CVE-2026-32485

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:36+00:00| seen| Telegram/jNlDBTackbRa-OzLBD4eltRa4dE7lS0-uVg4cHfoz-Hg 2026-04-07 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miv2dr5xbv2w...

CVE-2026-31921

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:15+00:00| seen| Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco 2026-03-26 21:35:36+00:00| seen| Telegram/jNlDBTackbRa-OzLBD4eltRa4dE7lS0-uVg4cHfoz-Hg 2026-04-08 01:30:07+00:00| seen|...

CVE-2026-25317

creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk 2026-04-09 08:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2fdhm5md2e...

CVE-2026-23977

creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:43+00:00| published-proof-of-concept| Telegram/fY4No4paH3d0dcxL7eHJzi9nTjzGU82ddBovSTYQV2kvbQ 2026-04-10 01:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj46dfqtn32u...

CVE-2026-33148

creationtimestamp| type| source ---|---|--- 2026-03-26 20:49:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyi4fsfsn2o...

CVE-2026-33622 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate...

CVE-2026-33622

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate...

GO-2026-4713 File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely in github.com/filebrowser/filebrowser

File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely in github.com/filebrowser/filebrowser...

CVE-2026-3121

creationtimestamp| type| source ---|---|--- 2026-03-26 20:12:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfzxxcfd2d...

CVE-2026-33149

creationtimestamp| type| source ---|---|--- 2026-03-26 20:09:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfvikwi32i 2026-03-26 21:36:40+00:00| seen| Telegram/gdbQBvnuOgX0zlyJL9kfjxoCoTp9WBTGn5-zeTA4spKkwcA 2026-03-26 22:00:46+00:00| seen|...

CVE-2026-2436

creationtimestamp| type| source ---|---|--- 2026-03-26 20:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfnja7ff24...

CVE-2026-26213

thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter...

CVE-2026-33632

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33632 2026-03-26 20:29:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhygylyn442s 2026-03-26 21:36:49+00:00| seen|...

CVE-2026-33525

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33525 2026-03-26 19:54:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyf2uyiqb2j...

CVE-2026-33496

creationtimestamp| type| source ---|---|--- 2026-03-26 19:14:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhycs6ngy62j 2026-03-26 19:26:19+00:00| published-proof-of-concept| Telegram/Dv-WNIQSBfenZP-L8llbvWNomtb7L7cuRFseuDShUkzpu6g 2026-03-26 22:01:22+00:00| seen|...

CVE-2026-3108

creationtimestamp| type| source ---|---|--- 2026-03-26 19:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhycja6nam2t 2026-03-26 22:16:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhymxiazgq2d 2026-03-30 23:20:09+00:00| seen|...

CVE-2026-3098

creationtimestamp| type| source ---|---|--- 2026-03-26 19:05:09+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mhycc3upol2b 2026-03-27 03:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3098 2026-03-29 19:00:26+00:00| seen|...

CVE-2026-26213 thingino-firmware api.cgi Unauthenticated Command Injection in Captive Portal

thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter...

CVE-2026-26213

The CVE-2026-26213 issue affects thingino-firmware up to firmware-2026-03-16, where an unauthenticated OS command injection exists in the WiFi captive portal CGI script. An attacker can inject malicious code through unsanitized HTTP parameter names, exploiting eval in parse_query() and parse_post...

CVE-2026-32846

creationtimestamp| type| source ---|---|--- 2026-03-26 18:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyboazvuk22 2026-03-27 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/commit/4797bbc5b96e2cca5532e43b58915c051746fe37...