VulnCheck KEV: CVE-2023-21529

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2026-5629

creationtimestamp| type| source ---|---|--- 2026-04-05 20:01:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116353877163234817 2026-04-06 06:22:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mismskh3g72r 2026-04-06 06:54:56+00:00| seen|...

CVE-2026-5628

creationtimestamp| type| source ---|---|--- 2026-04-05 19:47:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116353821950719118 2026-04-06 06:05:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mislumlw4y2g 2026-04-06 06:22:26+00:00| seen|...

CVE-2026-5608

creationtimestamp| type| source ---|---|--- 2026-04-05 16:24:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116353023805462489 2026-04-06 01:18:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mis3t3gdkd2w 2026-04-06 01:30:26+00:00| seen|...

CVE-2026-5604

creationtimestamp| type| source ---|---|--- 2026-04-05 14:50:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116352654112501654 2026-04-05 23:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvjvspiw25 2026-04-06 01:15:46+00:00| published-proof-of-concept|...

CVE-2026-5558

creationtimestamp| type| source ---|---|--- 2026-04-05 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116351633087408088 2026-04-05 10:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3miqk6yojww2s 2026-04-05 12:46:36+00:00| seen|...

CVE-2026-26026

creationtimestamp| type| source ---|---|--- 2026-04-04 23:18:24+00:00| seen| https://infosec.exchange/users/decio/statuses/116348990508886715 2026-04-06 15:35:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitlp73ho32r 2026-04-06 15:42:02+00:00| seen|...

CVE-2026-3879

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report...

CVE-2026-27655

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report...

CVE-2026-28703

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report...

CVE-2026-3880

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report...

CVE-2026-4108

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report...

CVE-2026-4107

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report...

CVE-2026-28756

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report...

CVE-2026-5567

creationtimestamp| type| source ---|---|--- 2026-04-04 17:00:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116347502875060524 2026-04-05 15:16:27+00:00| published-proof-of-concept| Telegram/bba5KoRxZjw4aUqHfMWZuI7ux2762ZWKOY2q9V8MiGPKQ0 2026-04-05 15:29:21+00:00| seen|...

CVE-2026-5566

creationtimestamp| type| source ---|---|--- 2026-04-04 16:46:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116347447898521039 2026-04-05 14:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miqvwfzl642m 2026-04-05 15:16:27+00:00| published-proof-of-concep...

CVE-2026-5550

creationtimestamp| type| source ---|---|--- 2026-04-04 16:33:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116347396717928485 2026-04-05 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116351279339813810 2026-04-05 09:00:31+00:00| seen|...

CVE-2026-3666

creationtimestamp| type| source ---|---|--- 2026-04-04 13:15:35+00:00| seen| Telegram/8qeZbiU7PLPcFV4oPUIOuW2hk5ZEK8QzaRsPtyu7yDSJHM 2026-04-05 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mipgyrs7me2a 2026-04-05 00:00:46+00:00| seen|...

CVE-2026-28754

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report...

OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter

Summary Before OpenClaw 2026.4.2, the Gemini OAuth flow reused the PKCE verifier as the OAuth state value. Because the provider reflected state back in the redirect URL, the verifier could be exposed alongside the authorization code. Impact Anyone who could capture the redirect URL could learn bo...