🟠 Hurl, Credential Leak via Redirect, #CVE-2026-63481 (Medium) -DC-Sep2026-2140

🔗 https://dailycve.com/hurl-credential-leak-via-redirect-cve-2026-63481-medium-dc-sep2026-2140/

@Daily_CVE

🔴 Spring MVC Handlebars, Path Traversal, #CVE-2026-63490 (High) -DC-Sep2026-2139

🔗 https://dailycve.com/spring-mvc-handlebars-path-traversal-cve-2026-63490-high-dc-sep2026-2139/

@Daily_CVE

🔴 Omnigent, Authorization Bypass / RCE, #CVE-2026-62674 (Critical) -DC-Sep2026-2138

🔗 https://dailycve.com/omnigent-authorization-bypass-rce-cve-2026-62674-critical-dc-sep2026-2138/

@Daily_CVE

🔴 SeaweedFS, Authorization Bypass, #CVE-Not-Assigned (High) -DC-Sep2026-2137

🔗 https://dailycve.com/seaweedfs-authorization-bypass-cve-not-assigned-high-dc-sep2026-2137/

@Daily_CVE

🟠 OpenChoreo, Authentication Bypass, #CVE-2026-73840 (Medium) -DC-Sep2026-2136

🔗 https://dailycve.com/openchoreo-authentication-bypass-cve-2026-73840-medium-dc-sep2026-2136/

@Daily_CVE

🔗 Philips Hue TV Sync Gets Dramatically Cheaper, While Nanoleaf Finally Joins the Hue Lighting World + Video

-Fact Checker: ✅: 3 ❌: 0 || 3/3 → Score: 100% 🦾
-Prediction: 📈 1 Positive | 📉 1 Negative

🔗 http://undercodenews.com/philips-hue-tv-sync-gets-dramatically-cheaper-while-nanoleaf-finally-joins-the-hue-lighting-world-video/

@Undercode_News

🔴 SonicWall SMA1000 Appliance Work Place Pre-Authentication Server-Side Request Forgery (SSRF), #CVE-2026-83548 (Critical) -DC-Sep2026-2135

🔗 https://dailycve.com/sonicwall-sma1000-appliance-work-place-pre-authentication-server-side-request-forgery-ssrf-cve-2026-83548-critical-dc-sep2026-2135/

@Daily_CVE

🔴 OpenChoreo, Authentication Bypass, #CVE-2026-73843 (Critical) -DC-Sep2026-2134

🔗 https://dailycve.com/openchoreo-authentication-bypass-cve-2026-73843-critical-dc-sep2026-2134/

@Daily_CVE

🔴 @platejs/docx-io (Plate), Server-Side Request Forgery (SSRF) with Response Disclosure, #CVE-2026-65842 (High) -DC-Sep2026-2133

🔗 https://dailycve.com/platejs-docx-io-plate-server-side-request-forgery-ssrf-with-response-disclosure-cve-2026-65842-high-dc-sep2026-2133/

@Daily_CVE

🟠 @dicebear/core & @dicebear/initials, SVG Injection / XSS, #CVE-2026-33311 (Medium) -DC-Sep2026-2132

🔗 https://dailycve.com/dicebear-core-dicebear-initials-svg-injection-xss-cve-2026-33311-medium-dc-sep2026-2132/

@Daily_CVE

🔴 Grav CMS, Sandbox Bypass + Configuration Exposure, GHSA-j274-39qw-32c9 (High) -DC-Sep2026-2131

🔗 https://dailycve.com/grav-cms-sandbox-bypass-configuration-exposure-ghsa-j274-39qw-32c9-high-dc-sep2026-2131/

@Daily_CVE

🔴 link-preview-js, DNS Rebinding SSRF Bypass, #CVE-2026-61704 (High) -DC-Sep2026-2130

🔗 https://dailycve.com/link-preview-js-dns-rebinding-ssrf-bypass-cve-2026-61704-high-dc-sep2026-2130/

@Daily_CVE

🟠 Starlette, Host Header Validation Bypass, #CVE-2026-161 (MEDIUM) -DC-Sep2026-2128

🔗 https://dailycve.com/starlette-host-header-validation-bypass-cve-2026-161-medium-dc-sep2026-2128/

@Daily_CVE

🔴 Mailpit, Unbounded SMTP Command-Line Buffer, #CVE-2026-67445 (High) -DC-Sep2026-2127

🔗 https://dailycve.com/mailpit-unbounded-smtp-command-line-buffer-cve-2026-67445-high-dc-sep2026-2127/

@Daily_CVE

🔴 fast-uri, Server-Side Request Forgery via Malformed IPv6 Normalization, #CVE ID: Not Assigned (High) -DC-Sep2026-2126

🔗 https://dailycve.com/fast-uri-server-side-request-forgery-via-malformed-ipv6-normalization-cve-id-not-assigned-high-dc-sep2026-2126/

@Daily_CVE

🔴 Kestra OSS, Authentication Bypass, #CVE-Not-Provided (Critical) -DC-Sep2026-2125

🔗 https://dailycve.com/kestra-oss-authentication-bypass-cve-not-provided-critical-dc-sep2026-2125/

@Daily_CVE

🔴 OpenChoreo, #OS Command Injection, #CVE-2026-73667 (High) -DC-Sep2026-2124

🔗 https://dailycve.com/openchoreo-os-command-injection-cve-2026-73667-high-dc-sep2026-2124/

@Daily_CVE

🔴 fast-uri, Host Confusion via Percent-Encoded Scheme Normalization, #CVE-2026-76172 (High) -DC-Sep2026-2123

🔗 https://dailycve.com/fast-uri-host-confusion-via-percent-encoded-scheme-normalization-cve-2026-76172-high-dc-sep2026-2123/

@Daily_CVE

🔴 OpenChoreo, Authorization Bypass Through User-Controlled Key, #CVE-2026-73841 (High) -DC-Sep2026-2122

🔗 https://dailycve.com/openchoreo-authorization-bypass-through-user-controlled-key-cve-2026-73841-high-dc-sep2026-2122/

@Daily_CVE

🔵 SonicWall SMA1000 AMC Post-Authentication #OS Command Injection (#CVE-2026-83549) -DC-Sep2026-2121

🔗 https://dailycve.com/sonicwall-sma1000-amc-post-authentication-os-command-injection-cve-2026-83549-dc-sep2026-2121/

@Daily_CVE

🔴 fast-uri, Host Confusion via Skipped IDN Canonicalization, #CVE-2026-13676 (High) -DC-Sep2026-2120

🔗 https://dailycve.com/fast-uri-host-confusion-via-skipped-idn-canonicalization-cve-2026-13676-high-dc-sep2026-2120/

@Daily_CVE