CVE-2026-4503

creationtimestamp| type| source ---|---|--- 2026-04-30 21:45:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqllcixu326 2026-04-30 22:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqoxati4x2t...

CVE-2026-42281

creationtimestamp| type| source ---|---|--- 2026-04-30 21:00:54+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-ph6f-2cvq-79hq 2026-05-01 03:00:05+00:00| seen| Telegram/Bh4iyBQIMN2Hl9Jl9GcGtuPw1PskodE0qn4w68HKrpiOc 2026-05-11 16:50:45+00:0...

CVE-2022-50992

creationtimestamp| type| source ---|---|--- 2026-04-30 20:51:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqikfiedi2v 2026-04-30 21:23:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqkdmhs2v2t 2026-07-08 01:03:22+00:00| exploited|...

CVE-2026-40601

creationtimestamp| type| source ---|---|--- 2026-04-30 19:20:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqdh4eymd2q 2026-04-30 19:49:00+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mkqf2pttnz2b...

CVE-2026-35514

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited does not validate any invite token, authentication header, or session. Any unauthenticated attacker can call this endpoi...

CVE-2026-42593

creationtimestamp| type| source ---|---|--- 2026-04-30 18:31:56+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-3cv5-q585-h563 2026-05-14 17:49:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltevnjauu2r...

CVE-2026-42591

creationtimestamp| type| source ---|---|--- 2026-04-30 18:31:27+00:00| published-proof-of-concept| https://github.com/gotenberg/gotenberg/security/advisories/GHSA-rm4c-xj6x-49mw 2026-05-14 17:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mltd3zcdo52v 2026-05-21 11:37:06+00:0...

EUVD-2026-26405

Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. In version 4.9.0, the endpoint POST /user/invited does not validate any invite token, authentication header, or session. Any unauthenticated attacker can call this endpoi...

Arbitrary Argument Injection

Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the WriteMetadata process. An attacker can manipulate files, create or overwrite arbitrary files, and establish symlinks or hard links by injecting specially crafted metadata values containing newline...

CVE-2026-36959

creationtimestamp| type| source ---|---|--- 2026-04-30 17:25:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq52xwf6d2p 2026-04-30 17:43:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkq62mg5c72l...

CVE-2026-7399

creationtimestamp| type| source ---|---|--- 2026-04-30 15:18:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkpvx5momi2n 2026-04-30 16:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq243etvt2q 2026-04-30 16:37:56+00:00| seen|...

CVE-2026-0205

creationtimestamp| type| source ---|---|--- 2026-04-30 13:55:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkprcb5i6n2c 2026-05-01 02:58:40+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mkr52zptik2e 2026-07-21 04:00:07+00:00| seen|...

CVE-2026-4412

creationtimestamp| type| source ---|---|--- 2026-04-30 11:49:01+00:00| seen| https://bsky.app/profile/newstecnicas.info.ve/post/3mkpkaf3h422m 2026-04-30 14:07:27+00:00| seen| https://bsky.app/profile/newstecnicas.info.ve/post/3mkprxu5j6c2r 2026-05-01 00:36:13+00:00| seen|...

CVE-2026-7191

creationtimestamp| type| source ---|---|--- 2026-04-30 11:45:24+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mkpjzyn5la2r...

CVE-2026-42512

creationtimestamp| type| source ---|---|--- 2026-04-30 10:50:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116493268554939900...

CVE-2026-31692 rtnetlink: add missing netlink_ns_capable() check for peer netns

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlinknscapable check for peer netns rtnlnewlink lacks a CAPNETADMIN capability check on the peer network namespace when creating paired devices veth, vxcan, netkit. This allows an unprivileged user with a...

CVE-2026-31692 rtnetlink: add missing netlink_ns_capable() check for peer netns

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlinknscapable check for peer netns rtnlnewlink lacks a CAPNETADMIN capability check on the peer network namespace when creating paired devices veth, vxcan, netkit. This allows an unprivileged user with a...

CVE-2026-39457

creationtimestamp| type| source ---|---|--- 2026-04-30 10:23:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116493161945002037 2026-04-30 13:12:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkpowf5zx72k 2026-04-30 18:07:35+00:00| seen|...

CVE-2026-37545

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:19+00:00| seen| https://gist.github.com/sgInnora/7c9ad4f604c0872802351bfee709b972...

CVE-2026-37554

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:17+00:00| seen| https://gist.github.com/sgInnora/45128ae15d52df7238680a8f2da8359f 2026-05-11 20:29:17+00:00| seen| https://gist.github.com/tw89Coder/cd011dc1842625f821c171e41e812fbc...