CVE ID :CVE-2026-57495 Published : July 20, 2026, 10:17 p.m. | 2 hours, 18 minutes ago Description :AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agenticmail/codex…
CVE-2026-47255 – AgenticMail API/storage and outbound relay hardening
CVE ID :CVE-2026-47255 Published : July 20, 2026, 10:17 p.m. | 2 hours, 18 minutes ago Description :AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core…
CVE-2026-44359 – Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow
CVE ID :CVE-2026-44359 Published : July 20, 2026, 12:16 a.m. | 18 minutes ago Description :Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, the Meshtastic GitHub repository’s main_matrix.yml workflow…
CVE-2026-10130 – QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts
CVE ID :CVE-2026-10130 Published : July 18, 2026, 11:17 p.m. | 1 hour, 18 minutes ago Description :QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing…
CVE-2026-12228 – Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
CVE ID :CVE-2026-12228 Published : July 18, 2026, 9:17 p.m. | 3 hours, 18 minutes ago Description :A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version). The…
CVE-2026-9323 – Insecure PRNG and Information Exposure in urwid Web Display Backend
CVE ID :CVE-2026-9323 Published : July 18, 2026, 2:17 p.m. | 10 hours, 18 minutes ago Description :The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9)…
CVE-2026-16117 – @fastify/http-proxy vulnerable to prefix escape via URL-encoded characters
CVE ID :CVE-2026-16117 Published : July 18, 2026, 2:17 p.m. | 10 hours, 18 minutes ago Description :Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix…
CVE-2026-11826 – OpenPLC_v3 Heap-Based Buffer Overflow in Modbus Master getData()
CVE ID :CVE-2026-11826 Published : July 18, 2026, 2:17 p.m. | 10 hours, 18 minutes ago Description :OpenPLC_v3 contains a heap-based buffer overflow in the getData() function in webserver/core/modbus_master.cpp. getData() reads characters between two…
CVE-2026-55518 – Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation
CVE ID :CVE-2026-55518 Published : July 17, 2026, 9:17 p.m. | 3 hours, 17 minutes ago Description :Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and…
CVE-2026-54498 – view_component: around_render HTML-Safety Bypass
CVE ID :CVE-2026-54498 Published : July 17, 2026, 9:17 p.m. | 3 hours, 17 minutes ago Description :view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From…