EUVD-2026-16482

Open WebUI's processfilesbatch endpoint missing ownership check, allows unauthorized file overwrite...

CVE-2026-34375

creationtimestamp| type| source ---|---|--- 2026-03-27 15:18:05+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-pm37-62g7-p768 2026-03-27 21:01:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi2zbbua3q2d 2026-03-27 21:22:34+00:0...

CVE-2026-4982

creationtimestamp| type| source ---|---|--- 2026-03-27 15:17:36+00:00| seen| Telegram/LBnoZEkIgYZcAalPkuHtbpp5d2DNhQfVZICyQCgDXFXXQ 2026-03-27 16:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2kshkcor2q...

CVE-2025-40240

creationtimestamp| type| source ---|---|--- 2026-03-27 15:15:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mi2fvy5bw326 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2022-49985

creationtimestamp| type| source ---|---|--- 2026-03-27 15:15:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mi2fvy5bw326...

CVE-2026-4266

creationtimestamp| type| source ---|---|--- 2026-03-27 13:39:45+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-289 2026-03-27 16:01:47+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mi2ij54vyq2f 2026-03-30 15:22:38+00:00| seen|...

CVE-2026-34361

creationtimestamp| type| source ---|---|--- 2026-03-27 13:35:01+00:00| published-proof-of-concept| https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-vr79-8m62-wh98 2026-03-31 17:28:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miepa2j5jo2d 2026-03-3...

CVE-2026-1995

creationtimestamp| type| source ---|---|--- 2026-03-27 12:55:52+00:00| seen| https://bsky.app/profile/oxfemale.bsky.social/post/3mi264ootpj22 2026-03-29 05:15:56+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mi6fe3r6es2g...

CVE-2026-0394

creationtimestamp| type| source ---|---|--- 2026-03-27 12:13:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi23qsvkva2g...

CVE-2023-7339

creationtimestamp| type| source ---|---|--- 2026-03-27 12:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi23b6ijjr24...

WordPress Blog2Social: Social Media Auto Post & Scheduler plugin <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Meta Deletion via 'b2sresetsocialmetatags' AJAX Action vulnerability discovered by s00me00ne in WordPress Plugin Blog2Social versions = 8.8.2...

CVE-2026-3457

creationtimestamp| type| source ---|---|--- 2026-03-27 11:16:46+00:00| seen| Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60 2026-03-27 12:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi25ffwdni2q...

OESA-2026-1737 freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI...

CVE-2026-25100

creationtimestamp| type| source ---|---|--- 2026-03-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-25099/ 2026-03-27 16:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2j2byy2o2q...

CVE-2026-25099

creationtimestamp| type| source ---|---|--- 2026-03-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-25099/ 2026-03-27 12:53:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi25z4fuux2i 2026-03-27 15:17:14+00:00| seen|...

CVE-2025-59032

creationtimestamp| type| source ---|---|--- 2026-03-27 09:51:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhzts74hux2g 2026-03-27 11:16:46+00:00| seen| Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60 2026-03-27 12:37:50+00:00| seen|...

CVE-2026-29955

creationtimestamp| type| source ---|---|--- 2026-03-27 09:00:13+00:00| published-proof-of-concept| Telegram/8LISbnUQFWA86ak3ubyaCZMxs8RQbiaZ8ONexaBDd7tfzQU 2026-04-13 20:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfp2mok6g2g...

CVE-2024-14028

creationtimestamp| type| source ---|---|--- 2026-03-27 08:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhzoatwa4522...

BIT-DISCOURSE-2026-33408 Discourse has Improper Authorization in "Post Edits" Report For Moderators

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available...

BIT-DISCOURSE-2026-33394 Discourse leaks PM post edits to moderators

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, the Post Edits admin report /admin/reports/postedits leaked the first 40 characters of raw post content from private messages and secure categories to moderators who shouldn't have access. Version...