💥 BREACHES & INCIDENTS
jaguar-land-rover-cyberattack — @metacurity@infosec.exchange
liquid-crypto-exchange-hack — @metacurity@infosec.exchange
🔓 CVEs & KEV
CVE-2026-86542 — knowns-dev knowns — CVSS 8.8 — knowns before 0.30.0 Critical Path Traversal (CVE-2026-86542)
CVE-2026-82586 — ash-project ash_lua — CVSS 8.2 — AshLua read operation aggregate bypasses the exposed-field allow-list, exposi...
CVE-2026-82753 — ash-project ash_authentication_oauth2_server — CVSS 8.2 — Unauthenticated authorize requests create unbounded, never-expiring CIMD clie...
CVE-2026-82758 — ash-project ash_authentication_oauth2_server — CVSS 6.3 — ash_authentication_oauth2_server treats an empty resolved secret as valid, op...
CVE-2026-82757 — ash-project ash_authentication_oauth2_server — CVSS 6.3 — ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and sit...
CVE-2026-82756 — ash-project ash_authentication_oauth2_server — CVSS 6.3 — ash_authentication_oauth2_server interpolates a tenant-derived value into the...
CVE-2026-82755 — ash-project ash_authentication_oauth2_server — CVSS 6.3 — ash_authentication_oauth2_server serves tenant-specific OAuth metadata as pub...
CVE-2026-82754 — ash-project ash_authentication_oauth2_server — CVSS 6.3 — ash_authentication_oauth2_server aliases every protocol endpoint under /.well...