CVE ID :CVE-2026-6484 Published : Aug. 12, 2026, 1:17 a.m. | 44 minutes ago Description :In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution. Severity: 8.2 |…
CVE-2026-70398 – Multicloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace
CVE ID :CVE-2026-70398 Published : Aug. 12, 2026, 1:10 a.m. | 51 minutes ago Description :A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows…
CVE-2026-72526 – Multicloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation
CVE ID :CVE-2026-72526 Published : Aug. 12, 2026, 1:10 a.m. | 51 minutes ago Description :A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an…
CVE-2026-73248 – calibre: Bypass of Python template restrictions via nested `template()` leading to RCE
CVE ID :CVE-2026-73248 Published : Aug. 11, 2026, 10:19 p.m. | 1 hour, 42 minutes ago Description :calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB,…
CVE-2026-73247 – Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
CVE ID :CVE-2026-73247 Published : Aug. 11, 2026, 10:19 p.m. | 1 hour, 42 minutes ago Description :Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra’s core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http() uri…
CVE-2026-68067 – Mira Hormone Monitor, Mira Android App Weak Authentication
CVE ID :CVE-2026-68067 Published : Aug. 11, 2026, 10:18 p.m. | 1 hour, 42 minutes ago Description :The login endpoint on the Mira cloud API accepts any format-valid string in the password field and…
CVE-2026-67568 – Mira Hormone Monitor, Mira Android App Use of Hard-coded Credentials
CVE ID :CVE-2026-67568 Published : Aug. 11, 2026, 10:18 p.m. | 1 hour, 42 minutes ago Description :The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet…
CVE-2026-66875 – Mira Hormone Monitor, Mira Android App Missing authentication for critical function
CVE ID :CVE-2026-66875 Published : Aug. 11, 2026, 10:18 p.m. | 1 hour, 42 minutes ago Description :In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range…
CVE-2026-58243 – Privilege Escalation vulnerability in SAP ABAP Developer Tools
CVE ID :CVE-2026-58243 Published : Aug. 11, 2026, 1:17 a.m. | 43 minutes ago Description :SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low…
CVE-2026-44758 – Code Injection vulnerability in Manufacturing Integration and Intelligence
CVE ID :CVE-2026-44758 Published : Aug. 11, 2026, 1:17 a.m. | 43 minutes ago Description :SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to…