PT-2026-32916

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, the PENS Package Exchange Notification Services plugin endpoint at public/plugin/Pens/pens.php is accessible without authentication and accepts a user-controlled package-url parameter that the server fetche...

PT-2026-32663

Name of the Vulnerable Software and Affected Versions FortiSOAR PaaS versions 7.6.0 through 7.6.3 FortiSOAR PaaS versions 7.5.0 through 7.5.2 FortiSOAR PaaS versions 7.4 FortiSOAR PaaS versions 7.3 FortiSOAR on-premise versions 7.6.0 through 7.6.2 FortiSOAR on-premise versions 7.5.0 through 7.5.1...

KB5082142: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (April 2026)

The remote Windows host is missing security update 5082142. It is, therefore, affected by multiple vulnerabilities - Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. CVE-2026-33824 - Protection mechanism failure in Windows Shell allows an...

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2012-1854link is external Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability CVE-2020-9715link is external Adobe Acrobat...

CVE-2026-34865

creationtimestamp| type| source ---|---|--- 2026-04-13 07:43:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116396275433008023 2026-04-13 09:17:05+00:00| seen| Telegram/bcMGQo5yfO9RORBGyfkr5CsGhdtRQYWZD2qi5kLjohdbd-Q 2026-04-13 10:12:51+00:00| seen|...

CVE-2026-6138

creationtimestamp| type| source ---|---|--- 2026-04-13 00:44:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjdn6yuor22f 2026-04-13 00:56:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdnt4nxlc2o 2026-04-13 01:17:42+00:00| published-proof-of-concept|...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : OpenSSL vulnerabilities (USN-8155-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8155-1 advisory. Viktor Dukhovni discovered that OpenSSL incorrectly negotiated the expected preferred key exchange group when used as a TLS 1.3 serve...

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution...

CVE-2026-6168

creationtimestamp| type| source ---|---|--- 2026-04-12 21:50:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116393942185014498 2026-04-13 07:47:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjeeshd4l727 2026-04-13 09:17:05+00:00| seen|...

CVE-2026-6140

creationtimestamp| type| source ---|---|--- 2026-04-12 16:12:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116392613084228249 2026-04-12 16:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-6140 2026-04-13 01:30:39+00:00| seen|...

CVE-2026-6114

creationtimestamp| type| source ---|---|--- 2026-04-12 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116389853752980040 2026-04-12 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjbjdqk4ch2x 2026-04-12 05:16:17+00:00| published-proof-of-concept|...

CVE-2026-1116

creationtimestamp| type| source ---|---|--- 2026-04-12 03:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116389500215311211 2026-04-12 03:00:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjbecxvavp2b 2026-04-12 05:16:17+00:00| published-proof-of-concept|...

CVE-2026-6116

creationtimestamp| type| source ---|---|--- 2026-04-11 16:08:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116386935057135668 2026-04-12 05:43:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbnfgk3qt2h 2026-04-12 06:00:30+00:00| seen|...

CVE-2026-3691 OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose stored credentials on affected installations of OpenClaw. User interaction is required to exploit this vulnerability in that the target must initiate an OAuth authorization...

CVE-2026-33707

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:20+00:00| seen| Telegram/ZRwkJT-g6xqpr38tjocBfuP9bsA0qHKZRvqY91xv80DRmI 2026-04-11 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116383837578592718 2026-04-11 03:00:31+00:00| seen|...

CVE-2026-33698

creationtimestamp| type| source ---|---|--- 2026-04-10 21:24:11+00:00| seen| Telegram/FBFE1jRDxJPr8K8KBUfFYtlwI9wezi1OF7LpQ32tR7vo 2026-04-11 04:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116384191607006074 2026-04-11 04:30:32+00:00| seen|...

CVE-2026-5483

creationtimestamp| type| source ---|---|--- 2026-04-10 18:18:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116381783943440087 2026-04-10 19:17:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5zypohjg2o 2026-04-10 19:31:23+00:00| published-proof-of-concept|...

OPENSUSE-SU-2026:20506-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. bsc1260876 - CVE-2026-26007: missing validation can lead to security issues for signature verification ECDSA and shared key negotiati...

SUSE-SU-2026:21165-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. bsc1260876 - CVE-2026-26007: missing validation can lead to security issues for signature verification ECDSA and shared key negotiati...

SUSE-SU-2026:21021-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. bsc1260876 - CVE-2026-26007: missing validation can lead to security issues for signature verification ECDSA and shared key negotiati...