EUVD-2026-23007

IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPRight to incorrectly create new...

CVE-2026-40118

creationtimestamp| type| source ---|---|--- 2026-04-15 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN88396700...

GHSA-78X4-6X83-JX75

creationtimestamp| type| source ---|---|--- 2026-04-15 19:21:23+00:00| seen| Telegram/7Ck-SXA1c6Vf9FqVW81avKVix-fYO39OzelndhESQPxXBQ...

CVE-2025-60991

creationtimestamp| type| source ---|---|--- 2026-04-15 19:20:49+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjkmiin6ad26...

CVE-2026-20152

creationtimestamp| type| source ---|---|--- 2026-04-15 19:17:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkmbzpqxh2o 2026-04-16 17:19:57+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116415528739254723 2026-04-16 18:00:00+00:00| seen|...

GHSA-5R37-QPWQ-2JHH

creationtimestamp| type| source ---|---|--- 2026-04-15 18:59:08+00:00| seen| https://bsky.app/profile/Whiskeyomega.cupoftea.social.ap.brid.gy/post/3mjklbnicupa2 2026-04-23 21:26:07+00:00| published-proof-of-concept| Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9UsDC-frBku-7BiY...

CVE-2026-41323

creationtimestamp| type| source ---|---|--- 2026-04-15 18:43:09+00:00| published-proof-of-concept| https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4 2026-04-24 05:18:58+00:00| seen| Telegram/kIuLSWSF-lSSH53f04z2OEjKv8ykvXtTNiYc9dOAOt4c 2026-04-24 05:45:50+00:00| seen|...

GHSA-CW73-5F7H-M4GV Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands npm, npx accept argument flags that enable...

Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands npm, npx accept argument flags that enable...

CVE-2026-6297

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkujjp3g72k 2026-04-15 23:26:09+00:00| seen|...

CVE-2026-6359

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:26:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjktjab2id2o 2026-04-15 23:27:00+00:00|...

CVE-2026-6364

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 22:13:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkw4zvfwd2m 2026-04-19 20:00:00+00:00| seen|...

CVE-2026-6307

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 22:00:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvg6qnoi2w 2026-04-15 23:26:54+00:00|...

CVE-2026-6316

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:49:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkusi5bdi23 2026-04-15 23:27:00+00:00|...

CVE-2026-6372

creationtimestamp| type| source ---|---|--- 2026-04-15 17:18:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfobkscn2w 2026-04-15 19:07:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjklq4pkp62t 2026-04-15 19:22:05+00:00| published-proof-of-concept|...

CVE-2026-4682

creationtimestamp| type| source ---|---|--- 2026-04-15 16:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjke7xpblv2x 2026-04-15 17:20:59+00:00| published-proof-of-concept| Telegram/pEQZ-8eBs6x0m1Bix4bkgGlpKgKFYdZvEwxqbKXARXHeBmM 2026-04-15 19:48:06+00:00| seen|...

CVE-2026-30625

Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands npm, npx accept argument flags that enable...

CVE-2026-20202 Improper Input Validation during User Account Creation in Splunk Enterprise

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, and 9.3.2411.127, a user who holds a role that contains the high-privilege capability editusercould create a special...

CVE-2026-20202 Improper Input Validation during User Account Creation in Splunk Enterprise

In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, and 9.3.2411.127, a user who holds a role that contains the high-privilege capability editusercould create a special...

CVE-2026-41304

creationtimestamp| type| source ---|---|--- 2026-04-15 14:35:01+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-xr6f-h4x7-r6qp 2026-04-22 01:19:46+00:00| seen| Telegram/K73t--MeF8g6jG3bb2C-tygRugHSGj3gpQqllzPf61swe44 2026-04-22 02:22:08+00:00| seen|...