PT-2026-42282

Name of the Vulnerable Software and Affected Versions XCP-ng affected versions not specified XenServer affected versions not specified Xen XAPI affected versions not specified Description A role-based access control RBAC flaw exists in the Xen XAPI subsystem, specifically within the system...

GHSA-G99W-PRQ5-29C6

creationtimestamp| type| source ---|---|--- 2026-04-17 21:23:35+00:00| seen| Telegram/Q64crjFZRAFhidSIvAgPD7j9KS4Pns0gYZhyfeiZ9MDp9II...

CVE-2026-20136

creationtimestamp| type| source ---|---|--- 2026-04-15 18:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjwvn37e2t 2026-07-03 10:46:24+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqelg5ydk2w...

CVE-2025-40899

creationtimestamp| type| source ---|---|--- 2026-04-15 13:20:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjyeesk4e2o 2026-04-15 17:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjken4pvfd2a 2026-04-17 17:30:59+00:00| published-proof-of-concept|...

CVE-2026-5815

creationtimestamp| type| source ---|---|--- 2026-04-08 15:40:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116369839554011068 2026-04-09 00:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizix2d4o42j 2026-04-09 01:28:42+00:00| seen|...

GHSA-H7HG-F7CW-9XWC

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:16+00:00| seen| Telegram/yEepCm2Odjvpf0uI90hS1hr8dhkmidpoORZ8hNAmW5Xwfo...

GHSA-J3VJ-59VV-H4RC

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:16+00:00| seen| Telegram/yEepCm2Odjvpf0uI90hS1hr8dhkmidpoORZ8hNAmW5Xwfo...

CVE-2026-34890

creationtimestamp| type| source ---|---|--- 2026-04-02 14:35:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijgi2iuvz2q 2026-04-07 21:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miwpyfpbu62x...

CVE-2026-2233

creationtimestamp| type| source ---|---|--- 2026-03-26 14:47:35+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mhxtvifkikt2...

CVE-2026-23923

creationtimestamp| type| source ---|---|--- 2026-03-25 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqd54ze2r...

CVE-2026-23921

creationtimestamp| type| source ---|---|--- 2026-03-25 14:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqd54ze2r 2026-03-31 05:44:07+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3midhua6x3s22 2026-04-01 08:26:38+00:00| seen|...

CVE-2026-33163

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0-alpha.35 and 8.6.50, when a Parse.Cloud.afterLiveQueryEvent trigger is registered for a class, the LiveQuery server leaks protected fields and authData to all subscribers of that...

CVE-2026-33154

creationtimestamp| type| source ---|---|--- 2026-03-18 20:08:06+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pxrr-hq57-q35p 2026-03-20 21:22:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjh6ckfsh2f 2026-04-03 03:00:04+00:00|...

CVE-2026-32308

creationtimestamp| type| source ---|---|--- 2026-03-12 08:27:37+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-wvh5-6vjm-23qh 2026-03-12 22:35:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvhjztzdd2d 2026-03-18 06:00:14+00:0...

CVE-2026-23906

Affected Products and Versions Apache Druid Affected Versions: 0.17.0 through 35.x all versions prior to 36.0.0 Prerequisites: druid-basic-security extension enabled LDAP authenticator configured Underlying LDAP server permits anonymous bind Vulnerability Description An authentication bypass...

CVE-2026-23906 Apache Druid: Authentication Bypass via LDAP Anonymous Bind

Affected Products and Versions Apache Druid Affected Versions: 0.17.0 through 35.x all versions prior to 36.0.0 Prerequisites: druid-basic-security extension enabled LDAP authenticator configured Underlying LDAP server permits anonymous bind ...

CVE-2026-25223

creationtimestamp| type| source ---|---|--- 2026-02-03 22:19:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdyfetewlo2h...

CVE-2026-23009

creationtimestamp| type| source ---|---|--- 2026-01-25 15:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdb2mem7lr2c...

CVE-2026-1327

creationtimestamp| type| source ---|---|--- 2026-01-22 15:35:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczj6ptnps2i...

MiracleLinux 9 : firefox-102.3.0-6.el9.ML.1 (AXSA:2022-4111:35)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4111:35 advisory. Mozilla: Bypassing FeaturePolicy restrictions on transient pages CVE-2022-40959 Mozilla: Data-race when parsing non-UTF-8 URLs in threads...