CVE-2026-5844

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5844 2026-04-09 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116373220738589930 2026-04-09 06:00:30+00:00| seen|...

CVE-2025-52222

creationtimestamp| type| source ---|---|--- 2026-04-08 19:43:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370795058822997...

CVE-2025-50673

creationtimestamp| type| source ---|---|--- 2026-04-08 19:16:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116370688878407736...

CVE-2026-5904

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 02:02:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372283835251474 2026-04-12 20:00:00+00:00| seen|...

CVE-2026-5858

creationtimestamp| type| source ---|---|--- 2026-04-08 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260409 2026-04-09 02:28:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116372387571865499 2026-04-09 17:03:07+00:00| seen|...

openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables

A flaw was found in the OpenSSH GSSAPI Generic Security Service Application Program Interface delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the...

CVE-2026-5815

creationtimestamp| type| source ---|---|--- 2026-04-08 15:40:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116369839554011068 2026-04-09 00:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizix2d4o42j 2026-04-09 01:28:42+00:00| seen|...

Security update for dnsdist (low)

openSUSE security update: security update for dnsdist ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20461-1 Rating: low References: bsc1250054 bsc1253852 Cross-References: CVE-2025-30187 CVE-2025-8671 CVSS scores: CVE-2025-30187 SUSE : 3.7...

CVE-2026-31790

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

CVE-2026-39846

creationtimestamp| type| source ---|---|--- 2026-04-07 09:16:34+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-phhp-9rm9-6gr2 2026-04-07 23:21:25+00:00| seen| Telegram/ob3ye0FCdfhceb6CimILWC3jRIWmZERTbGMc-OQRsW6HR0 2026-04-08 00:24:24+00:00| seen...

PQC-Enhanced QKD Networks: A Layered Approach

We present a layered and modular network architecture that combines Quantum Key Distribution QKD and Post-Quantum Cryptography PQC to provide scalable end-to-end security across long distance multi-hop, trusted-node quantum networks. To ensure interoperability and efficient practical deployment,...

SUSE CVE-2026-33990

Docker Model Runner DMR is software used to manage, run, and deploy AI models using Docker. Prior to version 1.1.25, Docker Model Runner contains an SSRF vulnerability in its OCI registry token exchange flow. When pulling a model, Model Runner follows the realm URL from the registry's...

CVE-2025-47389

creationtimestamp| type| source ---|---|--- 2026-04-06 16:58:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116358821584609761 2026-04-06 17:16:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitrd4eri325 2026-04-06 17:30:51+00:00| seen|...

CVE-2026-31063

creationtimestamp| type| source ---|---|--- 2026-04-06 16:31:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116358713535158087...

Improper Authentication Validation

github.com/mattermost/mattermost-server is vulnerable to improper authentication validation. The vulnerability is due to failure to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated attacker to perform account takeover ...

CVE-2019-25684

creationtimestamp| type| source ---|---|--- 2026-04-06 15:14:17+00:00| seen| https://infosec.exchange/ap/users/116075764941463905/statuses/116358406102447084 2026-04-09 21:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mj3rcqekpf2f...

CVE-2026-5687

creationtimestamp| type| source ---|---|--- 2026-04-06 10:27:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116357282336864740 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-06 23:31:59+00:00| seen|...

Security Bulletin: There is a vulnerability in cryptography-46.0.3-cp311-abi3-manylinux_2_34_x86_64.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-26007)

Summary There is a vulnerability in cryptography-46.0.3-cp311-abi3-manylinux234x8664.whl used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-26007 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes...

CVE-2026-31408

creationtimestamp| type| source ---|---|--- 2026-04-06 08:25:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116356802665376324 2026-04-06 10:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misz2ohvew2d 2026-05-05 20:00:00+00:00| seen|...

CVE-2026-5610

creationtimestamp| type| source ---|---|--- 2026-04-06 02:18:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mis75n53qe2t 2026-04-06 02:18:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mis75wzgi22p 2026-04-06 03:00:27+00:00| seen|...