CVE-2026-8827

creationtimestamp| type| source ---|---|--- 2026-05-19 12:53:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7gotmhok2k 2026-05-19 13:01:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7h5lczbw2e...

CVE-2026-41054

creationtimestamp| type| source ---|---|--- 2026-05-19 12:47:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7gf7pxbp2e 2026-05-19 14:02:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7klht65r2b 2026-05-20 00:38:39+00:00| seen|...

CVE-2026-42009

creationtimestamp| type| source ---|---|--- 2026-05-18 16:51:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm5dkd55752e 2026-05-18 17:34:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mm5fx45bls2v 2026-05-19 20:10:47+00:00| seen|...

CVE-2026-7304

creationtimestamp| type| source ---|---|--- 2026-05-18 12:41:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm4vkipbja2p 2026-05-18 17:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2sswfb2n 2026-05-18 17:28:06+00:00| seen|...

CVE-2026-3637 Mattermost fails to enforce create_post permission when editing posts

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13, 11.4.x = 11.4.3 fail to check the createpost channel permission during post edit operations which allows an authenticated attacker with revoked posting privileges to modify their existing posts via direct API requests to the post update and...

CVE-2026-8775

creationtimestamp| type| source ---|---|--- 2026-05-18 03:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm3v3vvnbw26 2026-05-18 03:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116593342919880835 2026-05-18 03:00:39+00:00| seen|...

CVE-2026-8776

creationtimestamp| type| source ---|---|--- 2026-05-18 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mm3q346myt2v 2026-05-18 01:30:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116592989309624683 2026-05-18 03:00:46+00:00| seen|...

CVE-2026-8733

creationtimestamp| type| source ---|---|--- 2026-05-17 06:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlzoovg7ab26 2026-05-17 06:04:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588388488618469 2026-05-17 08:35:48+00:00| seen|...

CVE-2026-8724

creationtimestamp| type| source ---|---|--- 2026-05-17 04:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlzjnxg65o2y 2026-05-17 04:30:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588034576668128 2026-05-17 04:52:33+00:00| seen|...

CVE-2026-8657

creationtimestamp| type| source ---|---|--- 2026-05-17 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlz7m3b64q22 2026-05-17 01:30:47+00:00| seen| https://infosec.exchange/users/offseq/statuses/116587326764358912 2026-07-06 06:49:16+00:00| seen|...

CVE-2026-46728

creationtimestamp| type| source ---|---|--- 2026-05-16 22:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlyw77gh532i 2026-05-16 23:01:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlyx6zjxtm2e 2026-05-17 00:00:39+00:00| seen|...

CVE-2026-44366

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366 Vvveb: Stored XSS via Comment Author Field

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366 Vvveb: Stored XSS via Comment Author Field

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-44366 Vvveb: Stored XSS via Comment Author Field

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

EUVD-2026-30588

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.1, a Stored Cross-Site Scripting XSS vulnerability exists in the Vvveb CMS comment submission flow. The author field is submitted by an unauthenticated user on any public post...

CVE-2026-46417

creationtimestamp| type| source ---|---|--- 2026-05-15 17:50:55+00:00| seen| https://bsky.app/profile/arigatouz.bsky.social/post/3mlvvhfkrbc2n 2026-05-15 17:51:08+00:00| seen| https://bsky.app/profile/arigatouz.bsky.social/post/3mlvvhfl22k2n 2026-06-22 23:16:24+00:00| seen|...

CVE-2026-2347

creationtimestamp| type| source ---|---|--- 2026-05-14 10:21:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlslusj2hc2n 2026-05-14 10:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116572463385163397 2026-05-14 10:30:32+00:00| seen|...

CVE-2026-6206

The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the getpostpropertyfromquerystring function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract da...