CVE-2026-21382

creationtimestamp| type| source ---|---|--- 2026-04-06 16:24:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitogzqoza2p 2026-04-06 17:32:33+00:00| seen| Telegram/mCOSTqPiKnBsCJ7wgUXnJ9sN78eybUSXsSSUkGvS3qtdJ4k...

CVE-2026-21381

creationtimestamp| type| source ---|---|--- 2026-04-06 16:24:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitogsu44t2h 2026-04-06 17:32:33+00:00| seen| Telegram/mCOSTqPiKnBsCJ7wgUXnJ9sN78eybUSXsSSUkGvS3qtdJ4k 2026-04-09 04:20:09+00:00| seen|...

CVE-2026-34402

creationtimestamp| type| source ---|---|--- 2026-04-06 16:21:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitoauvoed2h 2026-04-06 17:32:38+00:00| seen| Telegram/n5Nok-XlRHEre5O89LvYLplT02rw8wZYprnGR4USXlLgM...

CVE-2026-34981 whisperX REST API: SSRF in download_from_url() — URL validation happens after HTTP request, extension bypass via .mp3

The whisperX API is a tool for enhancing and analyzing audio content. From 0.3.1 to 0.5.0, FileService.downloadfromurl in app/services/fileservice.py calls requests.geturl with zero URL validation. The file extension check occurs AFTER the HTTP request is already made, and can be bypassed by...

CVE-2026-33727

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability allows code execution as root from the low-privilege pihole account. Important context: the pihole account uses nologin, so this is not a direct...

CVE-2026-39376

creationtimestamp| type| source ---|---|--- 2026-04-06 15:20:43+00:00| published-proof-of-concept| https://github.com/kagisearch/fastfeedparser/security/advisories/GHSA-4gx2-pc4f-wq37 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

CVE-2026-4181

creationtimestamp| type| source ---|---|--- 2026-04-06 15:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mitktw2na22u...

CVE-2026-33727 Pi-hole has a Local Privilege Escalation (post-compromise, pihole -> root).

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability allows code execution as root from the low-privilege pihole account. Important context: the pihole account uses nologin, so this is not a direct...

CVE-2026-33727

Pi-hole 6.4 contains a local privilege escalation: attacker-controlled content in /etc/pihole/versions can be sourced by root-run Pi-hole scripts, enabling root code execution from the pihole user (nologin but not preventing code execution). The issue arises in a post-compromise scenario and is f...

CVE-2026-33727 Pi-hole has a Local Privilege Escalation (post-compromise, pihole -> root).

Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Version 6.4 has a local privilege-escalation vulnerability allows code execution as root from the low-privilege pihole account. Important context: the pihole account uses nologin, so this is not a direct...

CVE-2026-5643

creationtimestamp| type| source ---|---|--- 2026-04-06 14:21:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mithlohrfk2i...

CVE-2026-5644

creationtimestamp| type| source ---|---|--- 2026-04-06 14:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitheeiass2i...

CVE-2026-5673

creationtimestamp| type| source ---|---|--- 2026-04-06 14:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitgkbcqxj2n...

CVE-2026-3524

creationtimestamp| type| source ---|---|--- 2026-04-06 13:19:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mite3atvz52j 2026-04-06 14:06:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitgpdrgeb2t 2026-04-06 15:21:35+00:00| seen|...

CVE-2026-5646

creationtimestamp| type| source ---|---|--- 2026-04-06 13:15:55+00:00| published-proof-of-concept| Telegram/xB-J5caT8OaTqFu1G6vNbp6TxSF4mn8gOhVa9PlynjV1S3c 2026-04-06 14:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mithtx5tmq2s...

CVE-2026-5645

creationtimestamp| type| source ---|---|--- 2026-04-06 13:15:55+00:00| published-proof-of-concept| Telegram/xB-J5caT8OaTqFu1G6vNbp6TxSF4mn8gOhVa9PlynjV1S3c 2026-04-06 14:31:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miti4vlk2x22...

CVE-2026-39368

creationtimestamp| type| source ---|---|--- 2026-04-06 12:41:08+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-q4x6-6mm2-crg9 2026-04-07 20:25:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwmexmsb423...

Google Wants to Transition to Post-Quantum Cryptography by 2029

Google says that it will fully transition to post-quantum cryptography by 2029. I think this is a good move, not because I think we will have a useful quantum computer anywhere near that year, but because crypto-agility is always a good thing. Slashdot thread...

CVE-2026-5635

creationtimestamp| type| source ---|---|--- 2026-04-06 10:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit3npwoam2n...

CVE-2026-5637

creationtimestamp| type| source ---|---|--- 2026-04-06 10:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2suo7fu2g 2026-04-06 11:15:48+00:00| published-proof-of-concept| Telegram/Z9ilPgM8N-vlYjxsXZCfRRqxqCtJw33K7Kit4-JTjgItxjI...