CVE-2026-41336

creationtimestamp| type| source ---|---|--- 2026-04-23 22:27:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72mzgf5v2q 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE...

@agentholdings/agent-passport (>=0.1.0 <=0.1.5), @chrysb/alphaclaw (>=0.8.3 <=0.9.0-beta.7) +13 more potentially affected by CVE-2026-41336 via openclaw (>=2026.3.22 <=2026.3.28)

openclaw NPM version =2026.3.22, =0.1.0, =0.8.3, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 - tokaroo-openclaw-provider =0.1.1 Source cves: CVE-2026-41336 Source advisory: SNYK:JS-OPENCLAW-15899233...

CVE-2024-41336

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to...

CVE-2025-41336

creationtimestamp| type| source ---|---|--- 2025-11-04 14:25:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4sqgvhw6x2w...

CVE-2023-41336

ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an EntityType that is not part of the valid choices. The problem has been fixed in symfony/ux-autocomplete version 2.11.2...

CVE-2022-41336

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal versions 6.0.0 through 6.0.11 and all versions of 5.3, 5.2, 5.1, 5.0 management interface may allow a remote authenticated attacker to perform a stored cross site scripting XSS attack via sending...

CVE-2024-41336

creationtimestamp| type| source ---|---|--- 2025-02-27 21:35:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114078000233980303 2025-02-27 21:59:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6v7zydjl2y 2025-02-27 23:26:48+00:00| seen| https://t.me/cvedetector/190...

CVE-2024-41336

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to...

CVE-2024-41336

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to...

CVE-2023-41336

ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an EntityType that is not part of the valid choices. The problem has been fixed in symfony/ux-autocomplete version 2.11.2...

CVE-2023-41336 Prevent injection of invalid entity ids for "autocomplete" fields in symfony ux-autocomplete

ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an EntityType that is not part of the valid choices. The problem has been fixed in symfony/ux-autocomplete version 2.11.2...

CVE-2023-41336 Prevent injection of invalid entity ids for "autocomplete" fields in symfony ux-autocomplete

ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an EntityType that is not part of the valid choices. The problem has been fixed in symfony/ux-autocomplete version 2.11.2...

CVE-2023-41336

CVE-2023-41336 affects Symfony UX Autocomplete (ux-autocomplete). Under certain circumstances, an attacker could submit an entity ID for an EntityType that is not among valid choices. The issue has been fixed in version 2.11.2 of symfony/ux-autocomplete. Public sources (Red Hat, NVD, OSV, CVE lis...

CVE-2023-41336 Prevent injection of invalid entity ids for "autocomplete" fields in symfony ux-autocomplete

ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an EntityType that is not part of the valid choices. The problem has been fixed in symfony/ux-autocomplete version 2.11.2...

CVE-2022-41336

creationtimestamp| type| source ---|---|--- 2023-01-03 20:17:22+00:00| seen| https://t.me/cibsecurity/55814...

CVE-2022-41336

Fortinet FortiPortal is affected by CVE-2022-41336 due to an improper neutralization of input during web page generation (CWE-79). A remote authenticated attacker can trigger a stored cross-site scripting (XSS) via a specially crafted columnindex parameter in the FortiPortal management interface....

CVE-2021-41336

creationtimestamp| type| source ---|---|--- 2021-10-13 07:32:30+00:00| seen| https://t.me/cibsecurity/30481...

CVE-2021-41336

Windows Kernel Information Disclosure Vulnerability...

CVE-2021-41336

Technical details (affected component, root cause, impact, exploitability, and remediation) for CVE-2021-41336 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2021-41336 Windows Kernel Information Disclosure Vulnerability

...