CVE-2026-35537

creationtimestamp| type| source ---|---|--- 2026-04-11 13:05:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj7vmva5fe2e 2026-04-11 13:50:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj7y5gquzy2a...

SUSE CVE-2026-1525

Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names e.g., Content-Length and content-length. This produces malformed HTTP/1.1 requests with multiple conflicting Content-Length values on the wire. Who is impacted: Applications using...

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

...

CVE-2026-40315

creationtimestamp| type| source ---|---|--- 2026-04-10 19:32:00+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x783-xp3g-mqhp 2026-04-14 05:18:05+00:00| published-proof-of-concept| Telegram/pSCCNMgE3Fpe3zcCZgeqk6LWYSbZiR1jqFncMFnyrTX8KY 2026-04-14 07:48:06+00:00| seen|...

EUVD-2025-209401

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Case Themes Case Theme User allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a before 1.0.4...

CVE-2025-5804

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Case Themes Case Theme User case-theme-user allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a through 1.0.4...

CVE-2025-5804 WordPress Case Theme User < 1.0.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Case Themes Case Theme User case-theme-user allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a through 1.0.4...

CVE-2025-5804

CVE-2025-5804 affects the WordPress plugin Case Theme User (versions before 1.0.4). The issue is an Unauthenticated Local File Inclusion due to Improper Control of Filename for Include/Require Statement in PHP, enabling LFI in Case Theme User prior to 1.0.4. Public references from Patchstack/Word...

CVE-2025-5804 WordPress Case Theme User < 1.0.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Case Themes Case Theme User allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a before 1.0.4...

CVE-2026-6005

creationtimestamp| type| source ---|---|--- 2026-04-10 06:22:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4ooaskiy2i...

WordPress plugin Case Theme User 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

PT-2026-31913

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Case Themes Case Theme User allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a before 1.0.4...

CVE-2026-5443

creationtimestamp| type| source ---|---|--- 2026-04-09 16:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3afshbpu27 2026-04-14 20:03:31+00:00| seen| Telegram/BoOqWaO3KXSkNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ...

CLSA-2026-1775739369 pki-servlet-engine: Fix of 3 CVEs

CVE-2024-52316: fix JASPIC authentication bypass on ServerAuthContext exception - CVE-2025-55754: fix ANSI escape sequence injection in log messages - CVE-2025-46701: fix CGI servlet case sensitivity bypass of security constraints...

CVE-2026-25430

creationtimestamp| type| source ---|---|--- 2026-04-09 11:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2pfe25hm2c...

CVE-2026-5853

creationtimestamp| type| source ---|---|--- 2026-04-09 07:39:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2cifymxh2s 2026-04-09 08:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2evtxrk32i 2026-04-09 09:15:57+00:00| published-proof-of-concept|...

SUSE CVE-2026-31842

Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c. The ischunkedtransfer function uses strcmp to compare the header value against "chunked", even though RFC 7230 specifies that...

SUSE CVE-2026-33810

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the...

CLSA-2026-1775688216 augeas: Fix of CVE-2025-2588

CVE-2025-2588: fix null pointer dereference in recaseexpand...

CVE-2026-33461

creationtimestamp| type| source ---|---|--- 2026-04-08 18:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miywwtrvw623 2026-04-08 23:32:47+00:00| seen| Telegram/ZztUGlJiiCH0mZAuu7v3RF9KN1NNH1hWH4kt4dDN5ep1QI 2026-04-09 09:08:48+00:00| seen|...