CVE-2026-20186

creationtimestamp| type| source ---|---|--- 2026-04-15 16:21:39+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116409637135769540 2026-04-15 17:19:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfos5erv2f 2026-04-15 18:37:28+00:00| seen|...

CVE-2026-20184

creationtimestamp| type| source ---|---|--- 2026-04-15 16:21:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116409637135769540 2026-04-15 17:19:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfor53q72w 2026-04-15 17:21:24+00:00| seen|...

CVE-2026-20148

creationtimestamp| type| source ---|---|--- 2026-04-15 16:21:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116409637135769540 2026-04-15 18:42:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkeftjj42k 2026-04-16 11:30:08+00:00| seen|...

CVE-2026-20180

creationtimestamp| type| source ---|---|--- 2026-04-15 16:21:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116409637135769540 2026-04-15 17:18:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfoj4tgf2w 2026-04-15 17:21:15+00:00| seen|...

Security Bulletin: Vulnerability in libssh affects IBM Netezza Appliance

Summary The libssh package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-8277 Vulnerability Details CVEID:CVE-2025-8277 DESCRIPTION: A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KE...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 2.0) - Insufficient Verification in cryptography package

Summary IBM Cloud Pak for Data System CPDS 2.0 uses the Python cryptography package version 3.3.2, which contains a critical vulnerability CVE-2026-26007 affecting elliptic curve cryptography operations. The package fails to verify that public key points belong to the expected prime-order subgrou...

CVE-2026-39399

creationtimestamp| type| source ---|---|--- 2026-04-15 00:00:44+00:00| seen| https://infosec.exchange/users/offseq/statuses/116405780065874253 2026-04-15 00:00:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjilo7aecu2j 2026-04-15 01:17:47+00:00| seen|...

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2026-27304

creationtimestamp| type| source ---|---|--- 2026-04-14 23:21:52+00:00| seen| Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E 2026-04-15 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116406132959257406 2026-04-15 01:30:31+00:00| seen|...

Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities

Microsoft has released its monthly security update for April 2026, which includes 165 vulnerabilities affecting a wide range of products, including eight Microsoft marked as "critical." CVE-2026-23666 is a critical Denial of Service DoS vulnerability that affects the .NET framework. Successful...

CVE-2026-27245

creationtimestamp| type| source ---|---|--- 2026-04-14 20:07:48+00:00| seen| Telegram/vjfxnNTg64imjnjxPGtl8BfvNjTDmt0KKDhXRC5WEaV7Sg 2026-04-15 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116407902478004814 2026-04-15 09:00:32+00:00| seen|...

CVE-2026-27246

creationtimestamp| type| source ---|---|--- 2026-04-14 20:07:48+00:00| seen| Telegram/vjfxnNTg64imjnjxPGtl8BfvNjTDmt0KKDhXRC5WEaV7Sg 2026-04-15 07:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116407548892597256 2026-04-15 07:30:36+00:00| seen|...

EUVD-2026-22641

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network...

EUVD-2026-22315

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...

CVE-2025-54510

creationtimestamp| type| source ---|---|--- 2026-04-14 17:15:16+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116404185501428756 2026-04-14 19:20:06+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mji3ydnc3s2z 2026-07-25 15:00:07+00:00| seen|...

CVE-2026-33824

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

...

CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

...

CVE-2026-33824

CVE-2026-33824 is a Windows IKE Extension double-free remote code execution affecting IKEV2; described as wormable by ZDI with exploitation possible over UDP/500-4500 and no user interaction. Affected: Windows IKE Service Extensions; impact is remote code execution with SYSTEM-level access on unp...

CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.2, FortiSOAR on-premise 7.5.0 through 7.5.1,...