CVE-2026-3572

creationtimestamp| type| source ---|---|--- 2026-03-20 23:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3572 2026-04-08 11:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miy6wha4on2c...

CVE-2026-3368

creationtimestamp| type| source ---|---|--- 2026-03-20 23:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3368...

CVE-2026-3350

creationtimestamp| type| source ---|---|--- 2026-03-20 23:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3350...

CVE-2026-33426 Discourse users can edit or synonymize hidden tags they can't see

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users with tag-editing permissions could edit and create synonyms for tags hidden in restricted tag groups, even if they lacked visibility into those tags. Versions 2026.3.0-latest.1,...

CVE-2026-33037

creationtimestamp| type| source ---|---|--- 2026-03-20 23:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmopgk4k2c 2026-03-20 23:04:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjmu4qtlm2t 2026-03-23 23:40:09+00:00| seen|...

CVE-2026-33291 Discourse user can create Zendesk tickets even when it does not have access to topic

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators can create Zendesk tickets for topics they do not have access to view. This affects all forums that use the Zendesk plugin. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2...

CVE-2026-33291 Discourse user can create Zendesk tickets even when it does not have access to topic

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, moderators can create Zendesk tickets for topics they do not have access to view. This affects all forums that use the Zendesk plugin. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2...

CVE-2026-33291

The CVE concerns Discourse (with the Zendesk plugin) where moderators can create Zendesk tickets for topics they are not allowed to view. Affected versions are prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2. The published fixes are included in 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, respec...

CVE-2026-33236

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

CVE-2026-33236

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

CVE-2026-4493

creationtimestamp| type| source ---|---|--- 2026-03-20 22:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjkczsobw2o...

CVE-2026-32310

creationtimestamp| type| source ---|---|--- 2026-03-20 22:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjjsfu5mw2x...

CVE-2026-30580

creationtimestamp| type| source ---|---|--- 2026-03-20 21:54:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjiwy2tbu2e...

CVE-2026-30579

creationtimestamp| type| source ---|---|--- 2026-03-20 21:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjii2ekok2e...

CVE-2026-33512

creationtimestamp| type| source ---|---|--- 2026-03-20 21:45:54+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-mwjc-5j4x-r686 2026-03-23 19:23:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrvjxw3h2u 2026-03-23 19:40:41+00:0...

CVE-2026-33177

CVE-2026-33177 affects Statamic CMS (Laravel/Git-powered). Prior to versions 5.73.14 and 6.7.0, low-privileged Control Panel users could bypass authorization by submitting requests to the field action processing endpoint with attacker-controlled field definitions, enabling creation of taxonomy te...

CVE-2026-33156

creationtimestamp| type| source ---|---|--- 2026-03-20 21:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjgvn3l7v25 2026-03-27 22:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi35npq7me2a...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

UBUNTU-CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

AVideo Affected by Unauthenticated Disk Space Exhaustion via Unlimited Temp File Creation in aVideoEncoderChunk.json.php

Summary The aVideoEncoderChunk.json.php endpoint is a completely standalone PHP script with no authentication, no framework includes, and no resource limits. An unauthenticated remote attacker can send arbitrary POST data which is written to persistent temp files in /tmp/ with no size cap, no rat...