🔓 CVEs & KEV
CVE-2026-19633 — DALIBO PostgreSQL Anonymizer — CVSS 8.8 — PostgreSQL Anonymizer: unprivileged masked users can execute code via operato...
CVE-2026-86283 — MISP — CVSS 7.1 — MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event D...
CVE-2026-83534 — DALIBO PostgreSQL Anonymizer — CVSS 6.4 — PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_d...
CVE-2026-19634 — DALIBO PostgreSQL Anonymizer — CVSS 6.4 — PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_ro...
📋 ADVISORIES
- 📄 Source for Attackers steal METR API key via exposed agent dashboard, burn $600,000 in AI credits — infosecurity-magazine.com