What broke in the last two weeks
Exploited vulnerabilities, critical package advisories and data breaches, collected from CISA, GitHub and Have I Been Pwned every 30 minutes. Nobody edits it.
2 live incidents, 0 exploited in the wild. Updated 05:31 UTC.
Sources
- CISA KEV
0 exploited in the wild
- GitHub advisories
2 critical
- Have I Been Pwned
0 breaches
Filtered: Critical. Show everything
Friday, October 9
- CVE-2026-68582 Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA) Critical, go ·
- CVE-2026-107806 Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite Critical, go ·
Every half hour
- Up to 30 minutesFirst, CISA, GitHub and Have I Been Pwned publish; we poll all three every 30 minutes.
- MinutesThen records merge by CVE, and the pages, feeds and JSON follow within minutes.
- Minutes to an hourLast, a model translates each one into Portuguese, checked so no ID, version or link changes.