CVE-2026-32764

creationtimestamp| type| source ---|---|--- 2026-03-19 23:16:17+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32764 2026-03-20 01:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhfoxt3su2e...

CVE-2026-0954

creationtimestamp| type| source ---|---|--- 2026-03-19 23:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhh45xuodo2x...

CVE-2026-33304

creationtimestamp| type| source ---|---|--- 2026-03-19 22:22:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgzzvs5vs2k...

CVE-2026-28282

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have a security flaw in the discourse-policy plugin which allowed a user with policy creation permission to gain membership access to any private/restricted groups. Once membership to a...

CVE-2026-4428

creationtimestamp| type| source ---|---|--- 2026-03-19 22:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgywqm6hc2n 2026-03-20 06:55:24+00:00| seen| https://bsky.app/profile/alexpulver.bsky.social/post/3mhhwppiyli2e 2026-03-20 21:06:22+00:00| seen|...

CVE-2026-29072 Discourse missing permission check for policy creation in discourse-policy

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0-latest.1, 2026.2.1, an...

CVE-2026-29072 Discourse missing permission check for policy creation in discourse-policy

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0-latest.1, 2026.2.1, an...

CVE-2026-29072

CVE-2026-29072 affects Discourse prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, where users not in the allowed policy creation groups could create functional policy acceptance widgets in posts under certain conditions. The root cause is a flaw in policy widget creation permissions that allow...

CVE-2026-29072 Discourse missing permission check for policy creation in discourse-policy

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, users who do not belong to the allowed policy creation groups can create functional policy acceptance widgets in posts under the right conditions. Versions 2026.3.0-latest.1, 2026.2.1, an...

CVE-2026-26138

creationtimestamp| type| source ---|---|--- 2026-03-19 21:32:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgxafqt4y2s...

CVE-2026-3547

creationtimestamp| type| source ---|---|--- 2026-03-19 21:22:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgwpqkx442v 2026-03-19 22:32:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhh2lsnd262v 2026-03-27 06:00:15+00:00| seen|...

CVE-2026-33321 OpenEMR has Out-of-Band Server-Side Request Forgery (OOB SSRF)

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the Notes - my encounters role can fill Eye Exam forms in patient encounters. The answers to the form can be printed out in PDF form. An Out-of-Band Server-Side...

CVE-2026-33321

OpenEMR is affected by CVE-2026-33321 due to an Out-of-Band Server-Side Request Forgery (OOB SSRF) in the PDF creation function. Before 8.0.0.2, users with the “Notes - my encounters” role could fill Eye Exam forms; the form answers are parsed as unescaped HTML when generating PDFs, enabling the ...

EUVD-2026-13164

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the Notes - my encounters role can fill Eye Exam forms in patient encounters. The answers to the form can be printed out in PDF form. An Out-of-Band Server-Side...

CVE-2026-4427

creationtimestamp| type| source ---|---|--- 2026-03-19 18:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgmxyb6p62x 2026-03-19 20:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgs4jtldi2t 2026-03-19 20:19:01+00:00| seen|...

CVE-2026-22731

creationtimestamp| type| source ---|---|--- 2026-03-19 18:03:42+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-259 2026-03-19 23:24:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhh5ikv3fc2t 2026-03-21 03:00:03+00:00| seen|...

CVE-2026-32867

creationtimestamp| type| source ---|---|--- 2026-03-19 17:56:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgl6tdckk2x...

CVE-2026-30402

creationtimestamp| type| source ---|---|--- 2026-03-19 17:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgktzze7n2u 2026-03-19 20:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgs4rn6ve2s 2026-03-19 20:19:09+00:00| seen|...

CVE-2026-33349

creationtimestamp| type| source ---|---|--- 2026-03-19 14:01:00+00:00| published-proof-of-concept| https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-jp2q-39xq-3w4g 2026-03-24 19:16:29+00:00| seen|...

GHSA-469J-VMHF-R6V7 NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

Vulnerability Description The NLTK downloader does not validate the subdir and id attributes when processing remote XML index files. Attackers can control a remote XML index server to provide malicious values containing path traversal sequences such as ../, which can lead to: 1. Arbitrary Directo...