CVE-2026-32978

creationtimestamp| type| source ---|---|--- 2026-03-29 13:35:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bby5n532c 2026-03-29 13:36:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bcqyj3p27 2026-03-29 14:14:19+00:00| seen|...

CVE-2026-32975

creationtimestamp| type| source ---|---|--- 2026-03-29 13:35:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bbr2ard2c 2026-03-29 13:36:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7bciuxfz27 2026-03-29 14:31:29+00:00| seen|...

CVE-2026-33573

creationtimestamp| type| source ---|---|--- 2026-03-29 13:20:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7agehn2i2d 2026-03-29 13:33:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7b5mr6vf2w 2026-03-29 14:01:41+00:00| seen|...

CVE-2026-33572

creationtimestamp| type| source ---|---|--- 2026-03-29 13:20:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7ag5d6af2w 2026-03-29 13:21:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7ahhni4v2w 2026-03-29 14:41:30+00:00| seen|...

CVE-2026-32987

creationtimestamp| type| source ---|---|--- 2026-03-29 13:20:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7afvjn2h25 2026-03-29 13:20:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7ah7pt762m 2026-03-29 14:17:06+00:00| seen|...

CVE-2026-32980

creationtimestamp| type| source ---|---|--- 2026-03-29 13:19:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7afmts5i2r 2026-03-29 13:20:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi7agxu2hp25 2026-03-29 14:57:31+00:00| seen|...

CVE-2026-5043

creationtimestamp| type| source ---|---|--- 2026-03-29 12:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi74xtv22j2m 2026-03-29 12:40:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi766ktwt72l 2026-03-29 13:15:14+00:00|...

CVE-2026-5016

creationtimestamp| type| source ---|---|--- 2026-03-28 23:15:16+00:00| published-proof-of-concept| Telegram/OEmB6HaBO0fT2xWNNxRYZpXvzEjDJ8zEr2b6XyKSAW6N8RA 2026-03-29 00:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5uacyx2q2i 2026-03-29 01:51:50+00:00| seen|...

CVE-2026-30302

creationtimestamp| type| source ---|---|--- 2026-03-27 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi37vzucnb2d 2026-03-27 23:05:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3a76tvxa2j 2026-03-28 07:39:03+00:00| seen|...

CVE-2026-33955

creationtimestamp| type| source ---|---|--- 2026-03-27 22:17:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35jowyjf2j 2026-03-27 22:18:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35kbqffs2s 2026-03-27 22:59:40+00:00| seen|...

CVE-2026-31943

creationtimestamp| type| source ---|---|--- 2026-03-27 21:01:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi2zaywyuj25 2026-03-27 21:22:34+00:00| seen| Telegram/HCzuKY5MuLPsfoEI5S3ks6iQFEX7xEFL0kHnLhrHZ36Sb0 2026-03-27 22:00:58+00:00| seen|...

CVE-2026-31945

creationtimestamp| type| source ---|---|--- 2026-03-27 21:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi2zalmt472h 2026-03-27 21:02:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi2zd3twpt2t 2026-03-27 21:22:55+00:00| seen|...

CVE-2026-4960

creationtimestamp| type| source ---|---|--- 2026-03-27 19:19:24+00:00| seen| Telegram/oT6t4NRMpgoX3zBs2D6gNNWCx9cAFlVoBXSXqbTX6Ejwqdk 2026-03-27 19:31:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2ua5mv4z2s 2026-03-27 19:35:15+00:00| seen|...

CVE-2026-4984

The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'. When processing media messages, it fetches user-controlled URLs 'MediaUrlN' parameters using HTTP requests that include the integration's Twilio credentials in the 'Authorization'...

BIT-DISCOURSE-2026-33428 Discourse Allows Unauthorized Access to Deleted Posts Index via Group Membership

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, a non-staff user with elevated group membership could access deleted posts belonging to any user due to an overly broad authorization check on the deleted posts index endpoint. Versions 2026.3.0,...

BIT-DISCOURSE-2026-33355 Discourse filters whisper posts from private-posts feed

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, the /private-posts endpoint did not apply post-type visibility filtering, allowing regular PM participants to see whisper posts in PM topics they had access to. Versions 2026.3.0, 2026.2.1, and...

CVE-2026-33701

creationtimestamp| type| source ---|---|--- 2026-03-27 02:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhz4bjog5422 2026-03-27 03:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298903055981699 2026-03-27 03:00:32+00:00| seen|...

CVE-2026-33898

creationtimestamp| type| source ---|---|--- 2026-03-27 00:01:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysuuob4v2n 2026-03-27 01:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyw4vmu3g2w 2026-03-27 01:00:34+00:00| seen|...

CVE-2026-33945

creationtimestamp| type| source ---|---|--- 2026-03-26 23:59:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhysrbvxdo2i 2026-03-27 00:00:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116298196062602424 2026-03-27 00:00:44+00:00| seen|...

CVE-2026-34226

creationtimestamp| type| source ---|---|--- 2026-03-26 23:44:55+00:00| published-proof-of-concept| https://github.com/capricorn86/happy-dom/security/advisories/GHSA-w4gp-fjgq-3q4g 2026-03-27 22:17:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35jhqkbc2s 2026-03-27...