CVE-2026-6977

creationtimestamp| type| source ---|---|--- 2026-04-25 12:48:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkd3aiptsl2t...

CVE-2026-41163

creationtimestamp| type| source ---|---|--- 2026-04-25 11:17:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkcw5o2cdu2s 2026-05-09 05:21:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfisnqiqh2e...

CVE-2026-31674

creationtimestamp| type| source ---|---|--- 2026-04-25 10:20:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464839048739557 2026-04-25 22:24:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467685885034222 2026-05-05 20:00:00+00:00| seen|...

CVE-2026-5748

creationtimestamp| type| source ---|---|--- 2026-04-25 08:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcmxj2xzh2h...

CVE-2026-6951

creationtimestamp| type| source ---|---|--- 2026-04-25 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116463817713877211 2026-04-25 06:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkcegnv3pf2l 2026-04-25 07:06:02+00:00| seen|...

CVE-2026-40894

creationtimestamp| type| source ---|---|--- 2026-04-25 03:10:25+00:00| seen| https://bsky.app/profile/startdebugging.bsky.social/post/3mkc2wk6mhx2a...

CVE-2026-39920

creationtimestamp| type| source ---|---|--- 2026-04-24 17:19:23+00:00| published-proof-of-concept| Telegram/izuLnFsi0kO0A2H5Dx71PRMcc4LiTVfuRwLjXwzmOGc60yQ 2026-04-24 17:19:31+00:00| published-proof-of-concept| Telegram/FPQxil1P7tPI78qOg-WRCqlMyjImNa5-xFn-dcI6eBMsRo 2026-04-25 09:00:28+00:00| see...

CVE-2026-25660

creationtimestamp| type| source ---|---|--- 2026-04-24 15:22:27+00:00| published-proof-of-concept| Telegram/lvQKk-ZCMh3Q3qpeojegtiwsEvYSJJ9oeMubqB3D8wrl-U 2026-04-25 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116464879334896806 2026-04-25 10:30:30+00:00| seen|...

CVE-2026-32210

creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:09+00:00| published-proof-of-concept| Telegram/kiTcjsXT1hi2Y3u94e7GhzIuEtNJE-kdjO7sui75MorBPg 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE 2026-04-25 01:01:03+00:00| seen|...

GHSA-Q93Q-V844-JRQP

creationtimestamp| type| source ---|---|--- 2026-04-21 21:26:25+00:00| seen| Telegram/zADwex3kLz9IaLHwxMwQfRAPY0yfg2SR1HrZ5uE72Qmc...

GHSA-J6QP-J853-QRFF

creationtimestamp| type| source ---|---|--- 2026-04-21 21:26:25+00:00| seen| Telegram/zADwex3kLz9IaLHwxMwQfRAPY0yfg2SR1HrZ5uE72Qmc...

CVE-2026-23757

creationtimestamp| type| source ---|---|--- 2026-04-20 19:48:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxaei2ymu2p...

OESA-2026-1951 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

CVE-2026-31417

A flaw was found in the Linux kernel's X.25 network protocol implementation net/x25. An attacker could potentially trigger an integer overflow in the x25sock.fraglen variable when accumulating packets. This oversight, combined with the fraglen not being properly reset, may lead to system...

EUVD-2026-21108

OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by triggering local reconnection to silently...

📄 Vaadin 25.x Authentication Bypass

An authentication bypass affects Vaadin versions 6.8.13, 14.x, 23.x, 24.x, and 25.x when used with Spring Security, due to inconsistent path pattern matching on reserved framework routes. Accessing the /VAADIN endpoint without a trailing slash can bypass security filters, allowing unauthenticated...

CVE-2026-35164

creationtimestamp| type| source ---|---|--- 2026-04-06 19:25:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitykuak322n 2026-04-06 19:29:44+00:00| seen| Telegram/RmP7l-K41x9UoCBscD5W8eizA4yDJaPJqAKKOeWwXNyu-8 2026-04-07 06:02:51+00:00| seen|...

BIT-NODE-2026-21715

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync.native without the required read permission checks, while all comparable filesystem functions correctly enforce them. As a result, code running under --permission with restricted --allow-fs-read can still use...

CVE-2026-34217

creationtimestamp| type| source ---|---|--- 2026-04-03 14:07:54+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-hg73-4w7g-q96w 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ 2026-04-11 09:34:25+00:00| seen|...

CVE-2026-23411

creationtimestamp| type| source ---|---|--- 2026-04-01 11:25:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miglfjzl5p22 2026-04-02 17:37:03+00:00| seen| Telegram/37miVMXR04DKfwyt7TTlg-rZzunXudUntV94ZrNBpzOyTo 2026-04-07 18:00:00+00:00| seen|...