CVE-2026-40282

creationtimestamp| type| source ---|---|--- 2026-04-17 22:09:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpwunafws2f...

EUVD-2026-23498

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

EUVD-2026-23480

Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camera, exposing visual information about the deployment environment...

CVE-2026-40285

creationtimestamp| type| source ---|---|--- 2026-04-17 21:18:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjptymtwiu2z 2026-04-17 22:06:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpwoi7zso26 2026-04-17 23:20:07+00:00| published-proof-of-concept|...

CVE-2026-40527

creationtimestamp| type| source ---|---|--- 2026-04-17 21:18:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjptyfkbwr26 2026-04-17 22:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpypmpub22q 2026-04-17 23:20:15+00:00| published-proof-of-concept|...

CVE-2026-35512

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation due to insufficient validation of client-controlled size parameters, allowing an out-of-bounds write via crafted PDUs. Pre-authentication...

CVE-2026-35512 xrdp: Heap buffer overflow in EGFX channel

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation due to insufficient validation of client-controlled size parameters, allowing an out-of-bounds write via crafted PDUs. Pre-authentication...

EUVD-2026-23519

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation due to insufficient validation of client-controlled size parameters, allowing an out-of-bounds write via crafted PDUs. Pre-authentication...

CVE-2026-35512 xrdp: Heap buffer overflow in EGFX channel

xrdp is an open source RDP server. Versions through 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation due to insufficient validation of client-controlled size parameters, allowing an out-of-bounds write via crafted PDUs. Pre-authentication...

CVE-2026-40461

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

CVE-2026-33093

Anviz CX7 Firmware is vulnerable to an unauthenticated POST to the device that captures a photo with the front facing camera, exposing visual information about the deployment environment...

CVE-2026-6437

creationtimestamp| type| source ---|---|--- 2026-04-17 19:48:06+00:00| seen| https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mjpowzo7s4h2...

CVE-2026-40461

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

CVE-2026-40461 Anviz Products Missing Authentication for Critical Function

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

CVE-2026-40461 Anviz Products Missing Authentication for Critical Function

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

CVE-2026-40461

CVE-2026-40461 affects Anviz CX2 Lite and CX7. The flaw allows unauthenticated POST requests to modify debug settings (e.g., enabling SSH), causing unauthorized state changes that can facilitate later compromise. According to the provided documents, affected components are the devices’ debug/admi...

cpython: POP3 command injection in user-controlled commands

A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...

CVE-2026-28212

creationtimestamp| type| source ---|---|--- 2026-04-17 19:20:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpngjfoyb26 2026-04-17 21:22:32+00:00| seen| Telegram/1afGr9vW06Zk0J3YeUW4MdlUf8TA53EPyuLeVgpLZqfvxp8 2026-04-17 21:42:17+00:00| seen|...

CVE-2026-33337

creationtimestamp| type| source ---|---|--- 2026-04-17 19:20:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpngcrnnp2l 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs...

CVE-2026-40525

creationtimestamp| type| source ---|---|--- 2026-04-17 19:20:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpng3yemd2m 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs 2026-05-05 19:37:07+00:00| seen|...