Latest post
Neon & Silicon: A Cyberpunk Tour of My Homelab
A neon-noir tour of my self-hosted homelab: segmented networks, a hidden front door, layered backups, and why owning your own stack is worth it.
Threat board
All CVEs on NVD| Score | CVE | Product and summary | Published |
|---|---|---|---|
| 10.0 CRITICAL | CVE-2026-120338 | Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0… No fix listed yet · NVD analysis pending | |
| 10.0 CRITICAL | CVE-2026-120198 | A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to… No fix listed yet · NVD analysis pending | |
| 10.0 CRITICAL | CVE-2026-120195 | A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument… No fix listed yet · NVD analysis pending | |
| 10.0 CRITICAL | CVE-2026-120189 | A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftpd of the component TFTP Upload Filename Handler. The manipulation leads to stack-based buffer… No fix listed yet · NVD analysis pending | |
| 10.0 CRITICAL | CVE-2026-61826 | Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/api/plex/oauth.py` omits `@authenticate` on its Resource handlers, while normal APIs require an API key and no global… No fix listed yet · NVD analysis deferred | |
| 10.0 CRITICAL | CVE-2026-112816 | Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the… No fix listed yet · NVD analysis deferred |
Updated 18:37 UTCnext update ~19:07 UTC
Patch status for every CVESources: NVD and CISA KEV. This product uses the NVD API but is not endorsed or certified by the NVD.