GHSA-PJ6Q-4VQ4-R8CG

creationtimestamp| type| source ---|---|--- 2026-05-08 07:40:29+00:00| seen| https://gist.github.com/alon710/53845f36d8e625d63db830b2a5e081cb...

CVE-2026-44648

creationtimestamp| type| source ---|---|--- 2026-05-08 07:04:33+00:00| seen| Telegram/J5ZhgOkVkOGh10nZtfdrFvjUVC9Q3mZbF4dClPdmsBvh90 2026-05-08 09:00:04+00:00| seen| Telegram/9hUmSN7ug2EVEMoe54drMVTAFxceMDTI0JA9Kzj6srBhh7g 2026-05-11 20:48:45+00:00| published-proof-of-concept|...

CVE-2026-8137

creationtimestamp| type| source ---|---|--- 2026-05-08 06:58:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mld5q7w2ac2k 2026-05-09 21:03:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5fflbc22k...

CVE-2026-43944

creationtimestamp| type| source ---|---|--- 2026-05-08 06:48:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mld56ctfjr2q 2026-05-08 19:10:29+00:00| seen| https://gist.github.com/alon710/81381888e21682cdeae4882d5cd6667d 2026-05-09 21:03:10+00:00| seen|...

Remote Code Execution

Sonatype Nexus Repository is vulnerable to Remote Code Execution. The vulnerability is due to a flaw in the task management component, where an authenticated attacker with task creation permissions can bypass the nexus.scripts.allowCreation security control and execute arbitrary code...

CVE-2026-7568

creationtimestamp| type| source ---|---|--- 2026-05-08 05:51:09+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mlczxuq7ac2w 2026-05-08 08:02:15+00:00| seen| https://bsky.app/profile/slackers.it/post/3mldbcc7rmn2e 2026-05-10 07:22:51+00:00| seen|...

CVE-2026-7259

creationtimestamp| type| source ---|---|--- 2026-05-08 05:51:08+00:00| seen| https://bsky.app/profile/remirepo.net/post/3mlczxuq7ac2w 2026-05-08 08:02:11+00:00| seen| https://bsky.app/profile/slackers.it/post/3mldbca2ylb2w 2026-05-10 07:12:43+00:00| seen|...

CVE-2026-8127

creationtimestamp| type| source ---|---|--- 2026-05-08 05:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcyirnrqz2k...

CVE-2026-8126

creationtimestamp| type| source ---|---|--- 2026-05-08 05:19:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcy7t5y6s2v 2026-05-08 05:25:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlcyjsabed2f...

CVE-2026-8034

creationtimestamp| type| source ---|---|--- 2026-05-08 01:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlclelfnyz2q...

CVE-2026-8112

creationtimestamp| type| source ---|---|--- 2026-05-08 01:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcl3mddlw2c...

CVE-2026-8113

creationtimestamp| type| source ---|---|--- 2026-05-08 01:20:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcktwnxfo2k...

CVE-2026-7541

creationtimestamp| type| source ---|---|--- 2026-05-08 01:10:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlckbsejsj2t...

CVE-2026-41929

creationtimestamp| type| source ---|---|--- 2026-05-08 01:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcjubv62j2n...

CVE-2026-2710

creationtimestamp| type| source ---|---|--- 2026-05-08 00:54:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcjgcbm3i2q 2026-05-27 23:49:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0168 2026-05-28 04:49:55+00:00| seen|...

CVE-2026-3480

creationtimestamp| type| source ---|---|--- 2026-05-08 00:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlci76zisw2i...

GHSA-V7QW-HX66-4W9X

creationtimestamp| type| source ---|---|--- 2026-05-08 00:10:29+00:00| seen| https://gist.github.com/alon710/02ced0e410eaef25c3c5fc6010a5eb1d...

PT-2026-39294

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.3.5 through 0.8.12 Description A stored cross-site scripting XSS issue allows authenticated users with model creation permissions workspace.models to execute arbitrary JavaScript in the browsers of other users, including...

PT-2026-39272

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0 Description Open WebUI supports model composition through the base model id variable, allowing a user-defined model to reference a base model for inference. An access control flaw exists where the system...

PT-2026-39246

Name of the Vulnerable Software and Affected Versions free5GC versions 4.1.0 through 4.2.1 Description A nil-pointer dereference occurs in the PCF HandleCreateSmPolicyRequest function when a downstream OpenAPI consumer call to the UDR lookup returns a 404 Not Found error. The handler logs the err...