CVE-2026-2476

creationtimestamp| type| source ---|---|--- 2026-03-20 20:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhjesgztx22m 2026-03-20 20:40:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mhjeshjqdj2u...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-4500

creationtimestamp| type| source ---|---|--- 2026-03-20 19:16:50+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4500...

CVE-2026-4226

creationtimestamp| type| source ---|---|--- 2026-03-20 19:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj77qw5fy2w...

CVE-2026-4487

creationtimestamp| type| source ---|---|--- 2026-03-20 18:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj6oa3qtt2u 2026-03-20 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjfxcngsv2u 2026-03-20 21:01:22+00:00| seen|...

CVE-2026-22898

creationtimestamp| type| source ---|---|--- 2026-03-20 18:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj64dabvf24 2026-03-23 10:37:14+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-qnap-7 2026-03-23 14:40:08+00:00| seen|...

EUVD-2026-13742

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system...

CVE-2026-32989

creationtimestamp| type| source ---|---|--- 2026-03-20 18:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj5exdzgs2x 2026-03-20 21:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjfx7ep7m26 2026-03-20 21:01:15+00:00| seen|...

CVE-2026-30580

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system...

CVE-2026-33501

creationtimestamp| type| source ---|---|--- 2026-03-20 18:08:24+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-96qp-8cmq-jvq8 2026-03-22 00:26:06+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/384 2026-03-23 16:16:51+00:00| seen|...

CVE-2026-33488

creationtimestamp| type| source ---|---|--- 2026-03-20 17:01:36+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-6m5f-j7w2-w953 2026-03-23 16:52:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqjhu2up52p 2026-03-25 03:40:08+00:00| seen|...

CVE-2026-33482

creationtimestamp| type| source ---|---|--- 2026-03-20 14:59:56+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-pmj8-r2j7-xg6c 2026-03-23 15:28:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqereajdu2p 2026-03-23 16:15:54+00:0...

CVE-2026-33476

creationtimestamp| type| source ---|---|--- 2026-03-20 13:54:07+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hhgj-gg9h-rjp7 2026-03-20 23:18:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjnnk52zv2d 2026-03-20...

CVE-2026-33130

creationtimestamp| type| source ---|---|--- 2026-03-20 13:38:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhinb7ryye2y...

CVE-2026-33136

creationtimestamp| type| source ---|---|--- 2026-03-20 13:27:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhimnjfqen2v 2026-03-20 20:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhjdop7oek23 2026-03-20 21:27:14+00:00| seen|...

Improper Access Control

OneUptime is vulnerable to Improper Access Control. The vulnerability is due to missing authorization checks on account creation APIs, which allows a low-privileged user to create new accounts via direct API requests...

CVE-2026-26939

creationtimestamp| type| source ---|---|--- 2026-03-20 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilocfjpg2q...

CVE-2026-33135

creationtimestamp| type| source ---|---|--- 2026-03-20 13:08:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhilkylyqa2e 2026-03-20 21:27:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjhgghtkz2v 2026-03-21 02:00:14+00:00| seen|...

BIT-PARSE-2026-32742 Parse Server session creation endpoint allows overwriting server-generated session fields

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0 and 8.6.42, an authenticated user can overwrite server-generated session fields sessionToken, expiresAt, createdWith when creating a session object via POST /classes/Session. Thi...