CVE-2026-2586

creationtimestamp| type| source ---|---|--- 2026-05-19 17:48:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mm7x7isn7i2q 2026-05-20 01:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmapdmmvoi2n 2026-05-21 14:37:07+00:00| seen|...

CVE-2026-45187

creationtimestamp| type| source ---|---|--- 2026-05-19 17:46:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7x32oxvr2z...

CVE-2026-44159

creationtimestamp| type| source ---|---|--- 2026-05-19 17:44:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7wye2wgz2t 2026-05-20 01:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmapdezgul2s...

CVE-2026-5516

creationtimestamp| type| source ---|---|--- 2026-05-19 16:55:11+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mm7u7cccay2h...

CVE-2026-47323

creationtimestamp| type| source ---|---|--- 2026-05-19 16:51:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7tylplja2s 2026-05-27 07:19:43+00:00| seen| https://bsky.app/profile/cyberowi.pl/post/3mmsxqwetty2s 2026-06-01 11:03:09+00:00| seen|...

CVE-2026-47694

creationtimestamp| type| source ---|---|--- 2026-05-19 14:46:04+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-c8h8-vq34-9fw2 2026-05-29 17:01:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmyz7ktvwb27...

CVE-2025-40902

A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a malicious user whose username contains HTML tags. When a victim attempts to delete a group containing...

CVE-2026-44721

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting XSS vulnerability that allows any authenticated user with model creation permission workspace.models to execute arbitrary JavaScript in the browser of a...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.9.4 security update

The multicluster engine for Kubernetes 2.9 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.9 images The multicluster engine for Kubernetes provides the foundational components that are...

WordPress Xpro Addons — 140+ Widgets for Elementor plugin <= 1.5.0 - Missing Authorization to Unauthenticated Xpro Template Creation vulnerability

Missing Authorization to Unauthenticated Xpro Template Creation vulnerability discovered by at1as - Self-Employed in WordPress Plugin Xpro Elementor Addons versions = 1.5.0...

CVE-2025-40902

A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a malicious user whose username contains HTML tags. When a victim attempts to delete a group containing...

CVE-2026-45187 Apache OFBiz: Improper Authorization in Scheduled Job Creation Allows Low-Privileged Users to Submit System Jobs

Improper Authorization vulnerability in Apache OFBiz Webtools. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-42649

creationtimestamp| type| source ---|---|--- 2026-05-19 09:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mm73h6o3dx2i...

CVE-2026-8814

creationtimestamp| type| source ---|---|--- 2026-05-19 09:31:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm73g5n63l2h...

CVE-2026-8803

creationtimestamp| type| source ---|---|--- 2026-05-19 05:03:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116599487590126091...

CVE-2026-4293

creationtimestamp| type| source ---|---|--- 2026-05-19 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-139-05...

CVE-2026-33052

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user assigned the "addprofilethreshold" permission to create a global profile despite not having manageglobalprofilethreshold, by tampering with the userid parameter in a...

CVE-2026-33052

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.0 and 2.28.1 allow a low-privileged authenticated user assigned the "addprofilethreshold" permission to create a global profile despite not having manageglobalprofilethreshold, by tampering with the userid parameter in a...

PT-2026-41889

A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a malicious user whose username contains HTML tags. When a victim attempts to delete a group containing...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...