CVE-2026-33635

iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545. Starting in version 2.0.0 and prior to version 2.12.2, .ics serialization does not properly sanitize URI property values, enabling ICS injection through attacker-controlled input, adding...

iCalendar injection vulnerability

iCalendar is an open-source Ruby library for processing iCalendar format files. Versions 2.0.0 to 2.12.2 of iCalendar contain a vulnerability due to improper cleanup of URI attribute values during .ics serialization, which may lead to ICS injection attacks...

CVE-2026-33635: Improper Neutralization of CRLF Sequences

iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545. Starting in version 2.0.0 and prior to version 2.12.2, .ics serialization does not properly sanitize URI property values, enabling ICS injection through attacker-controlled input, adding...

PT-2026-27632

Name of the Vulnerable Software and Affected Versions icalendar affected versions not specified Description The software does not properly sanitize URI property values during .ics serialization, leading to ICS injection. This allows attackers to inject arbitrary calendar lines through controlled...

CVE-2026-31903

creationtimestamp| type| source ---|---|--- 2026-03-19 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-07 2026-03-21 02:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjziogwzp2u 2026-03-21 23:00:49+00:00| seen|...

CVE-2019-19789

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2022-22516

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2019-9008

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2021-29242

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2018-20026

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2024-30172

creationtimestamp| type| source ---|---|--- 2026-03-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-03...

CVE-2026-28256

creationtimestamp| type| source ---|---|--- 2026-03-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01 2026-03-12 19:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv5cud77e2v 2026-03-27 15:17:14+00:00| seen|...

CVE-2026-28254

creationtimestamp| type| source ---|---|--- 2026-03-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01 2026-03-12 19:22:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv4q7yz4v2o 2026-03-27 17:22:00+00:00| published-proof-of-concept|...

Delta Electronics CNCSoft-G2

RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker achieving remote code execution on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...

CVE-2026-26288

creationtimestamp| type| source ---|---|--- 2026-03-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08 2026-03-06 17:04:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfs72eq4o2n 2026-03-07 04:30:32+00:00| seen|...

CVE-2026-27027

creationtimestamp| type| source ---|---|--- 2026-03-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08...

CVE-2026-26051

creationtimestamp| type| source ---|---|--- 2026-03-03 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06 2026-03-06 16:53:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgfrn5gu3f2y 2026-03-07 06:00:28+00:00| seen|...

CVE-2026-24517

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10 2026-02-27 02:31:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfso6cgu5u2e 2026-02-27 05:37:03+00:00| seen|...

CVE-2025-48022

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-09...

CVE-2026-21658

creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01 2026-02-27 13:49:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftu22bvdg2x 2026-02-27 13:58:23+00:00| seen|...