Security Advisory 0135

Security Advisory 0135 PDF Date: April 7, 2026 Revision | Date | Changes ---|---|--- 1.0 | April 7th, 2026 | Initial release 1.1 | April 28th, 2026 | Correction to fixed releases fixed in 4.32.10, not 4.32.9 The CVE-ID tracking this issue: CVE-2025-31133 CVSSv3.1 Base Score: 7.8/10...

WWBN AVideo 代码问题漏洞

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 26.0 contained code vulnerabilities. These vulnerabilities stemmed from incomplete verification of server-side requests for the downloadURL value, allowing authenticated uploader...

WordPress plugin Link Whisper Free 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-30891

ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCRM application to create a link that, when visited by an authenticated user, would redirect them to any URL chosen by an attacker if they clicked 'Cancel' button on the page. For...

LinkAce 代码问题漏洞

LinkAce is a self-hosted repository developed by Kevin Woblick, designed to collect links to your favorite websites. Versions of LinkAce prior to 2.5.4 had code vulnerabilities. These vulnerabilities stemmed from insufficient checks on private IP addresses, allowing authenticated users to read...

SUSE CVE-2026-31408

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix use-after-free in scorecvframe due to missing sockhold scorecvframe reads conn-sk under scoconnlock but immediately releases the lock without holding a reference to the socket. A concurrent close can free the...

CVE-2026-5686

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-06 23:42:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miugvbhty22i 2026-05-29 06:07:29+00:00| seen|...

CVE-2026-35444

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:19+00:00| seen| Telegram/F-tbnQCu7KGoJ0u4OEM4TknejxA1jNnRqA-1uSHs9aPRtPw 2026-04-16 10:07:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjm5zedicc2d 2026-06-21 13:44:52+00:00| seen|...

CVE-2026-35391

creationtimestamp| type| source ---|---|--- 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M 2026-04-06 23:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miug2g7egb2o...

CVE-2026-35213

creationtimestamp| type| source ---|---|--- 2026-04-06 23:10:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuf54aevj27 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M...

CVE-2026-35395

creationtimestamp| type| source ---|---|--- 2026-04-06 23:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuestsrv22d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:39:23+00:00| seen|...

CVE-2026-5707

creationtimestamp| type| source ---|---|--- 2026-04-06 23:01:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuemkuwn322 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-07 04:11:35+00:00| seen|...

CVE-2026-5683

creationtimestamp| type| source ---|---|--- 2026-04-06 22:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuedmgehs2i...

CVE-2026-35442

creationtimestamp| type| source ---|---|--- 2026-04-06 22:46:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miudrphust2d 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:00:27+00:00| seen|...

CVE-2026-5709

creationtimestamp| type| source ---|---|--- 2026-04-06 22:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miucg2xmrl2o 2026-04-06 23:22:29+00:00| seen| Telegram/dGmhhMfdsalqLxLHWWo3a-Yu-qP75XdMdTLlCh9YxDeGRw 2026-04-10 21:37:07+00:00| seen|...

CVE-2026-22675

creationtimestamp| type| source ---|---|--- 2026-04-06 22:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuc4p6oll2s...

CVE-2026-35409

creationtimestamp| type| source ---|---|--- 2026-04-06 22:10:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miubr544fh2j 2026-04-06 23:22:09+00:00| seen| Telegram/m01DCzKFy5kAtT9sjIWhyEARPkz65AkyqWTYGgzfJ1E6g 2026-04-07 05:20:37+00:00| seen|...

GHSA-P5RH-VMHP-GVCW

creationtimestamp| type| source ---|---|--- 2026-04-06 19:28:28+00:00| published-proof-of-concept| Telegram/nNz4AuVWmZsX2vjW9IzWDm0wIi6EKHH8QFJ1lll9JUSWJdI 2026-04-07 02:48:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miurceg26g22...

CVE-2026-35020

...

CVE-2026-35020 Anthropic Claude Code & Agent SDK OS Command Injection via TERMINAL Environment Variable

Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection vulnerability in the command lookup helper and deep-link terminal launcher that allows local attackers to execute arbitrary commands by manipulating the TERMINAL environment variable. Attackers can inject shell...