CVE-2026-4132

creationtimestamp| type| source ---|---|--- 2026-04-22 11:16:16+00:00| published-proof-of-concept| Telegram/4Ce1p0rz1Dwr7V7nrROOlVFZDWJLAA0UiQHZa7V2KBLsc 2026-04-24 03:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk7lq65bhb24...

CVE-2026-6776

creationtimestamp| type| source ---|---|--- 2026-04-21 17:18:10+00:00| seen| Telegram/GomAqAKioRw5ORwyc6ugTkWhk08fHowYPUM-Q49l2oeUgi0 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 02:01:24+00:00| seen|...

CVE-2026-33516

creationtimestamp| type| source ---|---|--- 2026-04-17 21:23:11+00:00| published-proof-of-concept| Telegram/GxkwnkIopWEGLbC11BdcbbYVRqOADIf4t7f5VnXFMKG7Kn8 2026-04-24 11:15:46+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mkaflhxcmk22...

OESA-2026-1951 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

CVE-2026-5426 KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

CVE-2026-41323

creationtimestamp| type| source ---|---|--- 2026-04-15 18:43:09+00:00| published-proof-of-concept| https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4 2026-04-24 05:18:58+00:00| seen| Telegram/kIuLSWSF-lSSH53f04z2OEjKv8ykvXtTNiYc9dOAOt4c 2026-04-24 05:45:50+00:00| seen|...

CVE-2026-33805

creationtimestamp| type| source ---|---|--- 2026-04-15 02:57:11+00:00| published-proof-of-concept| https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-gwhp-pf74-vj37 2026-04-15 10:24:33+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mjjojknm3c2t 2026-04-15...

CVE-2026-29111 affecting package systemd for versions less than 250.3-24

CVE-2026-29111 affecting package systemd for versions less than 250.3-24. A patched version of the package is available...

CVE-2026-31049

An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field...

CVE-2026-34238

creationtimestamp| type| source ---|---|--- 2026-04-14 01:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg7unxtcr23 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...

RHSA-2026:7670 Red Hat Security Advisory: nodejs:24 security update

Bulletin has no description...

GHSA-3RV7-9FHX-J654

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo...

GO-2026-4888 Fleet: Password reset tokens remain valid after password change for 24 hours in github.com/fleetdm/fleet

Fleet: Password reset tokens remain valid after password change for 24 hours in github.com/fleetdm/fleet. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

CVE-2026-23411

creationtimestamp| type| source ---|---|--- 2026-04-01 11:25:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miglfjzl5p22 2026-04-02 17:37:03+00:00| seen| Telegram/37miVMXR04DKfwyt7TTlg-rZzunXudUntV94ZrNBpzOyTo 2026-04-07 18:00:00+00:00| seen|...

UBUNTU-CVE-2026-33982

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpralignedoffsetrecalloc. This issue has been patched in version 3.24.2...

EUVD-2026-17225

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, there is a heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpralignedoffsetrecalloc. This issue has been patched in version 3.24.2...

EUVD-2026-17174

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

ALPINE-CVE-2026-21713

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

UBUNTU-CVE-2026-21713

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...

CVE-2026-21713

A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...