CVE-2026-45303

creationtimestamp| type| source ---|---|--- 2026-05-08 20:57:40+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-4vrc-m9ch-6m3r 2026-05-16 00:25:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlwljnotjv2n...

CVE-2026-45301

creationtimestamp| type| source ---|---|--- 2026-05-08 20:57:06+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-r8wh-8m7r-fh33 2026-05-20 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmbxwk4kdn2s 2026-06-15 17:02:28+00:00|...

GHSA-628H-Q48J-JR6Q Phoenix: Long-poll NDJSON body splitting causes large memory allocation

Summary An unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client to allocate a large amount of memory with a HTTP request. A handful of concurrent requests can be sufficient to let the node run out of memory. See also...

CVE-2026-7807

creationtimestamp| type| source ---|---|--- 2026-05-08 20:24:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlekqzgaqt2k 2026-05-08 23:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlevg6x6ic2n 2026-06-05 04:37:05+00:00| seen|...

CVE-2026-39918

Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.php configuration file without escaping or validation. Attackers can inject arbitrary PHP code by breaking out of the string context in t...

CVE-2026-41924

WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the settime or StartSniffer functions. Attackers can...

CVE-2026-37431

creationtimestamp| type| source ---|---|--- 2026-05-08 19:57:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlejbistw72c...

CVE-2026-29975

creationtimestamp| type| source ---|---|--- 2026-05-08 19:57:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlejbb5kei2n...

GHSA-45M8-CPM2-3V65 Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access Affected Component Socket.IO session state and role-check callsites: - backend/openwebui/socket/main.py lines 330-351, connect handler — role snapshotted into SESSIONPOOL - backend/openwebui/socket/main.py lin...

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access Affected Component Socket.IO session state and role-check callsites: - backend/openwebui/socket/main.py lines 330-351, connect handler — role snapshotted into SESSIONPOOL - backend/openwebui/socket/main.py lin...

CVE-2026-42180 Lemmy: SSRF in /api/v3/post via Webmention dispatch

Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is created in a public community, the backend asynchronously sends a Webmention to the attacker-controll...

CVE-2026-42180

Lemmy prior to version 0.19.18 is affected by a server-side request forgery: an authenticated low-privilege user can create a link post via POST /api/v3/post, and when posted to public communities Lemmy dispatches a Webmention to the target. The code path only validates the URL’s syntax/scheme (h...

CVE-2026-42180 Lemmy: SSRF in /api/v3/post via Webmention dispatch

Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is created in a public community, the backend asynchronously sends a Webmention to the attacker-controll...

CVE-2026-42181 Lemmy: SSRF and internal image disclosure in post link metadata via unvalidated og:image

Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy fetches metadata for user-supplied post URLs and, under the default StoreLinkPreviews image mode, downloads the preview image through local pict-rs. While the top-level page URL is checked against internal IP...

CVE-2026-41574

creationtimestamp| type| source ---|---|--- 2026-05-08 19:23:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlehe3i6pe2i...

CVE-2026-44499

creationtimestamp| type| source ---|---|--- 2026-05-08 18:38:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleeu5cpdq2v 2026-05-08 20:10:29+00:00| seen| https://gist.github.com/alon710/b2fb36b6ecfecf3424b0cb12c54264f5...

CVE-2026-41570

creationtimestamp| type| source ---|---|--- 2026-05-08 17:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlecp3w7il2q...

CVE-2026-7864

creationtimestamp| type| source ---|---|--- 2026-05-08 17:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlebzycadc2p...

CVE-2026-41524

creationtimestamp| type| source ---|---|--- 2026-05-08 17:44:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlebsllkdo2t 2026-05-08 18:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleebyjkhy2q...

CVE-2026-41690

creationtimestamp| type| source ---|---|--- 2026-05-08 17:29:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleazdfstp2c 2026-05-08 18:36:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleepyw5wy2i...