CVE-2026-9123

creationtimestamp| type| source ---|---|--- 2026-05-20 22:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmcvqccuii2n 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00|...

CVE-2026-34930

creationtimestamp| type| source ---|---|--- 2026-05-20 22:00:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90583059 2026-05-21 16:20:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmet6yzp7g2v 2026-05-21 18:00:00+00:00| seen|...

CVE-2026-34929

creationtimestamp| type| source ---|---|--- 2026-05-20 22:00:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90583059 2026-05-21 16:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeu7cozbq2k 2026-05-21 18:00:00+00:00| seen|...

CVE-2026-34928

creationtimestamp| type| source ---|---|--- 2026-05-20 22:00:00+00:00| seen| https://jvn.jp/en/vu/JVNVU90583059 2026-05-21 16:11:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmesor5egm2t 2026-05-21 18:00:00+00:00| seen|...

CVE-2026-6566

creationtimestamp| type| source ---|---|--- 2026-05-20 21:33:51+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmcu5kga3j2a...

CVE-2026-9102

creationtimestamp| type| source ---|---|--- 2026-05-20 21:12:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcszxk7gm2n...

CVE-2026-9141

creationtimestamp| type| source ---|---|--- 2026-05-20 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmcsfgqmlg2k 2026-05-21 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmdbhrxmv52l 2026-05-21 01:30:33+00:00| seen|...

CVE-2026-9136

creationtimestamp| type| source ---|---|--- 2026-05-20 20:57:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcs744lqz2p...

CVE-2026-45444

creationtimestamp| type| source ---|---|--- 2026-05-20 20:42:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcrfiwnk62p...

CVE-2026-9136

A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the record. Because the underlying framework treats a supplied primary key as an instruction to update...

CVE-2026-9111

creationtimestamp| type| source ---|---|--- 2026-05-20 20:03:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608690801419755 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...

CVE-2026-9087

creationtimestamp| type| source ---|---|--- 2026-05-20 19:16:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcmlpfepy2q...

GO-2026-4966 monetr: Server-side request forgery in Lunch Flow link creation and refresh in github.com/monetr/monetr

monetr: Server-side request forgery in Lunch Flow link creation and refresh in github.com/monetr/monetr...

CVE-2026-33137 XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform is a generic wiki platform. In versions starting with 15.10.6 and prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17, the POST /wikis/wikiName API executes a XAR import without...

CVE-2026-44924

creationtimestamp| type| source ---|---|--- 2026-05-20 18:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmckqoujmd2v...

CVE-2026-8342

creationtimestamp| type| source ---|---|--- 2026-05-20 18:40:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmckkh4dd52q...

CVE-2026-9136 Unauthorized ShadowAttribute modification in MISP via client-supplied identifier

A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the record. Because the underlying framework treats a supplied primary key as an instruction to update...

CVE-2026-9136

CVE-2026-9136 affects the ShadowAttribute proposal creation workflow in MISP. An add action accepted client-supplied ShadowAttribute data without stripping the id field, allowing an authenticated user to supply the identifier of an existing ShadowAttribute and cause an update instead of creating ...

CVE-2026-9136 Unauthorized ShadowAttribute modification in MISP via client-supplied identifier

A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the record. Because the underlying framework treats a supplied primary key as an instruction to update...

EUVD-2026-31151

A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the record. Because the underlying framework treats a supplied primary key as an instruction to update...