CVE-2026-42002

creationtimestamp| type| source ---|---|--- 2026-05-21 13:13:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeiqfn6rr2o 2026-05-25 06:30:59+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mmnu4shov22n 2026-05-28 04:01:07+00:00| seen|...

CVE-2025-71212

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2025-71212

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2025-71212

CVE-2025-71212 affects Trend Micro Apex One Virus Scan Engine. A local attacker who can run low-privileged code can exploit a link-following weakness to escalate privileges via the VSApiNt.sys driver, as described by ZDI and mirrored in NVD. The vulnerability exists in the scan engine and can lea...

CVE-2026-5434

creationtimestamp| type| source ---|---|--- 2026-05-21 13:01:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmei3zkwn62t...

CVE-2026-42396

creationtimestamp| type| source ---|---|--- 2026-05-21 12:45:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeh6cs6se2k 2026-05-28 04:01:08+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmv55liidj2y...

CVE-2026-99999

creationtimestamp| type| source ---|---|--- 2026-05-21 12:44:45+00:00| seen| https://bsky.app/profile/gonzokata.bsky.social/post/3mmeh53pwfk22 2026-06-19 12:04:49+00:00| seen| https://gist.github.com/shweta-tripathi-1519/c957e66dd8f0e7892e135a18982c486a...

CVE-2026-44068

creationtimestamp| type| source ---|---|--- 2026-05-21 10:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmeb6tek5q2i...

CVE-2026-44055

creationtimestamp| type| source ---|---|--- 2026-05-21 10:26:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mme7fmzvxm2e 2026-05-22 07:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgeemiega26...

CVE-2026-44058

creationtimestamp| type| source ---|---|--- 2026-05-21 10:24:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mme7brv46j2n 2026-06-01 00:01:26+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmo4sw523...

CVE-2026-44059

creationtimestamp| type| source ---|---|--- 2026-05-21 10:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mme72tfapa2e 2026-06-01 00:01:26+00:00| seen| https://bsky.app/profile/slackers.it/post/3mn6rmo4sw523...

CVE-2026-46680

creationtimestamp| type| source ---|---|--- 2026-05-21 10:00:04+00:00| seen| https://t.me/GithubRedTeam/85189 2026-05-21 11:00:14+00:00| seen| Telegram/srrws2Goqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI 2026-05-21 21:00:05+00:00| seen| Telegram/6gh1HJgE3RFVn7K8UtbcJPpJwEYzEQXCykvkUTLZjGZEDc 2026-05-2...

CVE-2026-48148

creationtimestamp| type| source ---|---|--- 2026-05-21 08:44:47+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-cv96-5348-p5p8 2026-05-27 19:35:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuavyucc42o...

CVE-2026-4858 Path traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.

Mattermost versions 11.6.x = 11.6.0, 11.5.x = 11.5.3, 11.4.x = 11.4.4, 10.11.x = 10.11.14 fail to check integration URL for path traversal which allows an malicious authenticated user to call an arbitrary API via system admin Mattermost auth token using via path traversal in integration action...

CVE-2026-44051

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink creation...

GHSA-C2C9-MFW7-P8HW

creationtimestamp| type| source ---|---|--- 2026-05-21 05:40:51+00:00| seen| https://gist.github.com/alon710/feabaa614915bfed4bc482d4a78d8681...

CVE-2018-8740

creationtimestamp| type| source ---|---|--- 2026-05-21 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-03...

CVE-2026-9150

creationtimestamp| type| source ---|---|--- 2026-05-21 02:36:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmdf6lbaxp2v 2026-06-05 13:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkaxh5hdb2j 2026-06-09 12:00:58+00:00| seen|...

GHSA-F5X6-7QGP-JHF3

creationtimestamp| type| source ---|---|--- 2026-05-21 00:45:42+00:00| seen| https://gist.github.com/FuzzysTodd/4e10f5b327d09a37dc02a2a08f442f94...

PT-2026-42581

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.1 Description Stored Cross-Site Scripting XSS occurs via the 'external-link' page cvName because the updateCollectionAliasExternal function bypasses sanitization. Stored XSS is a flaw where malicious scripts...