CVE-2026-42433 OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools

OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner...

CVE-2026-42433 OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools

OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner...

CVE-2026-42433 OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools

OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner...

EUVD-2026-27249

OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner...

CVE-2026-42433

OpenClaw vulnerable before 2026.4.10: an authorization bypass lets an operator.write message-tool path access Matrix profile persistence with admin-level authority. Exploitation would allow non-owner message-tools to mutate persistent profile configuration due to insufficient access controls. Aff...

CVE-2026-6180

creationtimestamp| type| source ---|---|--- 2026-05-05 11:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml42vmaprd2v 2026-05-05 14:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fubobns2c...

CVE-2026-3454

creationtimestamp| type| source ---|---|--- 2026-05-05 10:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3zismlb22e...

CVE-2026-7824

creationtimestamp| type| source ---|---|--- 2026-05-05 10:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3yp2zkcb2v 2026-05-05 14:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fubobns2c...

CVE-2026-3456

creationtimestamp| type| source ---|---|--- 2026-05-05 06:51:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3lxtflxw2p 2026-05-05 19:21:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vulvr5y2z 2026-05-05 19:45:53+00:00| seen|...

CVE-2026-4362

creationtimestamp| type| source ---|---|--- 2026-05-05 06:44:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3ll5eqic2p...

CVE-2026-6696

creationtimestamp| type| source ---|---|--- 2026-05-05 06:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3latu6zv2n...

CVE-2026-7810

creationtimestamp| type| source ---|---|--- 2026-05-05 06:36:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3l4eaeoq2q...

CVE-2026-6255

creationtimestamp| type| source ---|---|--- 2026-05-05 06:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kucjzlh2h...

CVE-2026-7833

creationtimestamp| type| source ---|---|--- 2026-05-05 04:16:31+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-7833 2026-05-05 15:05:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4hkubzz52p...

CVE-2026-7782

creationtimestamp| type| source ---|---|--- 2026-05-05 02:57:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml36vb2ozt2k...

CVE-2026-7785

creationtimestamp| type| source ---|---|--- 2026-05-05 02:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml36de6u3m2k...

PT-2026-37293

Name of the Vulnerable Software and Affected Versions WWBN AVideo versions prior to 29.0 Description A Cross-Site Request Forgery CSRF issue exists in the legacy profile-photo endpoint "objects/userSavePhoto.php". The endpoint accepts a base64 POST parameter imgBase64 and writes the decoded bytes...

CVE-2026-20202

creationtimestamp| type| source ---|---|--- 2026-05-04 23:08:20+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3ml2s2tbyd323...

CVE-2026-42223

creationtimestamp| type| source ---|---|--- 2026-05-04 22:52:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2r63k5dk2e 2026-05-06 17:10:29+00:00| seen| https://gist.github.com/alon710/8f2a8c09229ab2a61f27e4872d065fac...

CVE-2026-42238

creationtimestamp| type| source ---|---|--- 2026-05-04 22:48:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2qxefyhg2p 2026-05-05 00:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml2uyhgrmv2p 2026-05-05 00:00:42+00:00| seen|...