-zaqar-7981c79b90ae55b9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-66139%3A%20CWE-306%20Missing%20Authentication%20for%20Critical%20Function%20in%20OpenStack%20Zaqar&severity=medium&id=6a62ef9d9c2644c7f84f6d38 https://radar.offseq.com/threat/uk-chat-law-7ff396d8a3e72508 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Uk%20chat%20law&severity=medium&id=6a62e8659c2644c7f845551a https://radar.offseq.com/threat/cve-2026-66138-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-7d055606e9e633aa 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-66138%3A%20CWE-78%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20('OS%20Command%20Injection')%20in%20OpenStack%20Ironic%20Python%20Agent&severity=high&id=6a62ef9d9c2644c7f84f6d34 https://radar.offseq.com/threat/cve-2026-54422-cwe-522-insufficiently-protected-credentials-in-openstack-ironic-python-agent-a6183e7b94289eed 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-54422%3A%20CWE-522%20Insufficiently%20Protected%20Credentials%20in%20OpenStack%20Ironic%20Python%20Agent&severity=medium&id=6a62ef9d9c2644c7f84f6d2f https://radar.offseq.com/threat/cve-2026-11922-cwe-290-authentication-bypass-by-spoofing-in-zenml-io-zenml-iozenml-47f98fd9434c7174 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-11922%3A%20CWE-290%20Authentication%20Bypass%20by%20Spoofing%20in%20zenml-io%20zenml-io%2Fzenml&severity=medium&id=6a62de069c2644c7f835c47d https://radar.offseq.com/threat/cve-2026-11354-cwe-862-missing-authorization-in-xnau-participants-database-949272139bf506a9 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-11354%3A%20CWE-862%20Missing%20Authorization%20in%20xnau%20Participants%20Database&severity=medium&id=6a62de069c2644c7f835c475 https://radar.offseq.com/threat/cve-2026-12736-cwe-269-improper-privilege-management-in-wpify-wpify-woo-withdrawal-crnvat-qr-payments-b6f69ca49285243c 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12736%3A%20CWE-269%20Improper%20Privilege%20Management%20in%20wpify%20WPify%20Woo%20%E2%80%93%20Withdrawal%2C%20CRN%2FVAT%2C%20QR%20payments%2C%20Heureka%20and%20more%20for%20WooCommerce&severity=high&id=6a62de069c2644c7f835c481 https://radar.offseq.com/threat/cve-2025-9205-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-eaeaf12d9e1f6cba 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2025-9205%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20oyatek%20MapSVG%20%E2%80%93%20Vector%20maps%2C%20Image%20maps%2C%20Google%20Maps&severity=medium&id=6a62de069c2644c7f835c470 https://radar.offseq.com/threat/cve-2026-15420-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-de7693d050428a8e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15420%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20posimyththemes%20Nexter%20Blocks%20%E2%80%93%20Gutenberg%20Blocks%2C%20Page%20Builder%20%26%20AI%20Website%20Builder&severity=medium&id=6a62de069c2644c7f835c49c https://radar.offseq.com/threat/cve-2026-13464-cwe-639-authorization-bypass-through-user-controlled-key-in-themeum-kirki-freeform-page-09fc6dbda6066923 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-13464%3A%20CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20themeum%20Kirki%20%E2%80%93%20Freeform%20Page%20Builder%2C%20Website%20Builder%20%26%20Customizer&severity=medium&id=6a62de069c2644c7f835c48b https://radar.offseq.com/threat/cve-2026-6454-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-3a12e557906e34ad 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-6454%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20firelightwp%20Firelight%20Lightbox&severity=medium&id=6a62de069c2644c7f835c4a8 https://radar.offseq.com/threat/cve-2026-15100-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-e88118d6b480efdb 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15100%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20wpxpo%20Post%20Grid%20Gutenberg%20Blocks%20%E2%80%93%20PostX&severity=medium&id=6a62de069c2644c7f835c495 https://radar.offseq.com/threat/isc-stormcast-for-friday-july-24th-2026-httpsiscsansedupodcastdetail10022-fri-jul-24th-1f4557e453eaf986 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=ISC%20Stormcast%20For%20Friday%2C%20July%2024th%2C%202026%20https%3A%2F%2Fisc.sans.edu%2Fpodcastdetail%2F10022%2C%20(Fri%2C%20Jul%2024th)&severity=medium&id=6a62c8dc9c2644c7f81b1e21 https://radar.offseq.com/threat/intercom-client704-harvesting-github-credentials-594ea18c4808c45c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Intercom-client%407.0.4%20Harvesting%20Github%20Credentials&severity=medium&id=6a6340569c2644c7f8c593f5 https://radar.offseq.com/threat/cve-2026-58275-cwe-862-missing-authorization-in-microsoft-azure-dns-8fa245e6deabe29a 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-58275%3A%20CWE-862%3A%20Missing%20Authorization%20in%20Microsoft%20Azure%20DNS&severity=critical&id=6a62b3ff9c2644c7f8000d5d https://radar.offseq.com/threat/cve-2026-62825-cwe-287-improper-authentication-in-microsoft-azure-key-vault-8080269c662e81d1 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-62825%3A%20CWE-287%3A%20Improper%20Authentication%20in%20Microsoft%20Azure%20Key%20Vault&severity=critical&id=6a62b3ff9c2644c7f8000d60 https://radar.offseq.com/threat/cve-2026-56191-cwe-287-improper-authentication-in-microsoft-microsoft-exchange-online-2fb5560625ca8222 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-56191%3A%20CWE-287%3A%20Improper%20Authentication%20in%20Microsoft%20Microsoft%20Exchange%20Online&severity=critical&id=6a62b3ff9c2644c7f8000d5a https://radar.offseq.com/threat/cve-2026-50517-cwe-502-deserialization-of-untrusted-data-in-microsoft-microsoft-365-copilot-71d778a5726cf6f5 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-50517%3A%20CWE-502%3A%20Deserialization%20of%20Untrusted%20Data%20in%20Microsoft%20Microsoft%20365%20Copilot&severity=critical&id=6a62b3ff9c2644c7f8000d4b https://radar.offseq.com/threat/cve-2026-49159-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-microsoft-5161d88bb5cad744 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-49159%3A%20CWE-200%3A%20Exposure%20of%20Sensitive%20Information%20to%20an%20Unauthorized%20Actor%20in%20Microsoft%20Microsoft%20Graph&severity=medium&id=6a62b3ff9c2644c7f8000d48 https://radar.offseq.com/threat/cve-2026-35425-cwe-284-improper-access-control-in-microsoft-azure-api-management-apim-944dabbcf112c848 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-35425%3A%20CWE-284%3A%20Improper%20Access%20Control%20in%20Microsoft%20Azure%20API%20Management%20(APIM)&severity=high&id=6a62b3ff9c2644c7f8000d45 https://radar.offseq.com/threat/maltrail-ioc-for-2026-07-25-15913e086c65d87e 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Maltrail%20IOC%20for%202026-07-25&severity=medium&id=6a6452d79c2644c7f8c8f88d https://radar.offseq.com/threat/threatfox-iocs-for-2026-07-24-d096f677e76a3226 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=ThreatFox%20IOCs%20for%202026-07-24&severity=medium&id=6a63fe1c9c2644c7f8c803a8 https://radar.offseq.com/threat/cve-2026-56160-cwe-285-improper-authorization-in-microsoft-azure-red-hat-openshift-aro-9a561de9f992bb49 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-56160%3A%20CWE-285%3A%20Improper%20Authorization%20in%20Microsoft%20Azure%20Red%20Hat%20OpenShift%20(ARO)&severity=critical&id=6a62b3ff9c2644c7f8000d51 https://radar.offseq.com/threat/cve-2026-54120-cwe-20-improper-input-validation-in-microsoft-surface-management-services-203a5e59f513d748 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-54120%3A%20CWE-20%3A%20Improper%20Input%20Validation%20in%20Microsoft%20Surface%20Management%20Services&severity=critical&id=6a62b3ff9c2644c7f8000d4e https://radar.offseq.com/threat/cve-2026-56165-cwe-122-heap-based-buffer-overflow-in-microsoft-microsoft-account-5ce5faa0bb55c74f 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-56165%3A%20CWE-122%3A%20Heap-based%20Buffer%20Overflow%20in%20Microsoft%20Microsoft%20Account&severity=critical&id=6a62b3ff9c2644c7f8000d54 https://radar.offseq.com/threat/cve-2026-56167-cwe-918-server-side-request-forgery-ssrf-in-microsoft-azure-ai-search-cb6d401dae66cbde 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-56167%3A%20CWE-918%3A%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20Microsoft%20Azure%20AI%20Search&severity=high&id=6a62b3ff9c2644c7f8000d57 https://radar.offseq.com/threat/cve-2026-16767-path-traversal-in-ne-lexa-php-zip-f84bd49f3b6ea689 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16767%3A%20Path%20Traversal%20in%20Ne-Lexa%20php-zip&severity=medium&id=6a6297b09c2644c7f8d3bb95 https://radar.offseq.com/threat/cve-2026-28698-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-60b811071d029bc0 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-28698%3A%20CWE-497%20Exposure%20of%20sensitive%20system%20information%20to%20an%20unauthorized%20control%20sphere%20in%20Pronetiqs%20Panduit%20Intravue&severity=high&id=6a6297b09c2644c7f8d3bb9d https://radar.offseq.com/threat/cve-2026-50044-cwe-326-inadequate-encryption-strength-in-pronetiqs-panduit-intravue-6a42496944962982 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-50044%3A%20CWE-326%20Inadequate%20Encryption%20Strength%20in%20Pronetiqs%20Panduit%20Intravue&severity=medium&id=6a6297b09c2644c7f8d3bba9 https://radar.offseq.com/threat/cve-2026-44955-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-5a7ea58db7724193 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-44955%3A%20CWE-497%20Exposure%20of%20sensitive%20system%20information%20to%20an%20unauthorized%20control%20sphere%20in%20Pronetiqs%20Panduit%20Intravue&severity=medium&id=6a6297b09c2644c7f8d3bba6 https://radar.offseq.com/threat/cve-2026-42933-cwe-441-unintended-proxy-or-intermediary-confused-deputy-in-pronetiqs-panduit-intravue-95925181c2d7dbb4 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-42933%3A%20CWE-441%20Unintended%20Proxy%20or%20Intermediary%20('Confused%20Deputy')%20in%20Pronetiqs%20Panduit%20Intravue&severity=critical&id=6a6297b09c2644c7f8d3bba3 https://radar.offseq.com/threat/cve-2026-40430-cwe-256-plaintext-storage-of-a-password-in-pronetiqs-panduit-intravue-1a92f823da699936 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-40430%3A%20CWE-256%20Plaintext%20storage%20of%20a%20password%20in%20Pronetiqs%20Panduit%20Intravue&severity=high&id=6a6297b09c2644c7f8d3bba0 https://radar.offseq.com/threat/cve-2026-16765-sql-injection-in-codeastro-online-classroom-3b5c8c93e308d097 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16765%3A%20SQL%20Injection%20in%20CodeAstro%20Online%20Classroom&severity=medium&id=6a6290aa9c2644c7f8cac221 https://radar.offseq.com/threat/cve-2026-16804-use-after-free-in-google-chrome-b1bc4cca472b9fb4 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16804%3A%20Use%20after%20free%20in%20Google%20Chrome&severity=high&id=6a6290aa9c2644c7f8cac229 https://radar.offseq.com/threat/cve-2026-16805-use-after-free-in-google-chrome-40c49640aa203bcb 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16805%3A%20Use%20after%20free%20in%20Google%20Chrome&severity=high&id=6a6290aa9c2644c7f8cac22d https://radar.offseq.com/threat/cve-2026-16806-use-after-free-in-google-chrome-694db1aa081def64 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16806%3A%20Use%20after%20free%20in%20Google%20Chrome&severity=high&id=6a6290aa9c2644c7f8cac231 https://radar.offseq.com/threat/cve-2026-16807-out-of-bounds-write-in-google-chrome-46a48eadf86b2135 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16807%3A%20Out%20of%20bounds%20write%20in%20Google%20Chrome&severity=high&id=6a6290aa9c2644c7f8cac235 https://radar.offseq.com/threat/a-null-pointer-dereference-in-the-mms-write-named-variable-list-handler-which-may-allow-a-network-3526197d3b0b1602 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=A%20NULL%20pointer%20dereference%20in%20the%20MMS%20Write%20Named%20Variable%20List%20handler%2C%20which%20may%20allow%20a%20network%20adjacent%20attacker%20to%20crash%20the%20server%20by%20sending%E2%80%A6%20(CVE-2026-50032)&severity=high&id=6a629b0d9c2644c7f8d861d9 https://radar.offseq.com/threat/the-affected-product-is-vulnerable-to-a-heap-based-buffer-overflow-via-a-crafted-mms-initiate-request-bf5b29d0a017a357 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=The%20affected%20product%20is%20vulnerable%20to%20a%20heap-based%20buffer%20overflow%20via%20a%20crafted%20MMS%20Initiate%20request.%20(CVE-2026-49035)&severity=critical&id=6a629b0d9c2644c7f8d861d5 https://radar.offseq.com/threat/an-issue-in-xiandafu-beetl-3202-allows-a-remote-attacker-to-execute-arbitrary-code-via-the-typenew-dcd398c86bdbbac1 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=An%20issue%20in%20xiandafu%20beetl%203.20.2%20allows%20a%20remote%20attacker%20to%20execute%20arbitrary%20code%20via%20the%20type.new%20function%20and%20the%20property%20reflection%20mechanism%20(CVE-2026-52439)&severity=critical&id=6a629b0d9c2644c7f8d861d0 https://radar.offseq.com/threat/a-null-pointer-dereference-in-the-l2-goose-and-r-goose-shared-parser-which-may-allow-a-network-c8dbb83e850a8b27 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=A%20NULL%20pointer%20dereference%20in%20the%20L2%20GOOSE%20and%20R-GOOSE%20shared%20parser%2C%20which%20may%20allow%20a%20network-adjacent%20attacker%20to%20crash%20a%20subscribing%20application%E2%80%A6%20(CVE-2026-50103)&severity=high&id=6a629b0d9c2644c7f8d861c7 https://radar.offseq.com/threat/a-bug-in-the-entropy-initialization-for-siwx917-causes-the-drbg-to-use-a-predictable-seed-cve-2026-6924-6f5666ac7082ee88 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=A%20bug%20in%20the%20entropy%20initialization%20for%20SiWx917%20causes%20the%20DRBG%20to%20use%20a%20predictable%20seed.%20(CVE-2026-6924)&severity=high&id=6a629b0d9c2644c7f8d861be https://radar.offseq.com/threat/an-issue-in-unistal-systems-pvt-cve-2026-38764-1006f85d77273b97 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=An%20issue%20in%20Unistal%20Systems%20Pvt.%20(CVE-2026-38764)&severity=high&id=6a629b0f9c2644c7f8d863e4 https://radar.offseq.com/threat/ffmpeg-through-812-contains-an-out-of-bounds-write-vulnerability-that-allows-attackers-to-cause-heap-2382fcbc175d75b6 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20through%208.1.2%20contains%20an%20out-of-bounds%20write%20vulnerability%20that%20allows%20attackers%20to%20cause%20heap%20corruption%20by%20supplying%20a%20crafted%20ffconcat%E2%80%A6%20(CVE-2026-65704)&severity=high&id=6a629b0f9c2644c7f8d863de https://radar.offseq.com/threat/gpsd-through-release-3275-fixed-at-commit-4c06658-contains-a-code-injection-vulnerability-in-the-7272324de09df771 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=gpsd%20through%20release-3.27.5%2C%20fixed%20at%20commit%204c06658%2C%20contains%20a%20code%20injection%20vulnerability%20in%20the%20gpsprof%20utility%20that%20allows%20an%20attacker%20who%E2%80%A6%20(CVE-2026-60122)&severity=high&id=6a629b0f9c2644c7f8d863d8 https://radar.offseq.com/threat/chatwoot-before-4160-contains-an-authentication-bypass-vulnerability-in-the-direct-uploads-controller-c8046a051ccd04e5 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Chatwoot%20before%204.16.0%20contains%20an%20authentication%20bypass%20vulnerability%20in%20the%20direct%20uploads%20controller%20that%20allows%20unauthenticated%20attackers%20to%E2%80%A6%20(CVE-2026-63765)&severity=high&id=6a629b0e9c2644c7f8d8633c https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-johnson-control-victor-on-windows-allows-capec-586-f2ca31a8893729e3 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Deserialization%20of%20untrusted%20data%20vulnerability%20in%20Johnson%20Control%20victor%20on%20Windows%20allows%20capec-586.%20(CVE-2026-21655)&severity=high&id=6a629b0e9c2644c7f8d86334 https://radar.offseq.com/threat/ffmpeg-versions-30-through-812-contain-an-out-of-bounds-write-vulnerability-in-the-vfswaprect-video-da3979a647c4ecc0 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20versions%203.0%20through%208.1.2%20contain%20an%20out-of-bounds%20write%20vulnerability%20in%20the%20vf_swaprect%20video%20filter%20that%20allows%20attackers%20to%20corrupt%20heap%E2%80%A6%20(CVE-2026-65706)&severity=high&id=6a629b0e9c2644c7f8d8632e https://radar.offseq.com/threat/ffmpeg-versions-34-through-812-contain-an-out-of-bounds-write-vulnerability-in-the-vffloodfill-video-da412c04d347770c 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20versions%203.4%20through%208.1.2%20contain%20an%20out-of-bounds%20write%20vulnerability%20in%20the%20vf_floodfill%20video%20filter%20that%20allows%20attackers%20to%20corrupt%E2%80%A6%20(CVE-2026-65705)&severity=high&id=6a629b0e9c2644c7f8d86328 https://radar.offseq.com/threat/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-d24f84d0d960f727 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Improper%20neutralization%20of%20input%20during%20web%20page%20generation%20('cross-site%20scripting')%20vulnerability%20in%20Progress%20MOVEit%20Transfer.%20(CVE-2026-15968)&severity=high&id=6a629b0e9c2644c7f8d86324 https://radar.offseq.com/threat/a-non-global-organization-admin-in-one-tenant-can-bypass-tenant-boundaries-to-delete-create-or-modify-d1675f5bc128a831 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=A%20non-global%20organization%20admin%20in%20one%20tenant%20can%20bypass%20tenant%20boundaries%20to%20delete%2C%20create%2C%20or%20modify%20resources%20in%20any%20other%20tenant%20by%20exploiting%E2%80%A6%20(CVE-2026-15630)&severity=high&id=6a629b0e9c2644c7f8d86320 https://radar.offseq.com/threat/ffmpeg-versions-27-through-812-contain-an-out-of-bounds-write-vulnerability-in-the-tdsc-video-decoder-dfd58e2c91eda19c 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=FFmpeg%20versions%202.7%20through%208.1.2%20contain%20an%20out-of-bounds%20write%20vulnerability%20in%20the%20TDSC%20video%20decoder%20that%20allows%20remote%20attackers%20to%20cause%20heap%E2%80%A6%20(CVE-2026-65703)&severity=high&id=6a629b0d9c2644c7f8d861dd https://radar.offseq.com/threat/cve-2026-16764-improper-privilege-management-in-owasp-defectdojo-7b26db61e3a1f1f9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16764%3A%20Improper%20Privilege%20Management%20in%20OWASP%20DefectDojo&severity=medium&id=6a6289ae9c2644c7f8c05bb0 https://radar.offseq.com/threat/new-dolphin-x-malware-uses-ai-to-rank-high-value-targets-26c93a3dd84121c4 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=New%20Dolphin%20X%20malware%20uses%20AI%20to%20rank%20high-value%20targets&severity=high&id=6a628d079c2644c7f8c5c811 https://radar.offseq.com/threat/cve-2026-65604-improper-input-validation-in-zalando-skipper-41554e9b4c3be289 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65604%3A%20Improper%20Input%20Validation%20in%20zalando%20skipper&severity=high&id=6a6289ae9c2644c7f8c05bc2 https://radar.offseq.com/threat/cve-2026-63732-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-411bdb91d63e0a5f 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-63732%3A%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20('OS%20Command%20Injection')%20in%20decolua%209router&severity=critical&id=6a6289ae9c2644c7f8c05bbe https://radar.offseq.com/threat/cve-2026-63313-server-side-request-forgery-ssrf-in-decolua-9router-0071c319e33bd67b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-63313%3A%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20decolua%209router&severity=high&id=6a6289ae9c2644c7f8c05bba https://radar.offseq.com/threat/cve-2025-71389-improper-control-of-generation-of-code-code-injection-in-calcom-caldiy-3a126dd217c0b658 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2025-71389%3A%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')%20in%20calcom%20cal.diy&severity=critical&id=6a6289ae9c2644c7f8c05ba2 https://radar.offseq.com/threat/cve-2024-58355-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-in-calcom-dcdb425e24ff38e6 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2024-58355%3A%20Improper%20Neutralization%20of%20Script-Related%20HTML%20Tags%20in%20a%20Web%20Page%20(Basic%20XSS)%20in%20calcom%20cal.diy&severity=critical&id=6a6289ae9c2644c7f8c05b9d https://radar.offseq.com/threat/cve-2024-58354-improper-neutralization-of-special-elements-used-in-a-command-command-injection-in-d2db3b04c3821057 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2024-58354%3A%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20a%20Command%20('Command%20Injection')%20in%20calcom%20cal.diy&severity=high&id=6a6289ae9c2644c7f8c05b98 https://radar.offseq.com/threat/cve-2024-58353-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-in-calcom-93cc4c5b36d41057 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2024-58353%3A%20Improper%20Neutralization%20of%20Script-Related%20HTML%20Tags%20in%20a%20Web%20Page%20(Basic%20XSS)%20in%20calcom%20cal.diy&severity=critical&id=6a6289ae9c2644c7f8c05b93 https://radar.offseq.com/threat/cve-2026-16763-os-command-injection-in-localstack-serverless-localstack-a7ab41885cbcd2fa 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16763%3A%20OS%20Command%20Injection%20in%20localstack%20serverless-localstack&severity=medium&id=6a6289ae9c2644c7f8c05ba8 https://radar.offseq.com/threat/cve-2026-16002-cwe-125-out-of-bounds-read-in-mz-automation-lib60870-e1c82b82ee32440c 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16002%3A%20CWE-125%20Out-of-bounds%20read%20in%20MZ%20Automation%20lib60870&severity=high&id=6a629b419c2644c7f8d891d1 https://radar.offseq.com/threat/red-hat-security-advisory-satelliteforeman-mcp-ser-d61c9219 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Red%20Hat%20Security%20Advisory%3A%20satellite%2Fforeman-mcp-server-rhel9%20container%20image%20available%20as%20a%20Technology%20Preview&severity=high&id=6a21eb14e29bf47b50d237e0 https://radar.offseq.com/threat/cve-2026-15981-cwe-287-improper-authentication-in-cyberlord92-saml-single-sign-on-sso-login-1b494f09ab257ccb 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-15981%3A%20CWE-287%20Improper%20Authentication%20in%20cyberlord92%20SAML%20Single%20Sign%20On%20%E2%80%93%20SSO%20Login&severity=critical&id=6a62806b9c2644c7f8b34b71 https://radar.offseq.com/threat/cve-2026-50039-cwe-121-stack-based-buffer-overflow-in-mz-automation-libiec61850-98e16a428da7f22f 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-50039%3A%20CWE-121%20Stack-based%20buffer%20overflow%20in%20MZ%20Automation%20libIEC61850&severity=high&id=6a62806b9c2644c7f8b34bb0 https://radar.offseq.com/threat/cve-2026-34496-cwe-269-in-johnson-controls-victor-web-4e41e12c34dd1300 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-34496%3A%20cwe-269%20in%20Johnson%20Controls%20victor%20Web&severity=high&id=6a62806b9c2644c7f8b34b94 https://radar.offseq.com/threat/cve-2026-47724-cwe-862-missing-authorization-in-juev-nebula-mesh-5b3eaa5cbee141ba 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-47724%3A%20CWE-862%3A%20Missing%20Authorization%20in%20juev%20nebula-mesh&severity=critical&id=6a62806b9c2644c7f8b34ba5 https://radar.offseq.com/threat/cve-2026-21653-victor-ssrf-in-johnson-controls-ccure-9000-and-victor-application-server-8fb9f4f0b109cecc 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-21653%3A%20Victor%20SSRF%20in%20Johnson%20Controls%20CCure%209000%20and%20victor%20application%20server&severity=high&id=6a62806b9c2644c7f8b34b88 https://radar.offseq.com/threat/cve-2026-47723-cwe-1021-improper-restriction-of-rendered-ui-layers-or-frames-in-juev-nebula-mesh-89fd32f2d1b98f9d 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-47723%3A%20CWE-1021%3A%20Improper%20Restriction%20of%20Rendered%20UI%20Layers%20or%20Frames%20in%20juev%20nebula-mesh&severity=high&id=6a62781b9c2644c7f8a7dd80 https://radar.offseq.com/threat/australian-energy-provider-origin-says-data-breach-exposes-client-data-bd464e4146a00257 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Australian%20energy%20provider%20Origin%20says%20data%20breach%20exposes%20client%20data&severity=medium&id=6a6277ef9c2644c7f8a7cd4e https://radar.offseq.com/threat/cve-2026-16796-improper-neutralization-of-argument-delimiters-in-aws-bedrock-agentcore-python-sdk-c27a166affb54782 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-16796%20-%20Improper%20neutralization%20of%20argument%20delimiters%20in%20AWS%20Bedrock%20AgentCore%20Python%20SDK%20install_packages()&severity=low&id=6a6277859c2644c7f8a6e8e4 https://radar.offseq.com/threat/cve-2026-21655-cwe-502-deserialization-of-untrusted-data-in-johnson-control-victor-55c16bf0f0a46438 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-21655%3A%20CWE-502%20Deserialization%20of%20untrusted%20data%20in%20Johnson%20Control%20victor&severity=high&id=6a62781b9c2644c7f8a7dd79 https://radar.offseq.com/threat/malicious-code-in-govapkg-pypi-1fec5711e1337fb0 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20govapkg%20(PyPI)&severity=high&id=6a629b0d9c2644c7f8d861b8 https://radar.offseq.com/threat/cve-2026-15968-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-4845ec3189798c26 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15968%3A%20CWE-79%20Improper%20neutralization%20of%20input%20during%20web%20page%20generation%20('cross-site%20scripting')%20in%20Progress%20MOVEit%20Transfer&severity=high&id=6a62781b9c2644c7f8a7dd71 https://radar.offseq.com/threat/insufficient-session-expiration-vulnerability-in-progress-moveit-transfer-cve-2026-15967-f62dd447118dd970 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15967%3A%20CWE-613%20Insufficient%20session%20expiration%20in%20Progress%20MOVEit%20Transfer&severity=high&id=6a629b0e9c2644c7f8d86317 https://radar.offseq.com/threat/cve-2026-15967-cwe-613-insufficient-session-expiration-in-progress-moveit-transfer-cbe4aead39380d9d 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15967%3A%20CWE-613%20Insufficient%20session%20expiration%20in%20Progress%20MOVEit%20Transfer&severity=high&id=6a62781b9c2644c7f8a7dd6e https://radar.offseq.com/threat/cve-2026-15966-cwe-942-permissive-cross-domain-security-policy-with-untrusted-domains-in-progress-343a4cabe17740c3 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15966%3A%20CWE-942%20Permissive%20cross-domain%20security%20policy%20with%20untrusted%20domains%20in%20Progress%20MOVEit%20Transfer&severity=high&id=6a62781b9c2644c7f8a7dd6b https://radar.offseq.com/threat/cve-2026-10697-cwe-287-improper-authentication-in-progress-moveit-transfer-3508eb46707a3bde 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-10697%3A%20CWE-287%3A%20Improper%20Authentication%20in%20Progress%20MOVEit%20Transfer&severity=high&id=6a62781b9c2644c7f8a7dd68 https://radar.offseq.com/threat/open-source-ebpf-security-tool-for-linux-servers-a54ebc881dcffc44 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Open-source%20eBPF%20security%20tool%20for%20Linux%20servers&severity=medium&id=6a62be359c2644c7f80d2cd6 https://radar.offseq.com/threat/fake-claude-app-promoted-by-bing-ads-pushes-sectoprat-malware-b5028b9c2e542fae 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Fake%20Claude%20app%20promoted%20by%20Bing%20ads%20pushes%20SectopRAT%20malware&severity=medium&id=6a6270e89c2644c7f89dea90 https://radar.offseq.com/threat/cve-2026-15212-cwe-352-cross-site-request-forgery-csrf-in-wpo365-wpo365-seamless-wordpress-microsoft-457ab4631b0115c4 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15212%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20wpo365%20WPO365%20%7C%20SEAMLESS%20WORDPRESS%20%2B%20MICROSOFT%20INTEGRATION%20(WPO365%20%7C%20LOGIN)&severity=high&id=6a62711c9c2644c7f89e06e2 https://radar.offseq.com/threat/cve-2026-47722-cwe-94-improper-control-of-generation-of-code-code-injection-in-juev-nebula-mesh-540c7d2cd3bb854b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-47722%3A%20CWE-94%3A%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')%20in%20juev%20nebula-mesh&severity=high&id=6a62711c9c2644c7f89e06e7 https://radar.offseq.com/threat/cve-2026-12353-missing-release-of-resource-after-effective-lifetime-in-red-hat-red-hat-certificate-26c3844a78692af0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-12353%3A%20Missing%20Release%20of%20Resource%20after%20Effective%20Lifetime%20in%20Red%20Hat%20Red%20Hat%20Certificate%20System%209&severity=medium&id=6a626a069c2644c7f89416c7 https://radar.offseq.com/threat/cve-2026-25800-cwe-770-allocation-of-resources-without-limits-or-throttling-in-quinn-rs-quinn-503fa76098ac5667 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-25800%3A%20CWE-770%3A%20Allocation%20of%20Resources%20Without%20Limits%20or%20Throttling%20in%20quinn-rs%20quinn&severity=high&id=6a626a069c2644c7f89416cb https://radar.offseq.com/threat/cve-2026-64785-swiftnio-http2-was-missing-validation-on-inbound-headers-frames-that-let-cr-lf-nul-sp-427bda9724ddd712 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-64785%3A%20SwiftNIO%20HTTP%2F2%20was%20missing%20validation%20on%20inbound%20HEADERS%20frames%20that%20let%20CR%2C%20LF%2C%20NUL%2C%20SP%20and%20other%20control%20characters%20reach%20an%20HTTP%2F1.1%20backend%20through%20NIOHTTP2's%20HTTP%2F2-to-HTTP%2F1%20codec%2C%20enabling%20HTTP%20request%20smuggling%20or%20response%20splitting.%20in%20Apple%20swift-nio-http2&severity=medium&id=6a626a069c2644c7f89416d4 https://radar.offseq.com/threat/cve-2026-63359-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-1a503341d30c5d5f 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-63359%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20Appriss%20Insights%20Victim%20Information%20Notification%20Exchange%20(VINE)&severity=critical&id=6a626a069c2644c7f89416d0 https://radar.offseq.com/threat/red-hat-security-advisory-glibc-security-update-3cb107b042e3e820 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Red%20Hat%20Security%20Advisory%3A%20Red%20Hat%20OpenShift%20distributed%20tracing%20platform%20(Tempo)%203.10.2%20release&severity=high&id=6a5fd0931010f89cc2199005 https://radar.offseq.com/threat/cve-2026-15687-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-7ce0829a6dcc4edd 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-15687%3A%20CWE-22%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20Kubernetes%20kubernetes-client%2Fjava&severity=low&id=6a6262fe9c2644c7f88aae38 https://radar.offseq.com/threat/cve-2026-16756-allocation-of-resources-without-limits-in-the-default-aws-smithy-http-server-serve-path-884a870f3ee6243d 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-16756%20-%20Allocation%20of%20resources%20without%20limits%20in%20the%20default%20aws-smithy-http-server%20serve()%20path%20allows%20unauthenticated%20Slowloris%20denial%20of%20service&severity=low&id=6a6261c99c2644c7f888dc65 https://radar.offseq.com/threat/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged-baf9f697c9ecd508 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Thailand's%20Ministry%20of%20Finance%20Targeted%20With%20Hermes%20AI%20Agent%20Running%20Unattended%2C%20Hades%20Implant%20Staged&severity=medium&id=6a6262d49c2644c7f88a9356 https://radar.offseq.com/threat/new-guidance-available-3692dfdc671e6127 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=%F0%9F%93%A2%20NEW%20GUIDANCE%20AVAILABLE%20%F0%9F%93%A2&severity=medium&id=6a6258469c2644c7f87c6880 https://radar.offseq.com/threat/dont-swing-at-everything-bf81ae37d60f2752 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=Don%E2%80%99t%20swing%20at%20everything&severity=critical&id=6a625aa39c2644c7f87f494f https://radar.offseq.com/threat/cve-2026-65010-unix-symbolic-link-symlink-following-in-huggingface-datasets-21577a72b4c1e446 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65010%3A%20UNIX%20Symbolic%20Link%20(Symlink)%20Following%20in%20huggingface%20datasets&severity=medium&id=6a625bf69c2644c7f881d7ce https://radar.offseq.com/threat/cve-2026-65920-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-b274dbf7b91f4641 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65920%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20huggingface%20diffusers&severity=medium&id=6a6254f59c2644c7f8773ea1 https://radar.offseq.com/threat/cve-2026-65918-out-of-bounds-read-in-pytorch-vision-d523f5cc925e11e5 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65918%3A%20Out-of-bounds%20Read%20in%20pytorch%20vision&severity=high&id=6a6254f59c2644c7f8773e9b https://radar.offseq.com/threat/cve-2026-47769-cwe-306-missing-authentication-for-critical-function-in-work90210-apifold-f2d1e6f2aeafe5f6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-47769%3A%20CWE-306%3A%20Missing%20Authentication%20for%20Critical%20Function%20in%20Work90210%20APIFold&severity=medium&id=6a6254f59c2644c7f8773e96 https://radar.offseq.com/threat/cve-2026-6516-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-e95b3c208dce241c 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-6516%3A%20CWE-78%20Improper%20neutralization%20of%20special%20elements%20used%20in%20an%20OS%20command%20('OS%20command%20injection')%20in%20Zohocorp%20ManageEngine%20ADAudit%20Plus&severity=critical&id=6a6254f59c2644c7f8773ea7 https://radar.offseq.com/threat/cve-2026-47743-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-b2d80f76add94bd9 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-47743%3A%20CWE-79%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20shopperlabs%20shopper&severity=high&id=6a6254f59c2644c7f8773e92 https://radar.offseq.com/threat/red-hat-security-advisory-red-hat-hardened-images--b2129868 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Red%20Hat%20Security%20Advisory%3A%20Red%20Hat%20Ansible%20Automation%20Platform%202.2%20security%20update&severity=high&id=6a297639c9170919df2afab3 https://radar.offseq.com/threat/cve-2026-65702-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-vanna-ai-dfd15b3776921a54 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65702%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20vanna-ai%20vanna&severity=high&id=6a624de39c2644c7f86dabac https://radar.offseq.com/threat/cve-2026-47755-cwe-639-authorization-bypass-through-user-controlled-key-in-itflow-org-itflow-6147383807527ffe 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-47755%3A%20CWE-639%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20itflow-org%20itflow&severity=medium&id=6a624de29c2644c7f86dab8d https://radar.offseq.com/threat/cve-2026-65701-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-svc-03e519049653270b 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65701%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20svc-develop-team%20so-vits-svc&severity=critical&id=6a624de29c2644c7f86daba8 https://radar.offseq.com/threat/cve-2026-65700-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-h2oai-b58f416428895415 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65700%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20h2oai%20h2ogpt&severity=critical&id=6a624de29c2644c7f86daba4 https://radar.offseq.com/threat/cve-2026-65762-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-83d0eb13e5691cbe 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65762%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20phoca.cz%20Phoca%20Guestbook%20extension%20for%20Joomla&severity=medium&id=6a624de39c2644c7f86dabb0 https://radar.offseq.com/threat/cve-2026-65699-authorization-bypass-through-user-controlled-key-in-reworkd-agentgpt-4e7bc586902e0761 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-65699%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20reworkd%20AgentGPT&severity=low&id=6a624de29c2644c7f86dab97 https://radar.offseq.com/threat/cve-2026-47752-cwe-1336-improper-neutralization-of-special-elements-used-in-a-template-engine-in-39ba985130d11783 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-47752%3A%20CWE-1336%3A%20Improper%20Neutralization%20of%20Special%20Elements%20Used%20in%20a%20Template%20Engine%20in%20Quenary%20tugtainer&severity=critical&id=6a624de29c2644c7f86dab89 https://radar.offseq.com/threat/cve-2026-65763-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-cadc5ecd3cf40d96 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65763%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20phoca.cz%20Phoca%20Maps%20extension%20for%20Joomla&severity=medium&id=6a624de39c2644c7f86dabb3 https://radar.offseq.com/threat/russian-hackers-exploit-zimbra-zero-click-flaw-for-email-theft-4f056be595ca4d21 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Russian%20hackers%20exploit%20Zimbra%20zero-click%20flaw%20for%20email%20theft&severity=medium&id=6a6246be9c2644c7f8641461 https://radar.offseq.com/threat/cve-2026-65759-cwe-284-improper-access-control-in-joomshapercom-easy-store-extension-for-joomla-a3f6ca5f082b26ba 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65759%3A%20CWE-284%20Improper%20Access%20Control%20in%20joomshaper.com%20Easy%20Store%20extension%20for%20Joomla&severity=high&id=6a6246fe9c2644c7f8644e7e https://radar.offseq.com/threat/cve-2026-16768-out-of-bounds-read-in-red-hat-red-hat-enterprise-linux-10-3e56c1ae5deac13f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16768%3A%20Out-of-bounds%20Read%20in%20GNOME%20gdk-pixbuf&severity=medium&id=6a6246fe9c2644c7f8644e66 https://radar.offseq.com/threat/cve-2026-65761-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-in-4b4f083694633d34 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65761%3A%20CWE-89%3A%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20in%20joomshaper.com%20Easy%20Store%20extension%20for%20Joomla&severity=critical&id=6a6246fe9c2644c7f8644e86 https://radar.offseq.com/threat/cve-2026-65760-cwe-284-improper-access-control-in-joomshapercom-easy-store-extension-for-joomla-3f040e423775d578 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65760%3A%20CWE-284%20Improper%20Access%20Control%20in%20joomshaper.com%20Easy%20Store%20extension%20for%20Joomla&severity=critical&id=6a6246fe9c2644c7f8644e82 https://radar.offseq.com/threat/cve-2026-65698-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-4bc4aeed87563b68 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65698%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20voideditor%20void&severity=medium&id=6a6246fe9c2644c7f8644e7a https://radar.offseq.com/threat/hackers-abuse-notepad-plugins-to-stealthily-install-malware-e6cf53e3b9c66669 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Hackers%20abuse%20Notepad%2B%2B%20plugins%20to%20stealthily%20install%20malware&severity=medium&id=6a6246be9c2644c7f8641464 https://radar.offseq.com/threat/upgrades-maas-ecosystem-with-modular-tools-b3f313dcb168477c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Upgrades%20MaaS%20Ecosystem%20with%20Modular%20Tools&severity=medium&id=6a62a5a29c2644c7f8e985bf https://radar.offseq.com/threat/email-threat-landscape-q2-2026-trends-and-insights-1e4eeae83b30157c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Email%20threat%20landscape%3A%20Q2%202026%20trends%20and%20insights&severity=medium&id=6a62a5a29c2644c7f8e9860c https://radar.offseq.com/threat/cve-2026-65697-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-17d9db51aa0899a8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65697%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20usefathom%20fathom&severity=medium&id=6a6246fe9c2644c7f8644e76 https://radar.offseq.com/threat/cve-2026-44909-cwe-770-in-facebook-proxygen-d28e33a590c06cee 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-44909%3A%20CWE-770%20in%20Facebook%20proxygen&severity=high&id=6a6246fe9c2644c7f8644e6b https://radar.offseq.com/threat/cve-2026-65696-authorization-bypass-through-user-controlled-key-in-sct-overseerr-2e2af83ec48bdae0 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65696%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20sct%20overseerr&severity=medium&id=6a6246fe9c2644c7f8644e72 https://radar.offseq.com/threat/cve-2026-65695-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-gongrzhe-65de801a29298eae 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65695%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20GongRzhe%20Office-Word-MCP-Server&severity=high&id=6a6246fe9c2644c7f8644e6e https://radar.offseq.com/threat/cve-2026-65917-authorization-bypass-through-user-controlled-key-in-usmannasir-cyberpanel-6da17204bf16a377 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65917%3A%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20usmannasir%20cyberpanel&severity=high&id=6a623fe59c2644c7f85af552 https://radar.offseq.com/threat/cve-2026-65916-missing-authorization-in-usmannasir-cyberpanel-86b6f847aed5020b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65916%3A%20Missing%20Authorization%20in%20usmannasir%20cyberpanel&severity=high&id=6a623fe59c2644c7f85af54d https://radar.offseq.com/threat/reversing-labs-c86abd23f11d238b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Reversing%20Labs%20%3F&severity=medium&id=6a62389e9c2644c7f852558a https://radar.offseq.com/threat/microsoft-365-outage-affects-teams-sharepoint-and-other-services-5ff464b6b2cfbb3e 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Microsoft%20365%20outage%20affects%20Teams%2C%20SharePoint%20and%20other%20services&severity=medium&id=6a6235289c2644c7f84c724c https://radar.offseq.com/threat/cve-2026-16584-cwe-455-non-exit-on-failed-initialization-in-aws-aws-api-mcp-server-7f28b1010e80c920 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16584%3A%20CWE-455%20Non-exit%20on%20failed%20initialization%20in%20AWS%20aws-api-mcp-server&severity=high&id=6a623fe59c2644c7f85af557 https://radar.offseq.com/threat/cve-2026-48539-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-d40ca1ce45ec004f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48539%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe79c2644c7f85af5a3 https://radar.offseq.com/threat/cve-2026-48538-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-b62cce8aefdfa1e6 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48538%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe59c2644c7f85af574 https://radar.offseq.com/threat/cve-2026-48537-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-0dda42a76d9fe95f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48537%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe59c2644c7f85af570 https://radar.offseq.com/threat/cve-2026-48536-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-b58a18cc4dffa3a6 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48536%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe59c2644c7f85af56c https://radar.offseq.com/threat/cve-2026-48535-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-08696a5e8c2daff2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48535%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a62806b9c2644c7f8b34cbc https://radar.offseq.com/threat/cve-2026-48534-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-547ed4930da4fba3 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48534%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe59c2644c7f85af568 https://radar.offseq.com/threat/cve-2026-48533-40e8d1a9c386deb3 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-48533&severity=low&id=6a62806b9c2644c7f8b34cba https://radar.offseq.com/threat/cve-2026-48532-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-d1fa2588d1ae6db9 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48532%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe59c2644c7f85af564 https://radar.offseq.com/threat/a-new-name-in-the-data-extortion-ecosystem-f8f2d5d5aede9cab 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=A%20New%20Name%20in%20the%20Data%20Extortion%20Ecosystem%3F&severity=medium&id=6a6235339c2644c7f84c7441 https://radar.offseq.com/threat/cve-2026-48531-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-c889499353e938b0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48531%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe59c2644c7f85af560 https://radar.offseq.com/threat/cve-2026-48530-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-gfi-4a23082e890c7edf 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-48530%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20GFI%20Software%20GFI%20Archiver&severity=medium&id=6a623fe59c2644c7f85af55c https://radar.offseq.com/threat/openai-fixes-chatgpt-agent-flaw-that-could-let-attackers-forge-an-ai-insider-2f88581fa1806bc9 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=OpenAI%20Fixes%20ChatGPT%20Agent%20Flaw%20That%20Could%20Let%20Attackers%20Forge%20an%20AI%20Insider&severity=low&id=6a62319e9c2644c7f846dde0 https://radar.offseq.com/threat/cve-2026-11804-cwe-280-improper-handling-of-insufficient-permissions-or-privileges-in-tridium-niagara-fc518a1d86b0c53c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-11804%3A%20CWE-280%20Improper%20handling%20of%20insufficient%20permissions%20or%20privileges%20in%20Tridium%20Niagara%20Framework&severity=medium&id=6a625bf69c2644c7f881d7d4 https://radar.offseq.com/threat/email-threat-landscape-q2-2026-trends-and-insights-4ea965518f3992ca 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Email%20threat%20landscape%3A%20Q2%202026%20trends%20and%20insights&severity=medium&id=6a629d419c2644c7f8dcf07b https://radar.offseq.com/threat/is-patching-dead-vulnerability-management-in-the-post-mythos-era-44d4a28007ffdb16 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Is%20Patching%20Dead%3F%20Vulnerability%20Management%20in%20the%20Post-Mythos%20Era&severity=medium&id=6a622e199c2644c7f841df24 https://radar.offseq.com/threat/chick-fil-a-accounts-get-fried-in-credential-stuffing-attack-0a37c2634e39f4b4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Chick-fil-A%20Accounts%20Get%20Fried%20in%20Credential%20Stuffing%20Attack&severity=medium&id=6a622e199c2644c7f841df27 https://radar.offseq.com/threat/cve-2026-43823-when-initializing-an-rsa-public-key-from-der-or-pem-bytes-throws-an-error-the-evppkey-7796879df1050178 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-43823%3A%20When%20initializing%20an%20RSA%20public%20key%20from%20DER%20or%20PEM%20bytes%20throws%20an%20error%2C%20the%20EVP_PKEY*%20is%20double-freed%3A%20first%20in%20the%20catch%20block%2C%20then%20in%20the%20deinit.%20This%20can%20lead%20to%20a%20crash%20on%20future%20memory%20allocations.%20This%20double-free%20manifests%20when%20BoringSSL%20cannot%20decode%20the%20public%20key%20from%20the%20bytes%20provided.%20in%20Apple%20swift-crypto&severity=high&id=6a622e759c2644c7f84289a7 https://radar.offseq.com/threat/cve-2026-43820-niosslcertificatesubjectalternativenames-provides-access-to-the-raw-bytes-for-a-certs-c78f087d61a8e016 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-43820%3A%20NIOSSLCertificate._subjectAlternativeNames%20provides%20access%20to%20the%20raw%20bytes%20for%20a%20cert's%20SANs.%20NIOSSL%20provides%20access%20to%20a%20buffer%20assumed%20to%20be%20backed%20by%20an%20ASN1_STRING%2C%20but%20not%20all%20SANs%20are%20backed%20by%20ASN1_STRING%2C%20so%20accessing%20the%20buffer%20for%20such%20a%20type%20can%20lead%20to%20out-of-bounds%20memory%20access.%20in%20Apple%20swift-nio-ssl&severity=high&id=6a622e759c2644c7f84289a4 https://radar.offseq.com/threat/russian-global-webmail-espionage-11b642b5a7aecdd1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Russian%20Global%20Webmail%20Espionage&severity=medium&id=6a6222ae9c2644c7f832809a https://radar.offseq.com/threat/fedramp-rev5-is-ending-what-the-20x-transition-really-requires-27ae709f920bc88a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=FedRAMP%20Rev5%20Is%20Ending%3A%20What%20the%2020x%20Transition%20Really%20Requires&severity=medium&id=6a6227139c2644c7f838367b https://radar.offseq.com/threat/abstract-raises-25-million-to-expand-composable-security-operations-platform-72c61aa4e001bac8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Abstract%20Raises%20%2425%20Million%20to%20Expand%20Composable%20Security%20Operations%20Platform&severity=medium&id=6a6220099c2644c7f82e4891 https://radar.offseq.com/threat/cve-2026-8287-cwe-770-allocation-of-resources-without-limits-or-throttling-in-bizimhesap-information-ce45c0c3a9ecc227 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-8287%3A%20CWE-770%20Allocation%20of%20resources%20without%20limits%20or%20throttling%20in%20BizimHesap%20Information%20Systems%20Industry%20and%20Trade%20Inc.%20Online%20Pre-Accounting%20Software&severity=medium&id=6a62204b9c2644c7f82e70fe https://radar.offseq.com/threat/cve-2026-16735-os-command-injection-in-release-it-conventional-changelog-bb61aa74321a8975 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16735%3A%20OS%20Command%20Injection%20in%20release-it%20conventional-changelog&severity=medium&id=6a62204b9c2644c7f82e70e6 https://radar.offseq.com/threat/when-the-autonomous-attacker-is-your-own-ai-model-thu-jul-23rd-c5d50a87c0c40e66 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=When%20the%20%22Autonomous%20Attacker%22%20Is%20Your%20Own%20AI%20Model%2C%20(Thu%2C%20Jul%2023rd)&severity=medium&id=6a621c879c2644c7f829f535 https://radar.offseq.com/threat/cve-2026-65690-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-bold-b9c7319d274ac6de 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65690%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20Bold%20Reports%20(By%20SyncFusion)%20Standalone%20Report%20Designer&severity=high&id=6a62204b9c2644c7f82e70fa https://radar.offseq.com/threat/cve-2026-16733-os-command-injection-in-bahmutov-find-cypress-specs-84ea1b6becd5213d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16733%3A%20OS%20Command%20Injection%20in%20bahmutov%20find-cypress-specs&severity=medium&id=6a62204b9c2644c7f82e70de https://radar.offseq.com/threat/cve-2026-65689-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-bold-ae2e98e79b626a41 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65689%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20Bold%20Reports%20(By%20SyncFusion)%20Standalone%20Report%20Designer&severity=critical&id=6a62204b9c2644c7f82e70f6 https://radar.offseq.com/threat/cve-2026-65688-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-bold-de4622317af1aa89 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65688%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20Bold%20Reports%20(By%20SyncFusion)%20Standalone%20Report%20Designer&severity=critical&id=6a62204b9c2644c7f82e70f2 https://radar.offseq.com/threat/cve-2026-65687-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-bold-cc9954ca5f07758e 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65687%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20Bold%20Reports%20(By%20SyncFusion)%20Standalone%20Report%20Designer&severity=critical&id=6a62204b9c2644c7f82e70ee https://radar.offseq.com/threat/cve-2026-65914-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-ddd3b42786862134 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65914%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a39c2644c7f8207324 https://radar.offseq.com/threat/cve-2026-65913-improperly-controlled-modification-of-object-prototype-attributes-prototype-pollution-022ee45bda00b8ca 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65913%3A%20Improperly%20Controlled%20Modification%20of%20Object%20Prototype%20Attributes%20('Prototype%20Pollution')%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a39c2644c7f8207320 https://radar.offseq.com/threat/cve-2026-65912-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-a7f56c22b1c11132 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65912%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072f9 https://radar.offseq.com/threat/cve-2026-65911-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-0d42ed80bfc29b5e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65911%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072f5 https://radar.offseq.com/threat/cve-2026-65904-improper-check-for-unusual-or-exceptional-conditions-in-cure53-dompurify-01f83a57bafefb1b 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-65904%3A%20Improper%20Check%20for%20Unusual%20or%20Exceptional%20Conditions%20in%20cure53%20DOMPurify&severity=low&id=6a6215a29c2644c7f82072f1 https://radar.offseq.com/threat/cve-2026-65903-incorrect-comparison-in-cure53-dompurify-493c369ab4542d65 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65903%3A%20Incorrect%20Comparison%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072ed https://radar.offseq.com/threat/cve-2026-65902-trust-boundary-violation-in-cure53-dompurify-1fb3ad314fe5140e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65902%3A%20Trust%20Boundary%20Violation%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072e8 https://radar.offseq.com/threat/cve-2026-65901-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-eae2c879e0f0b716 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65901%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072d8 https://radar.offseq.com/threat/cve-2026-65900-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-f9276dc073c957c7 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65900%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072d1 https://radar.offseq.com/threat/cve-2026-65899-protection-mechanism-failure-in-cure53-dompurify-5c1868023fae990b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65899%3A%20Protection%20Mechanism%20Failure%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072cb https://radar.offseq.com/threat/cve-2026-65898-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-9d7cbd5e7de8ef29 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65898%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20cure53%20DOMPurify&severity=medium&id=6a6215a29c2644c7f82072c7 https://radar.offseq.com/threat/cve-2026-14257-cwe-400-uncontrolled-resource-consumption-in-juliangruber-brace-expansion-af938dfa8be0ee66 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-14257%3A%20CWE-400%20Uncontrolled%20Resource%20Consumption%20in%20juliangruber%20brace-expansion&severity=high&id=6a6215a29c2644c7f82072c2 https://radar.offseq.com/threat/nuclear-sabotage-malware-benchmark-trips-up-most-frontier-ai-models-800462fb39ae0cb8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Nuclear-Sabotage%20Malware%20Benchmark%20Trips%20Up%20Most%20Frontier%20AI%20Models&severity=medium&id=6a620e769c2644c7f815c42c https://radar.offseq.com/threat/eu-fines-google-1-billion-for-search-app-store-antitrust-violations-1ee6ab1255b3b846 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=EU%20fines%20Google%20%241%20billion%20for%20search%2C%20app%20store%20antitrust%20violations&severity=medium&id=6a620af29c2644c7f81127c6 https://radar.offseq.com/threat/cve-2026-15037-cwe-91-xml-injection-aka-blind-xpath-injection-in-qt-b0df70dd40fde29c 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-15037%3A%20CWE-91%20XML%20injection%20(aka%20blind%20XPath%20injection)%20in%20Qt&severity=low&id=6a620ea19c2644c7f815e025 https://radar.offseq.com/threat/cve-2026-65907-cwe-94-in-jetbrains-teamcity-0b7d157127b512e7 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65907%3A%20CWE-94%20in%20JetBrains%20TeamCity&severity=critical&id=6a620ea19c2644c7f815e02b https://radar.offseq.com/threat/cve-2026-65908-cwe-829-in-jetbrains-pycharm-7d0f347f25c189f8 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65908%3A%20CWE-829%20in%20JetBrains%20PyCharm&severity=high&id=6a620ea19c2644c7f815e02e https://radar.offseq.com/threat/cve-2026-65906-cwe-94-in-jetbrains-teamcity-bfaafc116f8063a6 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65906%3A%20CWE-94%20in%20JetBrains%20TeamCity&severity=high&id=6a620ea19c2644c7f815e028 https://radar.offseq.com/threat/cve-2026-65475-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-96b242a85c4e56fd 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65475%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20WP%20Chill%20Modula%20Image%20Gallery&severity=medium&id=6a6207979c2644c7f80b649a https://radar.offseq.com/threat/cve-2026-61945-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-57c8251a2b68fd0b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-61945%3A%20CWE-497%20Exposure%20of%20Sensitive%20System%20Information%20to%20an%20Unauthorized%20Control%20Sphere%20in%20MultiVendorX%20WooCommerce%20Product%20Stock%20Alert&severity=medium&id=6a6207959c2644c7f80b6456 https://radar.offseq.com/threat/real-world-attacks-on-corporate-ai-agents-kaspersky-official-blog-94e420af24be207d 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Real-world%20attacks%20on%20corporate%20AI%20agents%20%7C%20Kaspersky%20official%20blog&severity=medium&id=6a61ff249c2644c7f8ff9e13 https://radar.offseq.com/threat/cve-2026-65897-improper-privilege-management-in-getgrav-grav-22923c23b505cae4 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65897%3A%20Improper%20Privilege%20Management%20in%20getgrav%20grav&severity=high&id=6a6207989c2644c7f80b6a03 https://radar.offseq.com/threat/cve-2026-65896-external-control-of-file-name-or-path-in-getgrav-grav-767ff800ac88ed2a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65896%3A%20External%20Control%20of%20File%20Name%20or%20Path%20in%20getgrav%20grav&severity=high&id=6a6207989c2644c7f80b69fe https://radar.offseq.com/threat/cve-2026-65895-missing-authorization-in-getgrav-grav-f70bc163497e3638 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65895%3A%20Missing%20Authorization%20in%20getgrav%20grav&severity=high&id=6a6207989c2644c7f80b69f9 https://radar.offseq.com/threat/cve-2026-65608-use-of-externally-controlled-input-to-select-classes-or-code-unsafe-reflection-in-cc262cb3da88bf89 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65608%3A%20Use%20of%20Externally-Controlled%20Input%20to%20Select%20Classes%20or%20Code%20('Unsafe%20Reflection')%20in%20getgrav%20grav&severity=high&id=6a6207989c2644c7f80b69f4 https://radar.offseq.com/threat/cve-2026-65607-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-siyuan-9d7975ce6209703b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65607%3A%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20siyuan-note%20siyuan&severity=high&id=6a6207979c2644c7f80b64a7 https://radar.offseq.com/threat/cve-2026-65606-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-cdd74e03bf3f9f2e 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65606%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20siyuan-note%20siyuan&severity=critical&id=6a6207979c2644c7f80b64a2 https://radar.offseq.com/threat/cve-2026-65605-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-48c641bf56cf0627 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65605%3A%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20siyuan-note%20siyuan&severity=critical&id=6a6207979c2644c7f80b649d https://radar.offseq.com/threat/cve-2026-64815-cwe-94-in-jetbrains-intellij-idea-a93c2f8fadc512e2 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64815%3A%20CWE-94%20in%20JetBrains%20IntelliJ%20IDEA&severity=high&id=6a6207979c2644c7f80b6497 https://radar.offseq.com/threat/cve-2026-64814-cwe-862-in-jetbrains-intellij-idea-3a9b16e781c92265 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64814%3A%20CWE-862%20in%20JetBrains%20IntelliJ%20IDEA&severity=high&id=6a6207979c2644c7f80b6494 https://radar.offseq.com/threat/cve-2026-64813-cwe-602-in-jetbrains-intellij-idea-dde263292bb95c41 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-64813%3A%20CWE-602%20in%20JetBrains%20IntelliJ%20IDEA&severity=critical&id=6a6207979c2644c7f80b6491 https://radar.offseq.com/threat/cve-2026-64812-cwe-306-in-jetbrains-intellij-idea-d9e811fc6d905d8d 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-64812%3A%20CWE-306%20in%20JetBrains%20IntelliJ%20IDEA&severity=critical&id=6a6207979c2644c7f80b648e https://radar.offseq.com/threat/cve-2026-64811-cwe-829-in-jetbrains-intellij-idea-454518959acffacc 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64811%3A%20CWE-829%20in%20JetBrains%20IntelliJ%20IDEA&severity=high&id=6a6207979c2644c7f80b648b https://radar.offseq.com/threat/cve-2026-64810-cwe-79-in-jetbrains-intellij-idea-d24c9ca841796a55 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-64810%3A%20CWE-79%20in%20JetBrains%20IntelliJ%20IDEA&severity=medium&id=6a6207979c2644c7f80b6488 https://radar.offseq.com/threat/cve-2026-64809-cwe-829-in-jetbrains-phpstorm-19a0dc7a0be61977 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64809%3A%20CWE-829%20in%20JetBrains%20PhpStorm&severity=high&id=6a6207959c2644c7f80b6475 https://radar.offseq.com/threat/cve-2026-64808-cwe-829-in-jetbrains-phpstorm-015d42f0d9d274f5 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64808%3A%20CWE-829%20in%20JetBrains%20PhpStorm&severity=high&id=6a6207959c2644c7f80b6472 https://radar.offseq.com/threat/cve-2026-64807-cwe-829-in-jetbrains-webstorm-84b61ec34e14d56a 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64807%3A%20CWE-829%20in%20JetBrains%20WebStorm&severity=high&id=6a6207959c2644c7f80b646f https://radar.offseq.com/threat/cve-2026-64806-cwe-829-in-jetbrains-webstorm-0d1d0020e7533010 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64806%3A%20CWE-829%20in%20JetBrains%20WebStorm&severity=high&id=6a6207959c2644c7f80b646c https://radar.offseq.com/threat/cve-2026-64805-cwe-829-in-jetbrains-webstorm-c8736180f3cc3121 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64805%3A%20CWE-829%20in%20JetBrains%20WebStorm&severity=high&id=6a6207959c2644c7f80b6469 https://radar.offseq.com/threat/cve-2026-64804-cwe-829-in-jetbrains-webstorm-8969b5b09085bbdb 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64804%3A%20CWE-829%20in%20JetBrains%20WebStorm&severity=high&id=6a6207959c2644c7f80b6466 https://radar.offseq.com/threat/cve-2026-64803-cwe-94-in-jetbrains-goland-05c53127ee01dc3e 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64803%3A%20CWE-94%20in%20JetBrains%20GoLand&severity=high&id=6a6207959c2644c7f80b6463 https://radar.offseq.com/threat/cve-2026-64802-cwe-94-in-jetbrains-goland-cf61163ba6a6e095 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64802%3A%20CWE-94%20in%20JetBrains%20GoLand&severity=high&id=6a6207959c2644c7f80b6460 https://radar.offseq.com/threat/cve-2026-64800-cwe-532-in-jetbrains-goland-2c7134dd2d3e3fbd 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-64800%3A%20CWE-532%20in%20JetBrains%20GoLand&severity=low&id=6a6207959c2644c7f80b645b https://radar.offseq.com/threat/cve-2026-65550-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-7d5adc00d98b79d2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65550%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20wpshopmart%20Tabs&severity=medium&id=6a61fd2d9c2644c7f8fc365d https://radar.offseq.com/threat/cve-2026-65540-cwe-352-cross-site-request-forgery-csrf-in-metin-sara-popup-for-cf7-with-sweet-alert-f54ba4bfc5151c13 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65540%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20Metin%20Sara%C3%A7%20Popup%20for%20CF7%20with%20Sweet%20Alert&severity=high&id=6a61fd2d9c2644c7f8fc365a https://radar.offseq.com/threat/cve-2026-65539-cwe-352-cross-site-request-forgery-csrf-in-bimal-rekhadiya-kwayy-html-sitemap-b65ed5ef9f73dd2f 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65539%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20Bimal%20Rekhadiya%20Kwayy%20HTML%20Sitemap&severity=high&id=6a61fd2c9c2644c7f8fc30ff https://radar.offseq.com/threat/cve-2026-65538-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-2b8daf860c0e85ad 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65538%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Nilo%20Velez%20Machete&severity=medium&id=6a61fd2c9c2644c7f8fc30fc https://radar.offseq.com/threat/cve-2026-65537-cwe-862-missing-authorization-in-themeisle-cyr-to-lat-reloaded-transliteration-of-links-37541da08c7374ed 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65537%3A%20CWE-862%20Missing%20Authorization%20in%20Themeisle%20Cyr%20to%20Lat%20reloaded%20%E2%80%93%20transliteration%20of%20links%20and%20file%20names&severity=medium&id=6a61fd2c9c2644c7f8fc30f9 https://radar.offseq.com/threat/cve-2026-65536-cwe-352-cross-site-request-forgery-csrf-2feb04f8c49b3db7 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65536%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)&severity=medium&id=6a61fd2c9c2644c7f8fc30f6 https://radar.offseq.com/threat/cve-2026-65535-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-b0dddc9ef72c33d0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65535%3A%20CWE-497%20Exposure%20of%20Sensitive%20System%20Information%20to%20an%20Unauthorized%20Control%20Sphere%20in%20Takayuki%20Miyauchi%20TinyMCE%20Templates&severity=medium&id=6a61fd2c9c2644c7f8fc30f3 https://radar.offseq.com/threat/cve-2026-65534-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-b9e591de05e03c10 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65534%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Charlie%20Etienne%20Custom%20links%20in%20Elementor%20Image%20Carousel&severity=medium&id=6a61fd2c9c2644c7f8fc30f0 https://radar.offseq.com/threat/cve-2026-65533-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-0bc058c416a8b96e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65533%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20wbolt.com%20Smart%20SEO%20Tool&severity=medium&id=6a61fd2c9c2644c7f8fc30ed https://radar.offseq.com/threat/cve-2026-65532-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a39a60036a040345 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65532%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20PersianScript%20Persian%20Woocommerce%20SMS&severity=high&id=6a61fd2c9c2644c7f8fc30ea https://radar.offseq.com/threat/cve-2026-65531-cwe-862-missing-authorization-in-themeum-qubely-1be798cd5a46fff5 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65531%3A%20CWE-862%20Missing%20Authorization%20in%20Themeum%20Qubely&severity=medium&id=6a61fd2c9c2644c7f8fc30e7 https://radar.offseq.com/threat/cve-2026-65529-cwe-862-missing-authorization-in-iqonic-design-graphina-7b6bd879c49b6126 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65529%3A%20CWE-862%20Missing%20Authorization%20in%20Iqonic%20Design%20Graphina&severity=medium&id=6a61fd2c9c2644c7f8fc30e4 https://radar.offseq.com/threat/cve-2026-65528-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-d15243b1c5837867 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65528%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20bannersky%20BSK%20PDF%20Manager&severity=medium&id=6a61fd2a9c2644c7f8fc30ce https://radar.offseq.com/threat/cve-2026-65527-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-8cf58d574df051b6 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65527%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20lqd%20LIQUID%20SPEECH%20BALLOON&severity=medium&id=6a61fd2a9c2644c7f8fc30cb https://radar.offseq.com/threat/cve-2026-65526-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-83285ad69a44e1d1 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65526%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20Themeisle%20Visualizer&severity=high&id=6a61fd2a9c2644c7f8fc30c8 https://radar.offseq.com/threat/cve-2026-65525-cwe-862-missing-authorization-in-uxper-civi-framework-15346fb198af6999 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65525%3A%20CWE-862%20Missing%20Authorization%20in%20uxper%20Civi%20Framework&severity=medium&id=6a61fd2a9c2644c7f8fc30c5 https://radar.offseq.com/threat/cve-2026-65524-cwe-862-missing-authorization-in-themefusion-avada-custom-branding-ae47a7dca0ba7f67 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65524%3A%20CWE-862%20Missing%20Authorization%20in%20ThemeFusion%20Avada%20Custom%20Branding&severity=medium&id=6a61fd2a9c2644c7f8fc30c2 https://radar.offseq.com/threat/cve-2026-65522-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-6d49a662d96320fa 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65522%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20pixelacehq%20Manual%20-%20Documentation%2C%20Knowledge%20Base%20%26%20Education%20WordPress%20Theme&severity=medium&id=6a61fd2a9c2644c7f8fc30bf https://radar.offseq.com/threat/cve-2026-65521-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-b001dbde41081824 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65521%3A%20CWE-497%20Exposure%20of%20Sensitive%20System%20Information%20to%20an%20Unauthorized%20Control%20Sphere%20in%20Mahmudul%20Hasan%20Arif%20WP%20Social%20Ninja&severity=medium&id=6a61fd2a9c2644c7f8fc30bc https://radar.offseq.com/threat/cve-2026-65519-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-87db2ed20100c720 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65519%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20gt3themes%20Photo%20Gallery&severity=medium&id=6a61fd2a9c2644c7f8fc30b9 https://radar.offseq.com/threat/cve-2026-65518-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-bb05af1d7a9ac0b8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65518%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Scott%20Paterson%20Accept%20Donations%20with%20PayPal%20%26%20Stripe&severity=medium&id=6a61fd2a9c2644c7f8fc30b6 https://radar.offseq.com/threat/cve-2026-65516-cwe-918-server-side-request-forgery-ssrf-in-pepro-dev-group-peprodev-ultimate-invoice-2dd6d6960b1f359b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65516%3A%20CWE-918%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20Pepro%20Dev.%20Group%20PeproDev%20Ultimate%20Invoice&severity=high&id=6a61fd2a9c2644c7f8fc30b3 https://radar.offseq.com/threat/cve-2026-65514-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-22e21f8bf1bbfc99 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65514%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20codepeople%20Appointment%20Hour%20Booking&severity=medium&id=6a61fd299c2644c7f8fc3072 https://radar.offseq.com/threat/cve-2026-65512-cwe-352-cross-site-request-forgery-csrf-in-melapress-wp-activity-log-64d1d40b2595e60c 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65512%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20Melapress%20WP%20Activity%20Log&severity=medium&id=6a61fd299c2644c7f8fc306f https://radar.offseq.com/threat/cve-2026-65511-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-ca6624af553dcc30 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65511%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20pixelacehq%20Manual%20-%20Documentation%2C%20Knowledge%20Base%20%26%20Education%20WordPress%20Theme&severity=high&id=6a61fd299c2644c7f8fc306c https://radar.offseq.com/threat/cve-2026-65510-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-ea10c4b8836c2a4f 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65510%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Pepro%20Dev.%20Group%20PeproDev%20Ultimate%20Invoice&severity=high&id=6a61fd299c2644c7f8fc3069 https://radar.offseq.com/threat/cve-2026-65506-cwe-862-missing-authorization-in-sonaar-mp3-audio-player-for-music-radio-podcast-by-bba79ad0c85a266d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65506%3A%20CWE-862%20Missing%20Authorization%20in%20sonaar%20MP3%20Audio%20Player%20for%20Music%2C%20Radio%20%26%20Podcast%20by%20Sonaar&severity=medium&id=6a61fd299c2644c7f8fc3066 https://radar.offseq.com/threat/cve-2026-65505-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-fd05acf283625b54 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65505%3A%20CWE-497%20Exposure%20of%20Sensitive%20System%20Information%20to%20an%20Unauthorized%20Control%20Sphere%20in%20bdthemes%20Ultimate%20Store%20Kit%20Elementor%20Addons&severity=medium&id=6a61fd299c2644c7f8fc3063 https://radar.offseq.com/threat/cve-2026-65503-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-6f0e687c973597e3 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65503%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20bdthemes%20Ultimate%20Store%20Kit%20Elementor%20Addons&severity=medium&id=6a61fd299c2644c7f8fc3060 https://radar.offseq.com/threat/cve-2026-65501-cwe-639-authorization-bypass-through-user-controlled-key-in-vendidero-shiptastic-for-4aa8c59b28dadcea 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65501%3A%20CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20vendidero%20Shiptastic%20for%20WooCommerce&severity=medium&id=6a61fd299c2644c7f8fc305d https://radar.offseq.com/threat/cve-2026-65500-cwe-862-missing-authorization-in-pixelacehq-manual-documentation-knowledge-base-de05e75378576a27 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65500%3A%20CWE-862%20Missing%20Authorization%20in%20pixelacehq%20Manual%20-%20Documentation%2C%20Knowledge%20Base%20%26%20Education%20WordPress%20Theme&severity=high&id=6a61fd299c2644c7f8fc305a https://radar.offseq.com/threat/cve-2026-65499-cwe-862-missing-authorization-in-pepro-dev-group-peprodev-ultimate-invoice-386ee9318e578894 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65499%3A%20CWE-862%20Missing%20Authorization%20in%20Pepro%20Dev.%20Group%20PeproDev%20Ultimate%20Invoice&severity=medium&id=6a61fd299c2644c7f8fc3057 https://radar.offseq.com/threat/cve-2026-65495-cwe-862-missing-authorization-in-dokan-multivendor-plugin-dokan-pro-e71f2e0cd47b70ed 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65495%3A%20CWE-862%20Missing%20Authorization%20in%20Dokan%20Multivendor%20Plugin%20Dokan%20Pro&severity=high&id=6a61fd289c2644c7f8fc3018 https://radar.offseq.com/threat/cve-2026-65494-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-29e607aa27a1228a 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65494%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20Dokan%20Dokan%20Pro&severity=high&id=6a61fd289c2644c7f8fc3015 https://radar.offseq.com/threat/cve-2026-65493-cwe-502-deserialization-of-untrusted-data-in-dokan-dokan-pro-f7776c68302c00bb 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65493%3A%20CWE-502%20Deserialization%20of%20Untrusted%20Data%20in%20Dokan%20Dokan%20Pro&severity=high&id=6a61fd289c2644c7f8fc3012 https://radar.offseq.com/threat/cve-2026-65492-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-1a6d34bf7a55c18d 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65492%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Dokan%20WordPress%20Plugin%20Dokan%20Pro&severity=high&id=6a61fd289c2644c7f8fc300f https://radar.offseq.com/threat/cve-2026-65491-cwe-862-missing-authorization-in-jonathan-daggerhart-query-wrangler-6738f9847d217d67 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65491%3A%20CWE-862%20Missing%20Authorization%20in%20Jonathan%20Daggerhart%20Query%20Wrangler&severity=medium&id=6a61fd289c2644c7f8fc300c https://radar.offseq.com/threat/cve-2026-65490-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-15576e3ced79eec2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65490%3A%20CWE-497%20Exposure%20of%20Sensitive%20System%20Information%20to%20an%20Unauthorized%20Control%20Sphere%20in%20mischiefmarmot%20Create%20by%20Mediavine&severity=medium&id=6a61fd289c2644c7f8fc3009 https://radar.offseq.com/threat/cve-2026-65489-cwe-862-missing-authorization-in-la-studio-la-studio-element-kit-for-elementor-6af61fe840215bb0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65489%3A%20CWE-862%20Missing%20Authorization%20in%20LA-Studio%20LA-Studio%20Element%20Kit%20for%20Elementor&severity=medium&id=6a61fd289c2644c7f8fc3006 https://radar.offseq.com/threat/cve-2026-65488-cwe-352-cross-site-request-forgery-csrf-in-la-studio-la-studio-element-kit-for-elementor-4dcee0742a24ff5e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65488%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20LA-Studio%20LA-Studio%20Element%20Kit%20for%20Elementor&severity=high&id=6a61fd289c2644c7f8fc3003 https://radar.offseq.com/threat/cve-2026-65487-cwe-862-missing-authorization-in-themegoods-photography-bb0122118b76ce90 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65487%3A%20CWE-862%20Missing%20Authorization%20in%20ThemeGoods%20Photography&severity=medium&id=6a61fd279c2644c7f8fc3000 https://radar.offseq.com/threat/cve-2026-65486-cwe-862-missing-authorization-in-bastien-ho-event-post-016e590a8015440a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65486%3A%20CWE-862%20Missing%20Authorization%20in%20Bastien%20Ho%20Event%20post&severity=medium&id=6a61fd279c2644c7f8fc2ffd https://radar.offseq.com/threat/cve-2026-65485-cwe-862-missing-authorization-in-daniel-iser-content-control-73f331daf7ba91b7 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65485%3A%20CWE-862%20Missing%20Authorization%20in%20Daniel%20Iser%20Content%20Control&severity=medium&id=6a61fd269c2644c7f8fc2fcf https://radar.offseq.com/threat/cve-2026-65484-cwe-862-missing-authorization-in-analogwp-style-kits-43f3d65a9534f19e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65484%3A%20CWE-862%20Missing%20Authorization%20in%20AnalogWP%20Style%20Kits&severity=medium&id=6a61fd269c2644c7f8fc2fcc https://radar.offseq.com/threat/cve-2026-65483-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-91cd2033c6bbb94d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65483%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20hashthemes%20HashThemes%20Demo%20Importer&severity=medium&id=6a61fd269c2644c7f8fc2fc9 https://radar.offseq.com/threat/cve-2026-65482-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-0ba32a903f7f3806 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65482%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20LA-Studio%20LA-Studio%20Element%20Kit%20for%20Elementor&severity=medium&id=6a61fd269c2644c7f8fc2fc6 https://radar.offseq.com/threat/cve-2026-65481-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-20ec1582b6ceeb72 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65481%3A%20CWE-98%20Improper%20Control%20of%20Filename%20for%20Include%2FRequire%20Statement%20in%20PHP%20Program%20('PHP%20Remote%20File%20Inclusion')%20in%20Elated-Themes%20Vino&severity=high&id=6a61fd269c2644c7f8fc2fc3 https://radar.offseq.com/threat/cve-2026-65480-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-78cd9da1de6e81a1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65480%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20CodexThemes%20TheGem&severity=medium&id=6a61fd269c2644c7f8fc2fc0 https://radar.offseq.com/threat/cve-2026-65479-cwe-862-missing-authorization-in-mvp-themes-reviewer-37eeff2fc292cbbf 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65479%3A%20CWE-862%20Missing%20Authorization%20in%20MVP%20Themes%20Reviewer&severity=medium&id=6a61fd269c2644c7f8fc2fbd https://radar.offseq.com/threat/cve-2026-65478-cwe-862-missing-authorization-in-cridiostudio-listingpro-1ba47e4c760a3b60 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65478%3A%20CWE-862%20Missing%20Authorization%20in%20CridioStudio%20ListingPro&severity=medium&id=6a61fd269c2644c7f8fc2fba https://radar.offseq.com/threat/cve-2026-65477-cwe-98-improper-control-of-filename-for-includerequire-statement-in-php-program-php-474399f4ae30919e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65477%3A%20CWE-98%20Improper%20Control%20of%20Filename%20for%20Include%2FRequire%20Statement%20in%20PHP%20Program%20('PHP%20Remote%20File%20Inclusion')%20in%20Select-Themes%20Tonda%20Core&severity=high&id=6a61fd269c2644c7f8fc2fb7 https://radar.offseq.com/threat/cve-2026-65476-cwe-862-missing-authorization-in-uxper-civi-fdb551c80e829219 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65476%3A%20CWE-862%20Missing%20Authorization%20in%20uxper%20Civi&severity=medium&id=6a61fd269c2644c7f8fc2fb4 https://radar.offseq.com/threat/cve-2026-65474-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-19ad70d58d8fcb24 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65474%3A%20CWE-497%20Exposure%20of%20Sensitive%20System%20Information%20to%20an%20Unauthorized%20Control%20Sphere%20in%20WPManageNinja%20Ninja%20Tables&severity=medium&id=6a61fd259c2644c7f8fc2d1a https://radar.offseq.com/threat/cve-2026-65473-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-5ba1ce8175bab307 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65473%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Nexcess%20Virtue%2FAscend%2FPinnacle%20Toolkit&severity=medium&id=6a61fd259c2644c7f8fc2d17 https://radar.offseq.com/threat/cve-2026-65472-cwe-862-missing-authorization-in-kit-kit-formerly-convertkit-17a95985b3715c16 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65472%3A%20CWE-862%20Missing%20Authorization%20in%20Kit%20Kit%20(formerly%20ConvertKit)&severity=medium&id=6a61fd259c2644c7f8fc2d14 https://radar.offseq.com/threat/cve-2026-65471-cwe-352-cross-site-request-forgery-csrf-in-avada-studio-avada-core-f1e19172d275ec0b 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65471%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20Avada%20Studio%20Avada%20Core&severity=critical&id=6a61fd259c2644c7f8fc2d11 https://radar.offseq.com/threat/cve-2026-65470-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-5c6b0d7cc3ecb6dc 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65470%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20WPManageNinja%20Fluent%20Support&severity=medium&id=6a61fd259c2644c7f8fc2d0e https://radar.offseq.com/threat/cve-2026-65469-cwe-862-missing-authorization-in-strategy11-team-awp-classifieds-5c1245507d97675a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65469%3A%20CWE-862%20Missing%20Authorization%20in%20Strategy11%20Team%20AWP%20Classifieds&severity=medium&id=6a61fd259c2644c7f8fc2d0b https://radar.offseq.com/threat/cve-2026-65468-cwe-862-missing-authorization-in-crocoblock-jetimpex-inc-jetbooking-f5a5d0838dae0ce4 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65468%3A%20CWE-862%20Missing%20Authorization%20in%20Crocoblock.%20Jetimpex%20Inc.%20JetBooking&severity=medium&id=6a61fd259c2644c7f8fc2d08 https://radar.offseq.com/threat/cve-2026-65467-cwe-918-server-side-request-forgery-ssrf-in-crocoblock-jetimpex-inc-jetengine-4879ede463acf758 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65467%3A%20CWE-918%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20Crocoblock.%20Jetimpex%20Inc.%20JetEngine&severity=medium&id=6a61fd259c2644c7f8fc2d05 https://radar.offseq.com/threat/cve-2026-65466-cwe-918-server-side-request-forgery-ssrf-in-crocoblock-jetimpex-inc-jetbooking-2891466445f3c9e1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65466%3A%20CWE-918%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20Crocoblock.%20Jetimpex%20Inc.%20JetBooking&severity=medium&id=6a61fd259c2644c7f8fc2d02 https://radar.offseq.com/threat/cve-2026-65465-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-dc3309cbb872abdf 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65465%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Crocoblock.%20Jetimpex%20Inc.%20JetElements%20For%20Elementor&severity=medium&id=6a61fd259c2644c7f8fc2cff https://radar.offseq.com/threat/cve-2026-65464-cwe-352-cross-site-request-forgery-csrf-in-nexcess-givewp-e03086fb1bd9be24 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65464%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20Nexcess%20GiveWP&severity=medium&id=6a61fd249c2644c7f8fc2c7e https://radar.offseq.com/threat/cve-2026-65463-cwe-639-authorization-bypass-through-user-controlled-key-in-masteriyo-masteriyo-lms-68cc9c0ddaffd600 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65463%3A%20CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20masteriyo%20Masteriyo%20-%20LMS&severity=medium&id=6a61fd249c2644c7f8fc2c7b https://radar.offseq.com/threat/cve-2026-65462-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-5f25fe6824c9f947 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65462%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20Uncanny%20Owl%20Uncanny%20Automator&severity=high&id=6a61fd249c2644c7f8fc2c78 https://radar.offseq.com/threat/cve-2026-65461-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-web-really-simple-csv-d310fe81e88a7450 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-65461%3A%20CWE-434%20Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type%20in%20Web%E3%81%AE%E7%9B%B8%E8%AB%87%E6%89%80%20Really%20Simple%20CSV%20Importer&severity=critical&id=6a61fd249c2644c7f8fc2c75 https://radar.offseq.com/threat/cve-2026-65460-cwe-352-cross-site-request-forgery-csrf-in-zarinpal-zarinpal-gateway-695cd8e82a27b388 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65460%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20zarinpal%20Zarinpal%20Gateway&severity=medium&id=6a61fd249c2644c7f8fc2c72 https://radar.offseq.com/threat/cve-2026-65458-cwe-497-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-in-5016bccd15fa62b1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65458%3A%20CWE-497%20Exposure%20of%20Sensitive%20System%20Information%20to%20an%20Unauthorized%20Control%20Sphere%20in%20Chouby%20Polylang&severity=medium&id=6a61fd249c2644c7f8fc2c6f https://radar.offseq.com/threat/cve-2026-65457-cwe-862-missing-authorization-in-yoomoney-kassa-woocommerce-96eb11dd7dbef75a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65457%3A%20CWE-862%20Missing%20Authorization%20in%20yoomoney%20%D0%AEKassa%20%D0%B4%D0%BB%D1%8F%20WooCommerce&severity=medium&id=6a61fd249c2644c7f8fc2c6c https://radar.offseq.com/threat/cve-2026-65456-cwe-639-authorization-bypass-through-user-controlled-key-in-pickplugins-product-slider-103257790ad4adf9 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65456%3A%20CWE-639%20Authorization%20Bypass%20Through%20User-Controlled%20Key%20in%20PickPlugins%20Product%20Slider%20for%20WooCommerce&severity=medium&id=6a61fd249c2644c7f8fc2c69 https://radar.offseq.com/threat/cve-2026-65454-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a63b1698ca45b3e6 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65454%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20ExpressTech%20Systems%20Quiz%20And%20Survey%20Master&severity=high&id=6a61fd249c2644c7f8fc2c66 https://radar.offseq.com/threat/cve-2026-65453-cwe-862-missing-authorization-in-motovnet-ebook-store-29081b959f9d5641 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65453%3A%20CWE-862%20Missing%20Authorization%20in%20motov.net%20Ebook%20Store&severity=medium&id=6a61fd249c2644c7f8fc2c63 https://radar.offseq.com/threat/cve-2026-65452-cwe-862-missing-authorization-in-motovnet-ebook-store-5e46c74fa2fe3fc2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65452%3A%20CWE-862%20Missing%20Authorization%20in%20motov.net%20Ebook%20Store&severity=medium&id=6a61fd229c2644c7f8fc2c3c https://radar.offseq.com/threat/cve-2026-65451-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-c1cda083a57c3558 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65451%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20RomanCode%20MapSVG&severity=high&id=6a61fd229c2644c7f8fc2c39 https://radar.offseq.com/threat/cve-2026-65450-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-ee512b51cc90bac9 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65450%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20RomanCode%20MapSVG&severity=high&id=6a61fd229c2644c7f8fc2c36 https://radar.offseq.com/threat/cve-2026-65449-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-dfba7732b9c2334d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65449%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20RomanCode%20MapSVG&severity=medium&id=6a61fd229c2644c7f8fc2c33 https://radar.offseq.com/threat/cve-2026-61981-cwe-352-cross-site-request-forgery-csrf-in-quantumcloud-simple-link-directory-pro-5d29afb192d9824f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-61981%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20QuantumCloud%20Simple%20Link%20Directory%20Pro&severity=medium&id=6a61fd229c2644c7f8fc2c30 https://radar.offseq.com/threat/cve-2026-61973-cwe-862-missing-authorization-in-woolentor-shoplentor-pro-c63e7b7d4dd89d1e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-61973%3A%20CWE-862%20Missing%20Authorization%20in%20WooLentor%20ShopLentor%20Pro&severity=medium&id=6a61fd229c2644c7f8fc2c2d https://radar.offseq.com/threat/cve-2026-61972-cwe-862-missing-authorization-in-woolentor-shoplentor-pro-a5ebb9e0385865ef 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-61972%3A%20CWE-862%20Missing%20Authorization%20in%20WooLentor%20ShopLentor%20Pro&severity=medium&id=6a61fd229c2644c7f8fc2c2a https://radar.offseq.com/threat/cve-2026-61951-cwe-266-incorrect-privilege-assignment-in-themetechmount-truebooker-979fdcde8477d799 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-61951%3A%20CWE-266%20Incorrect%20Privilege%20Assignment%20in%20themetechmount%20TrueBooker&severity=critical&id=6a61fd229c2644c7f8fc2c27 https://radar.offseq.com/threat/cve-2026-61950-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-f0550f440377c377 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-61950%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20themetechmount%20TrueBooker&severity=critical&id=6a61fd229c2644c7f8fc2c24 https://radar.offseq.com/threat/cve-2026-61948-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-eed4fa6db43ee19b 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-61948%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20Shahjada%20WPDM%20%E2%80%93%20Premium%20Packages&severity=critical&id=6a61fd229c2644c7f8fc2c21 https://radar.offseq.com/threat/cve-2026-61947-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-3770e56b99080e0a 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-61947%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20WPVibes%20Form%20Vibes%20%E2%80%93%20Database%20Manager%20for%20Forms&severity=high&id=6a61fd219c2644c7f8fc2bd4 https://radar.offseq.com/threat/cve-2026-61943-cwe-862-missing-authorization-in-shahjada-wpdm-premium-packages-cc9864dc988028e8 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-61943%3A%20CWE-862%20Missing%20Authorization%20in%20Shahjada%20WPDM%20%E2%80%93%20Premium%20Packages&severity=high&id=6a61fd219c2644c7f8fc2bd1 https://radar.offseq.com/threat/cve-2026-59555-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-02d45e5cc1f2453e 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-59555%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20Roland%20Barker%20Participants%20Database&severity=critical&id=6a61fd219c2644c7f8fc2bce https://radar.offseq.com/threat/cve-2026-59547-cwe-862-missing-authorization-in-easy-payment-payment-gateway-for-paypal-on-woocommerce-8b8620e8968f5a9c 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-59547%3A%20CWE-862%20Missing%20Authorization%20in%20Easy%20Payment%20Payment%20Gateway%20for%20PayPal%20on%20WooCommerce&severity=high&id=6a61fd219c2644c7f8fc2bcb https://radar.offseq.com/threat/cve-2026-59545-cwe-288-authentication-bypass-using-an-alternate-path-or-channel-in-miniorange-21577a0144b326c6 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-59545%3A%20CWE-288%20Authentication%20Bypass%20Using%20an%20Alternate%20Path%20or%20Channel%20in%20miniOrange%20miniOrange%20Discord%20Integration&severity=high&id=6a61fd219c2644c7f8fc2bc8 https://radar.offseq.com/threat/cve-2026-59544-cwe-502-deserialization-of-untrusted-data-in-thrive-themes-coupon-thrive-quiz-builder-0b35d1ce7d899710 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-59544%3A%20CWE-502%20Deserialization%20of%20Untrusted%20Data%20in%20Thrive%20Themes%20Coupon%20Thrive%20Quiz%20Builder&severity=critical&id=6a61fd219c2644c7f8fc2bc5 https://radar.offseq.com/threat/cve-2026-59543-cwe-94-improper-control-of-generation-of-code-code-injection-in-wplake-advanced-views-66e2f4e46ba037a8 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-59543%3A%20CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')%20in%20WPLake%20Advanced%20Views&severity=critical&id=6a61fd219c2644c7f8fc2bc2 https://radar.offseq.com/threat/cve-2026-59542-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-wp-560df87efebda1be 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-59542%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20WP%20Chill%20Kali%20Forms&severity=high&id=6a61fd219c2644c7f8fc2bbf https://radar.offseq.com/threat/cve-2026-59541-cwe-266-incorrect-privilege-assignment-in-hakan-ozevin-wp-base-booking-1ad6ffd54b092430 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-59541%3A%20CWE-266%20Incorrect%20Privilege%20Assignment%20in%20Hakan%20Ozevin%20WP%20BASE%20Booking&severity=high&id=6a61fd219c2644c7f8fc2bbc https://radar.offseq.com/threat/cve-2026-59540-cwe-266-incorrect-privilege-assignment-in-cozy-vision-technologies-pvt-ltd-sms-alert-f467e645d9c8e488 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-59540%3A%20CWE-266%20Incorrect%20Privilege%20Assignment%20in%20Cozy%20Vision%20Technologies%20Pvt.%20Ltd.%20SMS%20Alert%20Order%20Notifications&severity=critical&id=6a61fd219c2644c7f8fc2bb9 https://radar.offseq.com/threat/cve-2026-59526-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-1a0a731a275f101d 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-59526%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20RomanCode%20MapSVG&severity=critical&id=6a61fd1f9c2644c7f8fc2a7c https://radar.offseq.com/threat/cve-2026-59525-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-104e83fd1b732265 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-59525%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20Roland%20Barker%20Participants%20Database&severity=critical&id=6a61fd1f9c2644c7f8fc2a79 https://radar.offseq.com/threat/cve-2026-59524-cwe-288-authentication-bypass-using-an-alternate-path-or-channel-in-sandhills-46cb03231326e310 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-59524%3A%20CWE-288%20Authentication%20Bypass%20Using%20an%20Alternate%20Path%20or%20Channel%20in%20Sandhills%20Development%2C%20LLC%20Easy%20Digital%20Downloads&severity=medium&id=6a61fd1f9c2644c7f8fc2a76 https://radar.offseq.com/threat/cve-2026-59522-cwe-862-missing-authorization-in-wedevs-wp-erp-9a0363fc9294bd4d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-59522%3A%20CWE-862%20Missing%20Authorization%20in%20weDevs%20WP%20ERP&severity=medium&id=6a61fd1f9c2644c7f8fc2a73 https://radar.offseq.com/threat/cve-2026-59517-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-e989ba0b8f430786 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-59517%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20hassantafreshi%20Easy%20Form%20Builder&severity=high&id=6a61fd1f9c2644c7f8fc2a70 https://radar.offseq.com/threat/cve-2026-59514-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-2d3a5112032e9677 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-59514%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20MightyNetworks%20vs%20BuddyBoss%20Buddyboss%20Platform&severity=critical&id=6a61fd1f9c2644c7f8fc2a6d https://radar.offseq.com/threat/cve-2026-59513-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-523920a77f2e6cc1 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-59513%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20masteriyo%20Masteriyo%20-%20LMS&severity=medium&id=6a61fd1f9c2644c7f8fc2a6a https://radar.offseq.com/threat/cve-2026-59512-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-e1aa3765c64e3631 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-59512%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20PI%20Web%20Solution%20Product%20Enquiry%20for%20WooCommerce&severity=high&id=6a61fd1f9c2644c7f8fc2a67 https://radar.offseq.com/threat/cve-2026-57808-cwe-862-missing-authorization-in-saad-iqbal-wp-easypay-595a4e5cfc17697a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-57808%3A%20CWE-862%20Missing%20Authorization%20in%20Saad%20Iqbal%20WP%20EasyPay&severity=medium&id=6a61fd1f9c2644c7f8fc2a64 https://radar.offseq.com/threat/cve-2026-57785-cwe-352-cross-site-request-forgery-csrf-in-apustheme-apuslisting-4518c663d10f0fbc 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57785%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20ApusTheme%20ApusListing&severity=high&id=6a61fd1f9c2644c7f8fc2a61 https://radar.offseq.com/threat/cve-2026-57784-cwe-352-cross-site-request-forgery-csrf-in-ninja-forms-ninja-forms-file-uploads-86a8d1fad55f4d64 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-57784%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20Ninja%20Forms%20Ninja%20Forms%20File%20Uploads%20Extension&severity=critical&id=6a61fd1e9c2644c7f8fc2a0c https://radar.offseq.com/threat/cve-2026-57769-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-781b4bdb31188e3b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57769%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20ThemeGoods%20Grand%20Photography&severity=high&id=6a61fd1e9c2644c7f8fc2a09 https://radar.offseq.com/threat/cve-2026-57767-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-094c94b7dc6b07e8 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57767%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20CodeCabin.io%20WP%20Google%20Maps%20Pro&severity=high&id=6a61fd1e9c2644c7f8fc2a06 https://radar.offseq.com/threat/cve-2026-57735-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-99eceb6612df97e5 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57735%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Soflyy%20Breakdance&severity=high&id=6a61fd1e9c2644c7f8fc2a03 https://radar.offseq.com/threat/cve-2026-57717-cwe-862-missing-authorization-in-knitpay-knit-pay-ec794382b2ed79d2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-57717%3A%20CWE-862%20Missing%20Authorization%20in%20knitpay%20Knit%20Pay&severity=medium&id=6a61fd1e9c2644c7f8fc2a00 https://radar.offseq.com/threat/cve-2026-57716-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-999b23a93aabe705 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-57716%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20videowhisper%20Broadcast%20Live%20Video&severity=medium&id=6a61fd1e9c2644c7f8fc29fd https://radar.offseq.com/threat/cve-2026-57704-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-7f5439a34551acd7 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57704%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20StoreApps%20Smart%20Manager&severity=high&id=6a61fd1e9c2644c7f8fc29fa https://radar.offseq.com/threat/cve-2026-57703-cwe-862-missing-authorization-in-sunshinephotocart-sunshine-photo-cart-73e43d9c88c3949b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-57703%3A%20CWE-862%20Missing%20Authorization%20in%20sunshinephotocart%20Sunshine%20Photo%20Cart&severity=medium&id=6a61fd1e9c2644c7f8fc29f7 https://radar.offseq.com/threat/cve-2026-57701-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-85b468dc85a2f409 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57701%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20WebCodingPlace%20Real%20Estate%20Manager%20Pro&severity=high&id=6a61fd1e9c2644c7f8fc29f4 https://radar.offseq.com/threat/cve-2026-57699-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-aae98d8e9d271c12 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57699%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20bqworks%20Slider%20Pro&severity=high&id=6a61fd1e9c2644c7f8fc29f1 https://radar.offseq.com/threat/cve-2026-57696-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-6403738c8e904584 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57696%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20videowhisper%20Picture%20Gallery&severity=high&id=6a61fd1c9c2644c7f8fc2452 https://radar.offseq.com/threat/cve-2026-57428-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-0359fc5682a9a572 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57428%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20BoldGrid%20Sprout%20Clients&severity=high&id=6a61fd1c9c2644c7f8fc244f https://radar.offseq.com/threat/cve-2026-57427-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-f1f202134d2e460c 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57427%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Download%20Monitor%20Download%20Monitor%20-%20WPForms%20Lock&severity=high&id=6a61fd1c9c2644c7f8fc244c https://radar.offseq.com/threat/cve-2026-57425-cwe-862-missing-authorization-in-wpdesk-autopay-dla-woocommerce-937502ce7acaee5a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-57425%3A%20CWE-862%20Missing%20Authorization%20in%20wpdesk%20Autopay%20dla%20WooCommerce&severity=medium&id=6a61fd1c9c2644c7f8fc2449 https://radar.offseq.com/threat/cve-2026-57397-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-0245b9f7d80dab11 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57397%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20ThimPress.%20Coaching&severity=high&id=6a61fd1c9c2644c7f8fc2446 https://radar.offseq.com/threat/cve-2026-57384-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-5e9a7bdc16f6b5e4 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-57384%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Membership%20Software%20WishList%20Member%20X&severity=medium&id=6a61fd1c9c2644c7f8fc2443 https://radar.offseq.com/threat/cve-2026-57374-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-894d7f69f2b35847 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57374%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Wisetr%20INC.%20Funnel%20Kit%20Funnel%20Builder%20PRO&severity=high&id=6a61fd1c9c2644c7f8fc2440 https://radar.offseq.com/threat/cve-2026-57373-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-cf17f70aa0f55654 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-57373%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Wisetr%20INC.%20Funnel%20Kit%20Funnel%20Builder%20PRO&severity=medium&id=6a61fd1c9c2644c7f8fc243d https://radar.offseq.com/threat/cve-2026-57370-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-8bf2148badaeb888 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57370%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20CODEPRESS%20IT%20Solutions%20LLC%20Visitor%20Traffic%20Real%20Time%20Statistics%20Pro&severity=high&id=6a61fd1c9c2644c7f8fc243a https://radar.offseq.com/threat/cve-2026-57367-cwe-862-missing-authorization-in-wp-booking-system-wp-booking-system-54a4d31d200b7487 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-57367%3A%20CWE-862%20Missing%20Authorization%20in%20WP%20Booking%20System%20.%20WP%20Booking%20System&severity=high&id=6a61fd1c9c2644c7f8fc2437 https://radar.offseq.com/threat/cve-2026-27423-cwe-862-missing-authorization-in-roland-barker-participants-database-b9f2c50c1b8ea096 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27423%3A%20CWE-862%20Missing%20Authorization%20in%20Roland%20Barker%20Participants%20Database&severity=medium&id=6a61fd1a9c2644c7f8fc240f https://radar.offseq.com/threat/cve-2026-27422-cwe-862-missing-authorization-in-bplugins-yt-player-c65817e3bf39105d 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27422%3A%20CWE-862%20Missing%20Authorization%20in%20bPlugins%20YT%20Player&severity=medium&id=6a61fd1a9c2644c7f8fc240c https://radar.offseq.com/threat/cve-2026-27418-cwe-862-missing-authorization-in-epsiloncool-wp-fast-total-search-1ab38746737ecee8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27418%3A%20CWE-862%20Missing%20Authorization%20in%20Epsiloncool%20WP%20Fast%20Total%20Search&severity=medium&id=6a61fd1a9c2644c7f8fc2409 https://radar.offseq.com/threat/cve-2026-27403-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-61eb90324ce4e48b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27403%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20NerdPress%20Hubbub%20Lite&severity=medium&id=6a61fd1a9c2644c7f8fc2406 https://radar.offseq.com/threat/cve-2026-27399-cwe-862-missing-authorization-in-webwizards-marketking-79c5754dd7025d00 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27399%3A%20CWE-862%20Missing%20Authorization%20in%20WebWizards%20MarketKing&severity=medium&id=6a61fd1a9c2644c7f8fc2403 https://radar.offseq.com/threat/cve-2026-27392-cwe-862-missing-authorization-in-stylemix-ulisting-193226f4203ce6ad 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27392%3A%20CWE-862%20Missing%20Authorization%20in%20Stylemix%20uListing&severity=medium&id=6a61fd1a9c2644c7f8fc2400 https://radar.offseq.com/threat/cve-2026-27391-cwe-862-missing-authorization-in-stylemix-ulisting-4f102579dc3cd8e1 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27391%3A%20CWE-862%20Missing%20Authorization%20in%20Stylemix%20uListing&severity=medium&id=6a61fd1a9c2644c7f8fc23fd https://radar.offseq.com/threat/cve-2026-27377-cwe-862-missing-authorization-in-axiomthemes-quickcal-appointment-booking-calendar-for-84db305642808181 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27377%3A%20CWE-862%20Missing%20Authorization%20in%20axiomthemes%20QuickCal%20-%20Appointment%20Booking%20Calendar%20for%20WordPress&severity=medium&id=6a61fd1a9c2644c7f8fc23fa https://radar.offseq.com/threat/cve-2026-27372-cwe-201-insertion-of-sensitive-information-into-sent-data-in-pepro-dev-group-peprodev-b4854441dbe12ea7 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27372%3A%20CWE-201%20Insertion%20of%20Sensitive%20Information%20Into%20Sent%20Data%20in%20Pepro%20Dev.%20Group%20PeproDev%20Ultimate%20Invoice&severity=medium&id=6a61fd1a9c2644c7f8fc23f7 https://radar.offseq.com/threat/cve-2026-27355-cwe-862-missing-authorization-in-metaphorcreations-ditty-3daa799b7e37c9a3 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-27355%3A%20CWE-862%20Missing%20Authorization%20in%20metaphorcreations%20Ditty&severity=medium&id=6a61fd1a9c2644c7f8fc23f4 https://radar.offseq.com/threat/cve-2026-27064-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-everpress-mailster-f5ea6f51fb0fc026 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-27064%3A%20CWE-434%20Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type%20in%20EverPress%20Mailster&severity=critical&id=6a61fd199c2644c7f8fc2235 https://radar.offseq.com/threat/cve-2026-25466-cwe-862-missing-authorization-in-wpgmaps-wp-go-maps-b6bc2fe98e064077 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-25466%3A%20CWE-862%20Missing%20Authorization%20in%20WPGMaps%20WP%20Go%20Maps&severity=medium&id=6a61fd199c2644c7f8fc2232 https://radar.offseq.com/threat/cve-2026-25427-cwe-862-missing-authorization-in-digitalme-eroom-82ea8fac937a4805 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-25427%3A%20CWE-862%20Missing%20Authorization%20in%20DigitalME%20eRoom&severity=medium&id=6a61fd199c2644c7f8fc222f https://radar.offseq.com/threat/cve-2026-25424-cwe-862-missing-authorization-in-mediavine-mediavine-control-panel-4ff9d4cd0b6a34e9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-25424%3A%20CWE-862%20Missing%20Authorization%20in%20mediavine%20Mediavine%20Control%20Panel&severity=medium&id=6a61fd199c2644c7f8fc222c https://radar.offseq.com/threat/cve-2026-25405-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-3292752cfb5765b9 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-25405%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20DigitalME%20eRoom&severity=high&id=6a61fd199c2644c7f8fc2229 https://radar.offseq.com/threat/cve-2026-24639-cwe-918-server-side-request-forgery-ssrf-in-ronald-huereca-photo-block-6d12a5ed0c929e25 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-24639%3A%20CWE-918%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20Ronald%20Huereca%20Photo%20Block&severity=medium&id=6a61fd199c2644c7f8fc2226 https://radar.offseq.com/threat/cve-2026-24628-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-e9f43c3977dbc13e 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-24628%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Supsystic%20Photo%20Gallery%20by%20Supsystic&severity=medium&id=6a61fd199c2644c7f8fc2223 https://radar.offseq.com/threat/cve-2026-24552-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-163289d3a5d7348e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-24552%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20mischiefmarmot%20Create%20by%20Mediavine&severity=high&id=6a61fd199c2644c7f8fc2220 https://radar.offseq.com/threat/cve-2026-24537-cwe-352-cross-site-request-forgery-csrf-in-alex-volkov-wp-accessibility-helper-wah-2c7d3104d4441af7 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-24537%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20Alex%20Volkov%20WP%20Accessibility%20Helper%20(WAH)&severity=medium&id=6a61fd199c2644c7f8fc221d https://radar.offseq.com/threat/cve-2025-68081-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-e6d36d3df54a4ecf 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2025-68081%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20Lester%20Chan%20WP-Polls&severity=medium&id=6a61fd199c2644c7f8fc221a https://radar.offseq.com/threat/upbound-group-says-data-breach-led-to-13-million-in-fraudulent-contract-losses-13decc7a856e97ce 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Upbound%20Group%20Says%20Data%20Breach%20Led%20to%20%2413%20Million%20in%20Fraudulent%20Contract%20Losses&severity=medium&id=6a61f2569c2644c7f8ec545c https://radar.offseq.com/threat/cve-2026-64611-loop-with-unreachable-exit-condition-infinite-loop-in-red-hat-red-hat-enterprise-linux-ac21615839034e4e 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64611%3A%20Loop%20with%20Unreachable%20Exit%20Condition%20('Infinite%20Loop')%20in%20Red%20Hat%20Red%20Hat%20Enterprise%20Linux%2010&severity=high&id=6a61f5fe9c2644c7f8f13001 https://radar.offseq.com/threat/cve-2026-16745-origin-validation-error-in-red-hat-red-hat-openshift-ai-rhoai-841904f6cf260b8b 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16745%3A%20Origin%20Validation%20Error%20in%20Red%20Hat%20Red%20Hat%20OpenShift%20AI%20(RHOAI)&severity=high&id=6a61f5fe9c2644c7f8f12ffd https://radar.offseq.com/threat/banana-rat-evolves-3c6a9038a60d02da 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Banana%20RAT%20Evolves&severity=medium&id=6a627b6d9c2644c7f8ac78d0 https://radar.offseq.com/threat/can-you-help-me-on-research-f2982d2e355117fb 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Can%20you%20help%20me%20on%20research&severity=medium&id=6a6203e09c2644c7f80619bf https://radar.offseq.com/threat/chaos-ransomwares-msarat-living-off-the-browser-to-build-a-covert-c2-channel-586143cde7651f57 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Chaos%20ransomware's%20msaRAT%3A%20Living%20off%20the%20browser%20to%20build%20a%20covert%20C2%20channel&severity=medium&id=6a61e6c79c2644c7f8d7caf5 https://radar.offseq.com/threat/preview-cisco-talos-at-black-hat-usa-2026-a8715adfed8eaf09 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Preview%3A%20Cisco%20Talos%20at%20Black%20Hat%20USA%202026&severity=medium&id=6a61e6c79c2644c7f8d7caf8 https://radar.offseq.com/threat/new-msarat-malware-uses-chrome-edge-browsers-to-route-c2-traffic-09e1348d15fd1400 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=New%20msaRAT%20malware%20uses%20Chrome%2C%20Edge%20browsers%20to%20route%20C2%20traffic&severity=medium&id=6a61eb589c2644c7f8e18ca5 https://radar.offseq.com/threat/cve-2026-15015-cwe-862-missing-authorization-in-cascadiawebservices-mountdev-ai-mcp-connector-for-7f3334e71801a208 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-15015%3A%20CWE-862%20Missing%20Authorization%20in%20cascadiawebservices%20MountDev%20AI%20MCP%20Connector%20for%20WordPress&severity=critical&id=6a61eb819c2644c7f8e1d36f https://radar.offseq.com/threat/cve-2026-15394-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-6cb1c931fcad9f03 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15394%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20mahethekiller%20Header%20Footer%20Script%20Adder&severity=medium&id=6a61eb819c2644c7f8e1d38d https://radar.offseq.com/threat/cve-2026-15448-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-c22ee2209ea2d90b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15448%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20tickera%20Tickera%20%E2%80%93%20Sell%20Tickets%20%26%20Manage%20Events&severity=medium&id=6a61eb819c2644c7f8e1d394 https://radar.offseq.com/threat/cve-2026-13119-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-e041adc6a858db98 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-13119%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20roundupwp%20Registrations%20for%20the%20Events%20Calendar%20%E2%80%93%20Event%20Registration%20Plugin&severity=medium&id=6a61eb819c2644c7f8e1d368 https://radar.offseq.com/threat/cve-2026-15786-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-f3a96370a9982d78 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15786%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20gowebsmarty%20WP%20Encryption%20%E2%80%93%20Lifetime%20Free%20SSL%20Cert%20%26%20HTTPS%2C%20Force%20SSL%20%2F%20HTTPS%20Redirect%2C%20SSL%20Security&severity=medium&id=6a61eb819c2644c7f8e1d39b https://radar.offseq.com/threat/cve-2026-13009-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-4ff08772fb6bd99d 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-13009%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20wupsales%20AI%20Copilot%20%E2%80%93%20Content%20Generator&severity=medium&id=6a61eb819c2644c7f8e1d360 https://radar.offseq.com/threat/cve-2026-15017-cwe-269-improper-privilege-management-in-mdjm-mdjm-event-management-d2a35e90a7f3e069 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-15017%3A%20CWE-269%20Improper%20Privilege%20Management%20in%20mdjm%20MDJM%20Event%20Management&severity=high&id=6a61eb819c2644c7f8e1d377 https://radar.offseq.com/threat/cve-2026-15348-cwe-287-improper-authentication-in-codename065-premium-packages-sell-digital-products-6f62c88595a4cb9b 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15348%3A%20CWE-287%20Improper%20Authentication%20in%20codename065%20Premium%20Packages%20%E2%80%93%20Sell%20Digital%20Products%20Securely&severity=medium&id=6a61eb819c2644c7f8e1d37f https://radar.offseq.com/threat/cve-2026-65758-cwe-284-improper-access-control-in-tassosgr-convert-forms-extension-for-joomla-f56cd41adc2005ef 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65758%3A%20CWE-284%20Improper%20Access%20Control%20in%20tassos.gr%20Convert%20Forms%20extension%20for%20Joomla&severity=high&id=6a61eb819c2644c7f8e1d3a2 https://radar.offseq.com/threat/microsoft-working-to-fix-exchange-online-mailbox-quarantine-issue-5dc23d6531026d7a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Microsoft%20working%20to%20fix%20Exchange%20Online%20mailbox%20quarantine%20issue&severity=medium&id=6a61dd3e9c2644c7f8c8db80 https://radar.offseq.com/threat/cve-2026-65713-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-in-regularlabscom-d084b63ec78517e7 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65713%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20in%20regularlabs.com%20Modals%20Pro%20extension%20for%20Joomla&severity=medium&id=6a61dd679c2644c7f8c8ed47 https://radar.offseq.com/threat/cve-2026-64873-cwe-918-server-side-request-forgery-ssrf-in-regularlabscom-cache-cleaner-pro-extension-c6727e211f02730e 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-64873%3A%20CWE-918%3A%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20regularlabs.com%20Cache%20Cleaner%20Pro%20extension%20for%20Joomla&severity=critical&id=6a61dd669c2644c7f8c8ecba https://radar.offseq.com/threat/cve-2026-64871-cwe-352-cross-site-request-forgery-csrf-in-regularlabscom-cache-cleaner-extension-for-620fa9d693672949 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-64871%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20regularlabs.com%20Cache%20Cleaner%20extension%20for%20Joomla&severity=medium&id=6a61dd669c2644c7f8c8ecb4 https://radar.offseq.com/threat/cve-2026-65757-cwe-352-cross-site-request-forgery-csrf-in-regularlabscom-modules-anywhere-extension-239daa7d1be131dd 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65757%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20regularlabs.com%20Modules%20Anywhere%20extension%20for%20Joomla&severity=high&id=6a61dd679c2644c7f8c8ed6e https://radar.offseq.com/threat/cve-2026-65755-cwe-524-use-of-cache-containing-sensitive-information-in-regularlabscom-articles-0adfcc1f343407c2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65755%3A%20CWE-524%20Use%20of%20Cache%20Containing%20Sensitive%20Information%20in%20regularlabs.com%20Articles%20Anywhere%20extension%20for%20Joomla&severity=medium&id=6a61dd679c2644c7f8c8ed5c https://radar.offseq.com/threat/cve-2026-65754-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-in-regularlabscom-2a937b062226202a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65754%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20in%20regularlabs.com%20ReReplacer%20PRo%20extension%20for%20Joomla&severity=medium&id=6a61dd679c2644c7f8c8ed4c https://radar.offseq.com/threat/cve-2026-64875-cwe-290-authentication-bypass-by-spoofing-in-regularlabscom-geoip-extension-for-joomla-c1cafde1641d9926 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-64875%3A%20CWE-290%20Authentication%20Bypass%20by%20Spoofing%20in%20regularlabs.com%20GeoIP%20extension%20for%20Joomla&severity=medium&id=6a61dd669c2644c7f8c8ecc0 https://radar.offseq.com/threat/cve-2026-64876-cwe-352-cross-site-request-forgery-csrf-in-regularlabscom-geoip-extension-for-joomla-63894f5af6641cc2 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64876%3A%20CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)%20in%20regularlabs.com%20GeoIP%20extension%20for%20Joomla&severity=high&id=6a61dd669c2644c7f8c8ecc3 https://radar.offseq.com/threat/cve-2026-64872-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-in-regularlabscom-510e274ae4b4781b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-64872%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20in%20regularlabs.com%20Cache%20Cleaner%20Pro%20extension%20for%20Joomla&severity=medium&id=6a61dd669c2644c7f8c8ecb7 https://radar.offseq.com/threat/cve-2026-65712-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-in-regularlabscom-019c02fa7757a321 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65712%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20in%20regularlabs.com%20CDN%20for%20Joomla%20Pro%20extension%20for%20Joomla&severity=medium&id=6a61dd679c2644c7f8c8ed44 https://radar.offseq.com/threat/cve-2026-65756-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-10b445734232daf8 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-65756%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20regularlabs.com%20Keyboard%20Shortcuts%20extension%20for%20Joomla&severity=medium&id=6a61dd679c2644c7f8c8ed69 https://radar.offseq.com/threat/cve-2026-64874-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-regularlabscom-af70e0389cc80da5 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64874%3A%20CWE-200%3A%20Exposure%20of%20Sensitive%20Information%20to%20an%20Unauthorized%20Actor%20in%20regularlabs.com%20Cache%20Cleaner%20Pro%20extension%20for%20Joomla&severity=high&id=6a61dd669c2644c7f8c8ecbd https://radar.offseq.com/threat/cve-2026-64799-cwe-918-server-side-request-forgery-ssrf-in-regularlabscom-articles-anywhere-pro-2052910ba460b758 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-64799%3A%20CWE-918%3A%20Server-Side%20Request%20Forgery%20(SSRF)%20in%20regularlabs.com%20Articles%20Anywhere%20Pro%20extension%20for%20Joomla&severity=high&id=6a61dd669c2644c7f8c8ecb1 https://radar.offseq.com/threat/cve-2026-65430-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-regularlabscom-17e2b0d7339ce7df 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65430%3A%20CWE-200%3A%20Exposure%20of%20Sensitive%20Information%20to%20an%20Unauthorized%20Actor%20in%20regularlabs.com%20GeoIP%20extension%20for%20Joomla&severity=high&id=6a61dd669c2644c7f8c8ecc6 https://radar.offseq.com/threat/cve-2026-65431-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-in-regularlabscom-60fd520930436ba1 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-65431%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20in%20regularlabs.com%20GeoIP%20extension%20for%20Joomla&severity=high&id=6a61dd669c2644c7f8c8ecc9 https://radar.offseq.com/threat/cisa-issues-emergency-directive-to-patch-critical-remote-code-execution-vulnerability-in-langflow-ai-bf301d9447267687 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CISA%20Issues%20Emergency%20Directive%20to%20Patch%20Critical%20Remote%20Code%20Execution%20Vulnerability%20in%20Langflow%20AI%20Framework&severity=high&id=6a61d7379c2644c7f8bdfe1f https://radar.offseq.com/threat/cve-2026-15011-cwe-94-improper-control-of-generation-of-code-code-injection-in-emarket-design-customer-c4b7a86635adcee6 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-15011%3A%20CWE-94%20Improper%20Control%20of%20Generation%20of%20Code%20('Code%20Injection')%20in%20emarket-design%20Customer%20Support%20Ticket%20System%20%26%20Helpdesk&severity=critical&id=6a61dd649c2644c7f8c8ebb4 https://radar.offseq.com/threat/cve-2026-14282-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-rtcamp-godam-organize-3db9b98bdd320248 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-14282%3A%20CWE-434%20Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type%20in%20rtcamp%20GoDAM%20%E2%80%93%20Organize%20WordPress%20Media%20Library%20%26%20File%20Manager%20with%20Unlimited%20Folders%20for%20Images%2C%20Videos%20%26%20more&severity=critical&id=6a61dd649c2644c7f8c8eb9e https://radar.offseq.com/threat/cve-2026-15794-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-d549e5fb4477cfb5 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15794%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20berocket%20Grid%2FList%20View%20for%20WooCommerce&severity=medium&id=6a61dd649c2644c7f8c8ebd8 https://radar.offseq.com/threat/cve-2026-14481-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-c2af11eefed41a67 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-14481%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20equalizedigital%20Equalize%20Digital%20Accessibility%20Checker%20%E2%80%93%20WCAG%2C%20ADA%2C%20EAA%20and%20Section%20508%20compliance&severity=medium&id=6a61dd649c2644c7f8c8eba8 https://radar.offseq.com/threat/cve-2026-15906-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-e0dded6e98eccb33 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15906%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20codename065%20Premium%20Packages%20%E2%80%93%20Sell%20Digital%20Products%20Securely&severity=medium&id=6a61dd649c2644c7f8c8ebeb https://radar.offseq.com/threat/cve-2026-15646-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-9bbb3c90ce97ff90 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15646%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20berocket%20Brands%20for%20WooCommerce&severity=medium&id=6a61dd649c2644c7f8c8ebc3 https://radar.offseq.com/threat/cve-2026-15647-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-8b51feb3264a2f41 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15647%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20berocket%20Brands%20for%20WooCommerce&severity=medium&id=6a61dd649c2644c7f8c8ebca https://radar.offseq.com/threat/cve-2026-15761-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-5848561cc2a97d20 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15761%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20tickera%20Tickera%20%E2%80%93%20Sell%20Tickets%20%26%20Manage%20Events&severity=medium&id=6a61dd649c2644c7f8c8ebd0 https://radar.offseq.com/threat/cve-2026-15827-cwe-862-missing-authorization-in-ataurr-gutenkit-page-builder-blocks-patterns-and-0c6bd057e26367fb 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15827%3A%20CWE-862%20Missing%20Authorization%20in%20ataurr%20GutenKit%20%E2%80%93%20Page%20Builder%20Blocks%2C%20Patterns%2C%20and%20Templates%20for%20Gutenberg%20Block%20Editor&severity=medium&id=6a61dd649c2644c7f8c8ebdf https://radar.offseq.com/threat/cve-2026-15404-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-44df8695e3ff029a 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-15404%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20niklaslindemann%20Bulk%20Page%20Generator%20%E2%80%93%20LPagery&severity=medium&id=6a61dd649c2644c7f8c8ebbc https://radar.offseq.com/threat/cve-2026-16078-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-48276e673c739e5f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16078%3A%20CWE-22%20Improper%20Limitation%20of%20a%20Pathname%20to%20a%20Restricted%20Directory%20('Path%20Traversal')%20in%20kilbot%20WCPOS%20%E2%80%93%20Point%20of%20Sale%20(POS)%20plugin%20for%20WooCommerce&severity=medium&id=6a61dd669c2644c7f8c8eca9 https://radar.offseq.com/threat/cve-2026-16723-cwe-20-improper-input-validation-in-alibaba-fastjson-939ed165aac7ce81 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-16723%3A%20CWE-20%20Improper%20input%20validation%20in%20Alibaba%20Fastjson&severity=critical&id=6a61d2cf9c2644c7f8b6a262 https://radar.offseq.com/threat/check-point-warns-of-smartconsole-zero-day-exploited-in-attacks-794f064eecea4f46 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Check%20Point%20warns%20of%20SmartConsole%20zero-day%20exploited%20in%20attacks&severity=medium&id=6a61cf2e9c2644c7f8b164e5 https://radar.offseq.com/threat/cve-2026-52688-insufficient-verification-of-data-authenticity-in-powerdns-recursor-5a85d8c6199c21d1 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-52688%3A%20Insufficient%20Verification%20of%20Data%20Authenticity%20in%20PowerDNS%20Recursor&severity=high&id=6a61d2cf9c2644c7f8b6a26b https://radar.offseq.com/threat/cve-2026-52686-insufficient-verification-of-data-authenticity-in-powerdns-recursor-5473d7d7dcf7d4ba 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-52686%3A%20Insufficient%20Verification%20of%20Data%20Authenticity%20in%20PowerDNS%20Recursor&severity=low&id=6a61d2cf9c2644c7f8b6a268 https://radar.offseq.com/threat/cve-2024-58330-cwe-284-improper-access-control-in-bosch-camera-firmware-f88c3de1084bfe81 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2024-58330%3A%20CWE-284%20Improper%20Access%20Control%20in%20Bosch%20Camera%20Firmware&severity=high&id=6a61d2cf9c2644c7f8b6a25c https://radar.offseq.com/threat/cve-2024-58023-cwe-312-cleartext-storage-of-sensitive-information-in-bosch-bosch-configuration-manager-ac0d1cdb3bbc7579 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2024-58023%3A%20CWE-312%20Cleartext%20Storage%20of%20Sensitive%20Information%20in%20Bosch%20Bosch%20Configuration%20Manager&severity=high&id=6a61d2cf9c2644c7f8b6a259 https://radar.offseq.com/threat/cve-2026-52684-time-of-check-time-of-use-toctou-race-condition-in-powerdns-recursor-abffbf6237ae5ce0 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=CVE-2026-52684%3A%20Time-of-check%20Time-of-use%20(TOCTOU)%20Race%20Condition%20in%20PowerDNS%20Recursor&severity=low&id=6a61d2cf9c2644c7f8b6a265 https://radar.offseq.com/threat/cve-2026-16287-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-4098cf05c096533c 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-16287%3A%20CWE-78%20Improper%20neutralization%20of%20special%20elements%20used%20in%20an%20OS%20command%20('OS%20command%20injection')%20in%20TUBITAK%20BILGEM%20Software%20Technologies%20Research%20Institute%20pardus-update&severity=high&id=6a61d2cf9c2644c7f8b6a25f https://radar.offseq.com/threat/device-code-phishing-turning-a-convenience-feature-into-an-mfa-bypass-430a7f86342851b2 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Device%20Code%20Phishing%3A%20Turning%20a%20Convenience%20Feature%20Into%20an%20MFA%20Bypass&severity=medium&id=6a6231af9c2644c7f847146f https://radar.offseq.com/threat/oracle-patches-over-1400-vulnerabilities-with-quarterly-security-updates-cca01e3c13a18e14 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Oracle%20Patches%20Over%201%2C400%20Vulnerabilities%20With%20Quarterly%20Security%20Updates&severity=medium&id=6a61c81e9c2644c7f8a68a36 https://radar.offseq.com/threat/openais-ai-models-autonomously-escaped-sandbox-and-hacked-hugging-face-infrastructure-c38a9d440ce83be8 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=OpenAI's%20AI%20Models%20Autonomously%20Escaped%20Sandbox%20and%20Hacked%20Hugging%20Face%20Infrastructure&severity=high&id=6a61bcbf9c2644c7f8929dac https://radar.offseq.com/threat/cve-2026-9713-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-8e95f7d85109e011 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-9713%3A%20CWE-89%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20SQL%20Command%20('SQL%20Injection')%20in%20King-Theme%20Product%20Designer%20for%20WooCommerce%20WordPress%20%7C%20Lumise&severity=high&id=6a61c4bf9c2644c7f8a08bdd https://radar.offseq.com/threat/cve-2026-9635-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-a7aaf3dce5e16de6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-9635%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20mythemeshop%20WP%20Shortcode%20by%20MyThemeShop&severity=medium&id=6a61c4bf9c2644c7f8a08bd8 https://radar.offseq.com/threat/cve-2026-9729-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-39ed67944328384a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-9729%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20webpushr%20Web%20Push%20Notifications%20%E2%80%93%20Webpushr&severity=medium&id=6a61c4bf9c2644c7f8a08be1 https://radar.offseq.com/threat/cve-2026-12421-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-603d61f916d79750 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12421%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20ARforms&severity=high&id=6a61c4bf9c2644c7f8a08bcd https://radar.offseq.com/threat/cve-2026-59678-cwe-863-incorrect-authorization-in-linux-gaming-portprotonqt-70c1e404dd0b4d87 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-59678%3A%20CWE-863%3A%20Incorrect%20Authorization%20in%20Linux-Gaming%20PortProtonQt&severity=high&id=6a61c4bf9c2644c7f8a08bd5 https://radar.offseq.com/threat/cve-2026-59677-cwe-862-missing-authorization-in-selinuxproject-selinux-7f1a277dcb17e2e2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-59677%3A%20CWE-862%3A%20Missing%20Authorization%20in%20SELinuxProject%20selinux&severity=medium&id=6a61c4bf9c2644c7f8a08bd1 https://radar.offseq.com/threat/cve-2026-59676-cwe-367-time-of-check-time-of-use-toctou-race-condition-in-selinuxproject-selinux-3a631373a3feffe4 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-59676%3A%20CWE-367%3A%20Time-of-check%20Time-of-use%20(TOCTOU)%20Race%20Condition%20in%20SELinuxProject%20selinux&severity=medium&id=6a61ba439c2644c7f88d5fd3 https://radar.offseq.com/threat/cve-2026-9577-cwe-79-cross-site-scripting-xss-in-post-status-notifier-lite-682ae6923c299069 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-9577%3A%20CWE-79%20Cross-Site%20Scripting%20(XSS)%20in%20Post%20Status%20Notifier%20Lite&severity=medium&id=6a61ba439c2644c7f88d5fda https://radar.offseq.com/threat/cve-2026-9066-cwe-79-cross-site-scripting-xss-in-wp-compress-71edf03f88a24f52 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-9066%3A%20CWE-79%20Cross-Site%20Scripting%20(XSS)%20in%20WP%20Compress&severity=medium&id=6a61ba439c2644c7f88d5fd7 https://radar.offseq.com/threat/cve-2026-14291-cwe-287-improper-authentication-in-security-ninja-premium-9e408f005808601f 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-14291%3A%20CWE-287%20Improper%20Authentication%20in%20security-ninja-premium&severity=high&id=6a61ba439c2644c7f88d5fd0 https://radar.offseq.com/threat/cve-2026-12082-cwe-862-missing-authorization-in-praison-ai-seo-1153d33e70634568 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-12082%3A%20CWE-862%20Missing%20Authorization%20in%20Praison%20AI%20SEO&severity=high&id=6a61ba439c2644c7f88d5fcd https://radar.offseq.com/threat/cve-2026-7534-cwe-79-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-cc29856cbb03bbf2 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-7534%3A%20CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')%20in%20FantasticPlugins%20SUMO%20Reward%20Points%20for%20WooCommerce&severity=high&id=6a61ac259c2644c7f875c946 https://radar.offseq.com/threat/us-warns-of-iranian-hackers-targeting-siemens-schneider-and-rockwell-ics-devices-90401a999e41ee27 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=US%20Warns%20of%20Iranian%20Hackers%20Targeting%20Siemens%2C%20Schneider%2C%20and%20Rockwell%20ICS%20Devices&severity=medium&id=6a61a8809c2644c7f86f898c https://radar.offseq.com/threat/cve-2026-63226-improper-restriction-of-communication-channel-to-intended-endpoints-in-ricoh-company-daabad2524a5b949 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-63226%3A%20Improper%20restriction%20of%20communication%20channel%20to%20intended%20endpoints%20in%20Ricoh%20Company%20Ricoh%20printers%20and%20Multifunction%20Printers%20(MFPs)&severity=medium&id=6a61ac259c2644c7f875c941 https://radar.offseq.com/threat/zdi-26-447-heimdall-data-database-proxy-generatefilecontent-crlf-injection-remote-code-execution-b1e88132705b973b 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=ZDI-26-447%3A%20Heimdall%20Data%20Database%20Proxy%20generateFileContent%20CRLF%20Injection%20Remote%20Code%20Execution%20Vulnerability&severity=critical&id=6a629e189c2644c7f8de39a3 https://radar.offseq.com/threat/zdi-26-451-docker-desktop-for-macos-inference-server-permissive-allow-list-sandbox-escape-vulnerability-b808b65607912fb3 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=ZDI-26-451%3A%20Docker%20Desktop%20for%20macOS%20Inference%20Server%20Permissive%20Allow%20List%20Sandbox%20Escape%20Vulnerability&severity=low&id=6a629e189c2644c7f8de3997 https://radar.offseq.com/threat/zdi-26-452-dify-ai-workflow-oauthredirecturl-open-redirect-vulnerability-00cb26993a297dc2 2026-07-26 weekly 0.6 https://radar.offseq.com/api/og?title=ZDI-26-452%3A%20Dify%20AI%20Workflow%20oauth_redirect_url%20Open%20Redirect%20Vulnerability&severity=low&id=6a629e189c2644c7f8de3994 https://radar.offseq.com/threat/cve-2026-6390-use-of-externally-controlled-format-string-in-red-hat-red-hat-enterprise-linux-10-04c3050cdf14beb9 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-6390%3A%20Use%20of%20Externally-Controlled%20Format%20String%20in%20Red%20Hat%20Red%20Hat%20Enterprise%20Linux%2010&severity=medium&id=6a619e1b9c2644c7f861b96a https://radar.offseq.com/threat/isc-stormcast-for-thursday-july-23rd-2026-httpsiscsansedupodcastdetail10020-thu-jul-23rd-80b817e5c2dcbce2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=ISC%20Stormcast%20For%20Thursday%2C%20July%2023rd%2C%202026%20https%3A%2F%2Fisc.sans.edu%2Fpodcastdetail%2F10020%2C%20(Thu%2C%20Jul%2023rd)&severity=medium&id=6a6177589c2644c7f81e9474 https://radar.offseq.com/threat/cve-2026-21723-vulnerability-in-grafana-grafana-oss-d95fd02cc4a3495d 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-21723%3A%20Vulnerability%20in%20Grafana%20Grafana%20OSS&severity=medium&id=6a622e759c2644c7f84289aa https://radar.offseq.com/threat/cve-2026-16653-path-traversal-in-boazsegev-facilio-cb7360f335000f6f 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16653%3A%20Path%20Traversal%20in%20boazsegev%20facil.io&severity=medium&id=6a61706d9c2644c7f8155087 https://radar.offseq.com/threat/an-issue-in-unistal-systems-pvt-cve-2026-38765-8f531f865dd9fed6 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=An%20issue%20in%20Unistal%20Systems%20Pvt.%20(CVE-2026-38765)&severity=high&id=6a65422c9c2644c7f808a466 https://radar.offseq.com/threat/an-issue-in-unistal-systems-pvt-cve-2026-38763-5acc89a3304b028b 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=An%20issue%20in%20Unistal%20Systems%20Pvt.%20(CVE-2026-38763)&severity=medium&id=6a65422a9c2644c7f808a1c2 https://radar.offseq.com/threat/an-issue-in-unistal-systems-pvt-cve-2026-38766-7968f6f87fff1205 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=An%20issue%20in%20Unistal%20Systems%20Pvt.%20(CVE-2026-38766)&severity=high&id=6a65422a9c2644c7f808a1bd https://radar.offseq.com/threat/inside-fakeagent-how-a-claude-desktop-malvertising-campaign-hit-29-organizations-with-sectoprat-c542c5f0562fbdc2 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Inside%20FakeAgent%3A%20How%20a%20Claude%20Desktop%20Malvertising%20Campaign%20Hit%2029%20Organizations%20with%20SectopRAT&severity=medium&id=6a6231af9c2644c7f847147d https://radar.offseq.com/threat/maltrail-ioc-for-2026-07-24-9d373bd73a776565 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Maltrail%20IOC%20for%202026-07-24&severity=medium&id=6a6398299c2644c7f8428a5f https://radar.offseq.com/threat/threatfox-iocs-for-2026-07-23-8facb4321a5a5322 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=ThreatFox%20IOCs%20for%202026-07-23&severity=medium&id=6a62b3a49c2644c7f8fe0e0c https://radar.offseq.com/threat/cve-2026-52439-na-6cd17d83fa001c15 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-52439%3A%20n%2Fa&severity=critical&id=6a62806b9c2644c7f8b34bbf https://radar.offseq.com/threat/cve-2026-38764-na-4be005ec20e9b165 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-38764%3A%20n%2Fa&severity=high&id=6a62806b9c2644c7f8b34b9c https://radar.offseq.com/threat/cve-2026-39155-na-d5c2fb26c555aed4 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-39155%3A%20n%2Fa&severity=medium&id=6a62781b9c2644c7f8a7dd7c https://radar.offseq.com/threat/cve-2026-16632-improper-input-validation-in-boazsegev-facilio-feb1b8ac5fdffc6f 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16632%3A%20Improper%20Input%20Validation%20in%20boazsegev%20facil.io&severity=medium&id=6a6157c79c2644c7f8e5859f https://radar.offseq.com/threat/cve-2026-16631-os-command-injection-in-publint-cb92201d5de309b6 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16631%3A%20OS%20Command%20Injection%20in%20publint&severity=medium&id=6a6157c79c2644c7f8e58595 https://radar.offseq.com/threat/malicious-code-in-hardhat-gas-tracker-npm-62feefbcb59c4f11 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Malicious%20code%20in%20hardhat-gas-tracker%20(npm)&severity=high&id=6a616bcb9c2644c7f80dbc15 https://radar.offseq.com/threat/n8n-snowflake-node-executequery-operation-allows-sql-injection-via-unparameterized-expression-1794506e517dfaba 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20Snowflake%20Node%20executeQuery%20Operation%20Allows%20SQL%20Injection%20via%20Unparameterized%20Expression%20Interpolation&severity=medium&id=6a616bcb9c2644c7f80dbc17 https://radar.offseq.com/threat/n8n-postgrestrigger-node-sql-injection-allows-authenticated-users-to-execute-arbitrary-sql-on-ac09db9bfdb8a466 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20PostgresTrigger%20Node%20SQL%20Injection%20Allows%20Authenticated%20Users%20to%20Execute%20Arbitrary%20SQL%20on%20Connected%20PostgreSQL%20Instances&severity=medium&id=6a616bcb9c2644c7f80dbc1e https://radar.offseq.com/threat/n8n-cross-tenant-module-cache-poisoning-in-the-js-task-runner-be232ebf8576f380 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20Cross-Tenant%20Module-Cache%20Poisoning%20in%20the%20JS%20Task%20Runner&severity=medium&id=6a616bcb9c2644c7f80dbc25 https://radar.offseq.com/threat/jupyterlab-cross-site-scripting-xss-via-crafted-settings-file-overridesjson-972e9e4e12abc7de 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=JupyterLab%3A%20Cross-site%20scripting%20(XSS)%20via%20crafted%20settings%20file%20(%60overrides.json%60)&severity=high&id=6a616bcb9c2644c7f80dbc2c https://radar.offseq.com/threat/jupyterlab-image-viewer-allows-xss-when-opening-malicious-image-in-new-browser-tab-1f632395f7cdb62c 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=JupyterLab%3A%20Image%20viewer%20allows%20XSS%20when%20opening%20malicious%20image%20in%20new%20browser%20tab&severity=high&id=6a616bcb9c2644c7f80dbc37 https://radar.offseq.com/threat/jupyterlab-pypi-extension-blocklist-package-name-canonicalization-bypass-83fcee5a08052714 2026-07-23 weekly 0.7 https://radar.offseq.com/api/og?title=JupyterLab%3A%20PyPI%20extension%20blocklist%20package-name%20canonicalization%20bypass&severity=medium&id=6a616bcb9c2644c7f80dbc42 https://radar.offseq.com/threat/jupyterlab-pluginmanager-lock-rule-enforcement-bypass-161cca1bfec9819b 2026-07-23 weekly 0.7 https://radar.offseq.com/api/og?title=JupyterLab%20PluginManager%20lock-rule%20enforcement%20bypass&severity=medium&id=6a616bcd9c2644c7f80dbd6b https://radar.offseq.com/threat/jupyterlab-allowlistblocklist-check-in-pypiextensionmanagerinstall-not-enforced-for-direct-callers-5281bdf848522583 2026-07-25 weekly 0.6 https://radar.offseq.com/api/og?title=JupyterLab%3A%20Allowlist%2Fblocklist%20check%20in%20%60PyPIExtensionManager.install()%60%20not%20enforced%20for%20direct%20callers%20(missing%20%60await%60)&severity=low&id=6a616bcd9c2644c7f80dbd76 https://radar.offseq.com/threat/nextjs-server-side-request-forgery-in-server-actions-on-custom-servers-cve-2026-64649-1c612b5709de8f7b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Next.js%3A%20Server-Side%20Request%20Forgery%20in%20Server%20Actions%20on%20custom%20servers%20(CVE-2026-64649)&severity=high&id=6a616bcd9c2644c7f80dbd81 https://radar.offseq.com/threat/nextjs-cache-confusion-of-response-bodies-for-requests-with-bodies-cve-2026-64648-cf96fab320e06874 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Next.js%3A%20Cache%20confusion%20of%20response%20bodies%20for%20requests%20with%20bodies%20(CVE-2026-64648)&severity=medium&id=6a616bcd9c2644c7f80dbd89 https://radar.offseq.com/threat/nextjs-cache-confusion-of-response-bodies-for-requests-with-bodies-containing-invalid-utf-8-byte-e53d5311dbb79134 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Next.js%3A%20Cache%20confusion%20of%20response%20bodies%20for%20requests%20with%20bodies%20containing%20invalid%20UTF-8%20byte%20sequences%20(CVE-2026-64647)&severity=medium&id=6a616bcd9c2644c7f80dbd91 https://radar.offseq.com/threat/nextjs-unbounded-server-action-payload-in-edge-runtime-cve-2026-64646-e6cf029629b247ba 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Next.js%3A%20Unbounded%20Server%20Action%20payload%20in%20Edge%20runtime%20(CVE-2026-64646)&severity=medium&id=6a616bcd9c2644c7f80dbd99 https://radar.offseq.com/threat/nextjs-server-side-request-forgery-in-rewrites-via-attacker-controlled-destination-hostname-cve-2026-03293ed3c48b4eb6 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Next.js%3A%20Server-Side%20Request%20Forgery%20in%20rewrites%20via%20attacker-controlled%20destination%20hostname%20(CVE-2026-64645)&severity=high&id=6a616bcd9c2644c7f80dbda1 https://radar.offseq.com/threat/nextjs-denial-of-service-in-the-image-optimization-api-using-svgs-cve-2026-64644-97db0479badec92a 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Next.js%3A%20Denial%20of%20Service%20in%20the%20Image%20Optimization%20API%20using%20SVGs%20(CVE-2026-64644)&severity=medium&id=6a616bcd9c2644c7f80dbda9 https://radar.offseq.com/threat/nextjs-unauthenticated-disclosure-of-internal-server-function-endpoints-cve-2026-64643-b0b6cf04736bf6f4 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=Next.js%3A%20Unauthenticated%20disclosure%20of%20internal%20Server%20Function%20endpoints%20(CVE-2026-64643)&severity=medium&id=6a616bcd9c2644c7f80dbdb1 https://radar.offseq.com/threat/nextjs-middleware-proxy-bypass-in-app-router-applications-using-turbopack-and-single-locale-cve-2026-b1f7c2e89152f29b 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Next.js%3A%20Middleware%20%2F%20Proxy%20bypass%20in%20App%20Router%20applications%20using%20Turbopack%20and%20single%20locale%20(CVE-2026-64642)&severity=high&id=6a616bcd9c2644c7f80dbdb9 https://radar.offseq.com/threat/nextjs-denial-of-service-in-app-router-using-server-actions-cve-2026-64641-03bd0f1fd324c10c 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=Next.js%3A%20Denial%20of%20Service%20in%20App%20Router%20using%20Server%20Actions%20(CVE-2026-64641)&severity=high&id=6a616bcf9c2644c7f80dbeac https://radar.offseq.com/threat/orgeclipsejettyjetty-security-eclipse-jetty-digest-authentication-iso-8859-1-lossy-encoding-allows-66584e699a86a3f6 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=Org.eclipse.jetty%3Ajetty%20security%3A%20Eclipse%20Jetty%20Digest%20Authentication%3A%20ISO-8859-1%20lossy%20encoding%20allows%20authentication%20bypass%20via%20character%20substitution%20(CVE-2026-10050)&severity=high&id=6a616bd09c2644c7f80dbee5 https://radar.offseq.com/threat/dompdf-embedded-svg-images-can-leak-existence-of-files-and-directories-within-the-filesystem-cve-2026-4c0f4386f62b132d 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=Dompdf%3A%20Embedded%20SVG%20images%20can%20leak%20existence%20of%20files%20and%20directories%20within%20the%20filesystem%20(CVE-2026-59943)&severity=medium&id=6a616bd09c2644c7f80dbefe https://radar.offseq.com/threat/n8n-improper-authorization-allows-authenticated-users-to-assign-workflows-to-folders-in-other-projects-c26945e59a5477f6 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20Improper%20Authorization%20Allows%20Authenticated%20Users%20to%20Assign%20Workflows%20to%20Folders%20in%20Other%20Projects%20(CVE-2026-59253)&severity=medium&id=6a6150c89c2644c7f8d9fde8 https://radar.offseq.com/threat/cve-2026-61246-easily-exploitable-vulnerability-allows-low-privileged-attacker-with-network-access-via-a98bc81af0c82a91 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-61246%3A%20Easily%20exploitable%20vulnerability%20allows%20low%20privileged%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=high&id=6a6146409c2644c7f8cdc7d1 https://radar.offseq.com/threat/cve-2026-60455-easily-exploitable-vulnerability-allows-low-privileged-attacker-with-network-access-via-df9493bd57250fc2 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-60455%3A%20Easily%20exploitable%20vulnerability%20allows%20low%20privileged%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=high&id=6a6146409c2644c7f8cdc7ce https://radar.offseq.com/threat/cve-2026-60439-easily-exploitable-vulnerability-allows-low-privileged-attacker-with-network-access-via-166e9669ae760ff5 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-60439%3A%20Easily%20exploitable%20vulnerability%20allows%20low%20privileged%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=high&id=6a6146409c2644c7f8cdc7cb https://radar.offseq.com/threat/cve-2026-60373-easily-exploitable-vulnerability-allows-low-privileged-attacker-with-network-access-via-502dbf89aa601340 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-60373%3A%20Easily%20exploitable%20vulnerability%20allows%20low%20privileged%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=high&id=6a6146409c2644c7f8cdc7c8 https://radar.offseq.com/threat/cve-2026-60372-easily-exploitable-vulnerability-allows-unauthenticated-attacker-with-network-access-33e5bade6479a616 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-60372%3A%20Easily%20exploitable%20vulnerability%20allows%20unauthenticated%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=critical&id=6a6146409c2644c7f8cdc7c5 https://radar.offseq.com/threat/cve-2026-60371-difficult-to-exploit-vulnerability-allows-low-privileged-attacker-with-access-to-the-c002bfd32c42f724 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-60371%3A%20Difficult%20to%20exploit%20vulnerability%20allows%20low%20privileged%20attacker%20with%20access%20to%20the%20physical%20communication%20segment%20attached%20to%20the%20hardware%20where%20the%20Oracle%20Platform%20Security%20for%20Java%20executes%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20While%20the%20vulnerability%20is%20in%20Oracle%20Platform%20Security%20for%20Java%2C%20attacks%20may%20significantly%20impact%20additional%20products%20(scope%20change).%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20&severity=high&id=6a61463e9c2644c7f8cdc79e https://radar.offseq.com/threat/cve-2026-60370-difficult-to-exploit-vulnerability-allows-low-privileged-attacker-with-network-access-4bf57a8d8c1c7d99 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-60370%3A%20Difficult%20to%20exploit%20vulnerability%20allows%20low%20privileged%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=high&id=6a61463e9c2644c7f8cdc79b https://radar.offseq.com/threat/cve-2026-60369-easily-exploitable-vulnerability-allows-low-privileged-attacker-with-network-access-via-863b1bced99fa0b7 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-60369%3A%20Easily%20exploitable%20vulnerability%20allows%20low%20privileged%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20While%20the%20vulnerability%20is%20in%20Oracle%20Platform%20Security%20for%20Java%2C%20attacks%20may%20significantly%20impact%20additional%20products%20(scope%20change).%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=critical&id=6a61463e9c2644c7f8cdc798 https://radar.offseq.com/threat/cve-2026-60368-easily-exploitable-vulnerability-allows-low-privileged-attacker-with-network-access-via-6a10bc1c3d843c66 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=CVE-2026-60368%3A%20Easily%20exploitable%20vulnerability%20allows%20low%20privileged%20attacker%20with%20network%20access%20via%20SOAP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=high&id=6a61463e9c2644c7f8cdc795 https://radar.offseq.com/threat/cve-2026-60367-easily-exploitable-vulnerability-allows-unauthenticated-attacker-with-network-access-894f1eafc045625f 2026-07-26 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-60367%3A%20Easily%20exploitable%20vulnerability%20allows%20unauthenticated%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=critical&id=6a61463e9c2644c7f8cdc792 https://radar.offseq.com/threat/cve-2026-60366-easily-exploitable-vulnerability-allows-unauthenticated-attacker-with-network-access-4a0562ebbfb5dc25 2026-07-25 weekly 0.9 https://radar.offseq.com/api/og?title=CVE-2026-60366%3A%20Easily%20exploitable%20vulnerability%20allows%20unauthenticated%20attacker%20with%20network%20access%20via%20HTTP%20to%20compromise%20Oracle%20Platform%20Security%20for%20Java.%20%20While%20the%20vulnerability%20is%20in%20Oracle%20Platform%20Security%20for%20Java%2C%20attacks%20may%20significantly%20impact%20additional%20products%20(scope%20change).%20%20Successful%20attacks%20of%20this%20vulnerability%20can%20result%20in%20takeover%20of%20Oracle%20Platform%20Security%20for%20Java.%20in%20Oracle%20Corporation%20Oracle%20Platform%20Security%20for%20Java&severity=critical&id=6a61463e9c2644c7f8cdc78f https://radar.offseq.com/threat/n8n-external-secrets-accessible-via-workflow-expressions-outside-credentials-cve-2026-59254-3cdf01ac035c9ef8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20External%20Secrets%20Accessible%20via%20Workflow%20Expressions%20Outside%20Credentials%20(CVE-2026-59254)&severity=medium&id=6a6150c99c2644c7f8d9ff29 https://radar.offseq.com/threat/n8n-mysql-v1-node-executequery-operation-allows-sql-injection-via-unparameterized-expression-b3c4262878d4b307 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20MySQL%20v1%20Node%20executeQuery%20Operation%20Allows%20SQL%20Injection%20via%20Unparameterized%20Expression%20Interpolation%20(CVE-2026-59257)&severity=medium&id=6a6150c99c2644c7f8d9ff36 https://radar.offseq.com/threat/n8n-external-secrets-permission-bypass-via-expression-parser-mismatch-cve-2026-59259-dba660a95e3d3da8 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20External%20Secrets%20Permission%20Bypass%20via%20Expression%20Parser%20Mismatch%20(CVE-2026-59259)&severity=medium&id=6a6150ca9c2644c7f8da00ae https://radar.offseq.com/threat/cve-2026-16630-os-command-injection-in-syncfusion-ej2-javascript-ui-controls-f7656bb30fa7d204 2026-07-26 weekly 0.7 https://radar.offseq.com/api/og?title=CVE-2026-16630%3A%20OS%20Command%20Injection%20in%20syncfusion%20ej2-javascript-ui-controls&severity=medium&id=6a61463e9c2644c7f8cdc77b https://radar.offseq.com/threat/n8n-path-confinement-bypass-in-computer-use-searchfiles-allows-reading-files-outside-the-base-directory-b29a30964b4839d0 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20Path-Confinement%20Bypass%20in%20computer-use%20search_files%20Allows%20Reading%20Files%20Outside%20the%20Base%20Directory&severity=medium&id=6a6150ca9c2644c7f8da00e4 https://radar.offseq.com/threat/n8n-prototype-pollution-via-vm-expression-engine-sandbox-escape-leads-to-denial-of-service-fdbec0c446e9a062 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20Prototype%20Pollution%20via%20VM%20Expression%20Engine%20Sandbox%20Escape%20Leads%20to%20Denial%20of%20Service&severity=medium&id=6a6150cc9c2644c7f8da0122 https://radar.offseq.com/threat/n8n-prototype-pollution-via-dot-notation-field-names-leads-to-instance-wide-denial-of-service-6a448faa155a3de2 2026-07-26 weekly 0.8 https://radar.offseq.com/api/og?title=n8n%3A%20Prototype%20Pollution%20via%20Dot-Notation%20Field%20Names%20Leads%20To%20Instance-Wide%20Denial%20of%20Service&severity=high&id=6a6150cc9c2644c7f8da012a https://radar.offseq.com/threat/n8n-edit-image-node-format-injection-allows-arbitrary-file-write-79b771ebdfa549fa 2026-07-23 weekly 0.8 https://radar.offseq.com/api/og?title=n8n%3A%20Edit%20Image%20Node%20Format%20Injection%20Allows%20Arbitrary%20File%20Write&severity=high&id=6a6150cc9c2644c7f8da0132 https://radar.offseq.com/threat/n8n-shared-workflow-editor-can-exfiltrate-credentials-via-inline-sub-workflow-json-bef336ee766d6f46 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=n8n%3A%20Shared-Workflow%20Editor%20Can%20Exfiltrate%20Credentials%20via%20Inline%20Sub-Workflow%20JSON&severity=high&id=6a6150cc9c2644c7f8da013a https://radar.offseq.com/threat/n8n-credential-authorization-bypass-via-expression-in-http-request-node-genericauthtype-9d4b5a4bac026066 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=n8n%3A%20Credential%20Authorization%20Bypass%20via%20Expression%20in%20HTTP%20Request%20Node%20%60genericAuthType%60&severity=high&id=6a6150cc9c2644c7f8da0142 https://radar.offseq.com/threat/n8n-expression-sandbox-escape-via-arrow-function-bodies-enabling-command-execution-1101f8fb92c8240b 2026-07-24 weekly 0.8 https://radar.offseq.com/api/og?title=n8n%3A%20Expression%20sandbox%20escape%20via%20arrow-function%20bodies%20enabling%20command%20execution&severity=high&id=6a6150cc9c2644c7f8da014a https://radar.offseq.com/threat/n8n-send-email-node-arbitrary-file-read-and-ssrf-via-nodemailer-content-object-type-confusion-e3950a6b25e07e98 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=n8n%3A%20Send%20Email%20Node%20Arbitrary%20File%20Read%20and%20SSRF%20via%20Nodemailer%20Content-Object%20Type%20Confusion&severity=high&id=6a6150cc9c2644c7f8da0151 https://radar.offseq.com/threat/n8n-authenticated-code-execution-in-the-n8n-git-node-a47547d8df0ee1eb 2026-07-25 weekly 0.8 https://radar.offseq.com/api/og?title=n8n%3A%20Authenticated%20code%20execution%20in%20the%20n8n%20Git%20node&severity=high&id=6a6150cc9c2644c7f8da0159 https://radar.offseq.com/threat/n8n-ssrf-protection-bypass-via-mcp-client-node-b3c7efad6017970c 2026-07-25 weekly 0.7 https://radar.offseq.com/api/og?title=n8n%3A%20SSRF%20Protection%20Bypass%20via%20MCP%20Client%20Node&severity=medium&id=6a6150cc9c2644c7f8da0161