CVE-2026-6602

creationtimestamp| type| source ---|---|--- 2026-04-20 05:17:17+00:00| published-proof-of-concept| Telegram/cTJ4Lg1Zeyay-KuZSLE18KcBtUPYEffFV-pgjTOYRDW1Fe8 2026-04-20 07:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvyorsogq2p...

CVE-2026-22555

creationtimestamp| type| source ---|---|--- 2026-04-20 05:04:51+00:00| seen| https://bsky.app/profile/vmorecloud.bsky.social/post/3mjvoyk7fjb2y 2026-06-14 20:06:14+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fhx7-m96w-mv29 2026-07-05 20:01:03+00:0...

CVE-2026-28737

creationtimestamp| type| source ---|---|--- 2026-04-20 05:04:51+00:00| seen| https://bsky.app/profile/vmorecloud.bsky.social/post/3mjvoyk7fjb2y 2026-06-14 20:13:42+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-9cpj-qc93-vw8v 2026-07-05 20:00:48+00:0...

CVE-2026-6592

creationtimestamp| type| source ---|---|--- 2026-04-20 04:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvnakp2dp2v...

CVE-2026-6586

creationtimestamp| type| source ---|---|--- 2026-04-20 04:23:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvmonthwz2r...

CVE-2026-6585

creationtimestamp| type| source ---|---|--- 2026-04-20 04:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvlh2kdxd2p...

CVE-2026-6590

creationtimestamp| type| source ---|---|--- 2026-04-20 03:56:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvl6gp25g2k...

CVE-2026-5958

creationtimestamp| type| source ---|---|--- 2026-04-20 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-5958 2026-04-24 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkan46tfml2w 2026-05-04 16:27:13+00:00| seen|...

CVE-2025-13480

creationtimestamp| type| source ---|---|--- 2026-04-20 02:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2025-13480 2026-04-20 11:39:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwezimq2l2e...

CVE-2026-6579

creationtimestamp| type| source ---|---|--- 2026-04-20 00:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjv6yj77vb2v...

Owner-Harm: A Missing Threat Model for AI Agent Safety

Existing AI agent safety benchmarks focus on generic criminal harm cybercrime, harassment, weapon synthesis, leaving a systematic blind spot for a distinct and commercially consequential threat category: agents harming their own deployers. Real-world incidents illustrate the gap: Slack AI...

CVE-2026-32955

creationtimestamp| type| source ---|---|--- 2026-04-19 19:30:00+00:00| seen| https://jvn.jp/en/vu/JVNVU94271449 2026-04-20 05:17:09+00:00| seen| Telegram/oT3io0aR7EQyKUnAhTuUuKTmw-PFwRgwwLAn7oSA51QT1kY 2026-04-20 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjvs3zrp3e2c...

CVE-2026-6561

creationtimestamp| type| source ---|---|--- 2026-04-19 09:44:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjto5hwjsw2c...

CVE-2026-35587

creationtimestamp| type| source ---|---|--- 2026-04-19 08:33:30+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-g5pq-48mj-jvw8 2026-04-19 10:05:10+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mjtpcnano52s 2026-04-21 01:18:26+00:00|...

PT-2026-37048

Name of the Vulnerable Software and Affected Versions D-Link DI-8100 version 16.07.26A1 Description A buffer overflow can be triggered remotely via the POST Parameter Handler component. The issue exists within the url rule asp function of the '/url rule.asp' endpoint. Recommendations At the momen...

PT-2026-33689

Next AI Draw.io is a next.js web application that integrates AI capabilities with draw.io diagrams. Prior to 0.4.15, the embedded HTTP sidecar contains three POST handlers /api/state, /api/restore, and /api/history-svg that process incoming requests by accumulating the entire request body into a...

CVE-2026-33031

creationtimestamp| type| source ---|---|--- 2026-04-18 12:09:40+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-x234-x5vq-cc2v 2026-04-20 22:35:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxjpn57bz2i 2026-04-20 22:53:46+00:00|...

CVE-2026-41254

Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...

EUVD-2026-23668

Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...

CVE-2026-41254

Little CMS (lcms2) up to version 2.18 contains an integer overflow in CubeSize within cmslut.c because the overflow check is performed after the multiplication. This is documented across multiple sources (NVD/NIST, CVE-2026-41254; Ubuntu USN-8209-1; Alpine/FreeBSD/Debian advisories). Ubuntu advis...