CVE-2026-32972

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...

CVE-2026-32972

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...

CVE-2026-32972 OpenClaw < 2026.3.11 - Authorization Bypass in Browser Profile Management via browser.request

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...

CVE-2026-32972

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability (CVE-2026-32972) that lets authenticated operators with only operator.write permission access admin-only browser profile management routes via browser.request. This allows creating or modifying browser profiles and persistin...

CVE-2026-5043

creationtimestamp| type| source ---|---|--- 2026-03-29 12:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi74xtv22j2m 2026-03-29 12:40:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi766ktwt72l 2026-03-29 13:15:14+00:00|...

OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to cause an authenticated operator with only operator.write privileges to access the administrator-specific browser profile management rout...

CVE-2026-33955

creationtimestamp| type| source ---|---|--- 2026-03-27 22:17:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35jowyjf2j 2026-03-27 22:18:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi35kbqffs2s 2026-03-27 22:59:40+00:00| seen|...

CVE-2026-28368

creationtimestamp| type| source ---|---|--- 2026-03-27 19:18:53+00:00| seen| Telegram/aqievDs9oCICHmk4C8wabuGpxUWUtlG5g0Gk9aIz6TfeTOo 2026-03-27 19:19:15+00:00| published-proof-of-concept| Telegram/XCH0TsqFcgtqQSEM226PLv68rO7cMcwSSZTFwAARVhm43GQ 2026-03-27 22:15:24+00:00| seen|...

USN-8098-9 linux-ibm-5.4 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

BIT-DISCOURSE-2026-33425 Discourse has inferable private group membership or existence via exclude_groups parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions 2026.3.0,...

CVE-2026-33506

creationtimestamp| type| source ---|---|--- 2026-03-26 20:54:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyifeaw6m27 2026-03-26 21:20:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyjugwtbq2r 2026-03-26 21:36:49+00:00| seen|...

CVE-2026-25417

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Stored XSS.This issue affects ProfileGrid : from n/a through = 5.9.8.1...

CVE-2026-33425

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, unauthenticated users can determine whether a specific user is a member of a private group by observing changes in directory results when using the excludegroups parameter. Versions...

CVE-2026-4484

creationtimestamp| type| source ---|---|--- 2026-03-26 03:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwmeoazhu27 2026-03-26 03:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwmmwoppr2i 2026-03-26 05:01:21+00:00| seen|...

CVE-2026-34055

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwfolx6lc2p 2026-03-26 01:05:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfxipqup2d 2026-03-26 17:20:09+00:00| seen|...

CVE-2026-32539

creationtimestamp| type| source ---|---|--- 2026-03-25 20:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhvxahsfom24 2026-03-25 22:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhw3nd7hyk25 2026-04-07 23:30:07+00:00| seen|...

USN-8098-7: Linux kernel (Azure) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

CVE-2026-33656

creationtimestamp| type| source ---|---|--- 2026-03-25 12:58:11+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mhv5cynfky2p 2026-03-25 13:24:33+00:00| seen| https://bsky.app/profile/r-netsec.bsky.social/post/3mhv6s56xcl2j 2026-03-27 06:20:09+00:00| seen|...

CVE-2026-25417: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Stored XSS.This issue affects ProfileGrid : from n/a through = 5.9.8.1...

CVE-2026-24157

creationtimestamp| type| source ---|---|--- 2026-03-24 22:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtlaafs4h2t 2026-03-24 22:03:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlchdzrc2n 2026-03-31 03:20:09+00:00| seen|...