CVE-2026-40911

creationtimestamp| type| source ---|---|--- 2026-04-13 12:21:35+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-gph2-j4c9-vhhr 2026-04-21 22:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzy7zu4dk2z 2026-04-21 22:17:26+00:0...

CVE-2026-40876

creationtimestamp| type| source ---|---|--- 2026-04-13 07:52:17+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-5h6h-7rc9-3824 2026-04-21 21:27:12+00:00| seen| Telegram/F2G63fMNgyZcc0oNt6XGHExAkvTr9kUyS9C9Ki-AIDnnQ5g...

CVE-2026-39866

creationtimestamp| type| source ---|---|--- 2026-04-11 16:00:04+00:00| seen| https://t.me/GithubRedTeam/79889 2026-04-11 19:00:14+00:00| published-proof-of-concept| Telegram/d7cUv5SX7AU8oNgWDOFyTXjUFAToUPLHssqeqx0UdNgpQQ 2026-04-21 02:24:51+00:00| seen|...

GHSA-3RV7-9FHX-J654

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...

GHSA-2763-CJ5R-C79M

creationtimestamp| type| source ---|---|--- 2026-04-09 21:22:41+00:00| published-proof-of-concept| Telegram/3Mh7UNYEFXpMlnqwZliCqvVomRJKwd1lMrCq1dUb7HxJoTM...

GHSA-JFXC-V5G9-38XR

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:21+00:00| seen| Telegram/OYPeMWdUc2Y5vftMssiNoDYA806NyVd6-qxnWxvkgzfQI...

CVE-2026-1342

creationtimestamp| type| source ---|---|--- 2026-04-07 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1342 2026-04-08 00:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwzlkgt2f2i 2026-04-08 01:15:45+00:00|...

CVE-2026-34841 Axios npm Supply Chain Incident Impacting @usebruno/cli

Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan RAT. Users of @usebruno/cli who ran...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20460-1 Rating: important References: bsc1261249 Cross-References: CVE-2026-5272 CVE-2026-5273 CVE-2026-5274 CVE-2026-5275 CVE-2026-5276...

CVE-2026-34834

creationtimestamp| type| source ---|---|--- 2026-04-02 21:03:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik45nplvv2s 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...

CVE-2026-34717

creationtimestamp| type| source ---|---|--- 2026-04-02 19:27:20+00:00| published-proof-of-concept| Telegram/zJs9VhJAI5JOvrL4hzeWnrOleMDgHArbbwhOuzjaL80cudA 2026-04-21 02:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjxvjoeqzj2y...

GHSA-G2MG-CGR6-VMV7 AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints

Summary The AVideo CreatePlugin template for list.json.php does not include any authentication or authorization check. While the companion templates add.json.php and delete.json.php both require admin privileges, the list.json.php template was shipped without this guard. Every plugin that uses th...

CVE-2026-34732 AVideo: Missing Authentication in CreatePlugin list.json.php Template Affects 21 Endpoints

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the AVideo CreatePlugin template for list.json.php does not include any authentication or authorization check. While the companion templates add.json.php and delete.json.php both require admin privileges, the list.json.php...

CVE-2026-32970

creationtimestamp| type| source ---|---|--- 2026-03-31 13:27:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miebqozntc23...

CVE-2026-32048

creationtimestamp| type| source ---|---|--- 2026-03-21 22:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlzrs2naa2s 2026-03-22 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/security/advisories/GHSA-rm2p-j3r7-4x4j...

CVE-2025-67260

creationtimestamp| type| source ---|---|--- 2026-03-21 21:03:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwka4pdy2j...

CVE-2026-1800

creationtimestamp| type| source ---|---|--- 2026-03-21 20:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlt3xhcei26...

CVE-2026-2468

creationtimestamp| type| source ---|---|--- 2026-03-21 20:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhlt3q4cfs2f...

CVE-2026-33002

creationtimestamp| type| source ---|---|--- 2026-03-21 18:44:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mhlorq4jdy2i...

CVE-2026-4516

creationtimestamp| type| source ---|---|--- 2026-03-21 17:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhllyh6udy27...