CVE ID :CVE-2026-68770 Published : July 31, 2026, 9:17 p.m. | 2 hours, 24 minutes ago Description :sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting…
CVE-2026-62959 – Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`)
CVE ID :CVE-2026-62959 Published : July 31, 2026, 8:16 p.m. | 3 hours, 25 minutes ago Description :Coturn is a free open source implementation of TURN and STUN Server. From 4.5.2 through 4.14.0, when…
CVE-2026-53510 – Savon::Model evaluates WSDL operation names as Ruby source
CVE ID :CVE-2026-53510 Published : July 31, 2026, 8:16 p.m. | 3 hours, 25 minutes ago Description :Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation names…
CVE-2026-66421 – OpenClaw Dashboard Stored XSS via lastMessage Session Field
CVE ID :CVE-2026-66421 Published : July 30, 2026, 11:16 p.m. | 25 minutes ago Description :OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in…
CVE-2026-66420 – MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments
CVE ID :CVE-2026-66420 Published : July 30, 2026, 11:16 p.m. | 25 minutes ago Description :MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated…
CVE-2026-66360 – MZ Automation libiec61850 Out-of-bounds Read
CVE ID :CVE-2026-66360 Published : July 30, 2026, 11:16 p.m. | 25 minutes ago Description :The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A…
CVE-2026-65423 – o6 Automation open62541 Integer Overflow or Wraparound
CVE ID :CVE-2026-65423 Published : July 30, 2026, 11:16 p.m. | 25 minutes ago Description :An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger…
CVE-2026-63362 – o6 Automation open62541 Integer Underflow
CVE ID :CVE-2026-63362 Published : July 30, 2026, 11:16 p.m. | 25 minutes ago Description :An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to…
CVE-2026-67595 – VaahCMS 2.0.0 – 2.3.4 Malicious JavaScript Supply Chain via security-otp.blade.php
CVE ID :CVE-2026-67595 Published : July 29, 2026, 10:16 p.m. | 2 hours, 21 minutes ago Description :VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible…
CVE-2026-13308 – Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability
CVE ID :CVE-2026-13308 Published : July 29, 2026, 9:17 p.m. | 3 hours, 20 minutes ago Description :Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers…