CVE-2026-9135

creationtimestamp| type| source ---|---|--- 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsxttik2h 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsw4gzs2h 2026-07-17 19:20:04+00:00| seen|...

CVE-2026-7032

creationtimestamp| type| source ---|---|--- 2026-04-26 12:52:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkflx674nw2w 2026-04-29 21:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mknyxj2b4l2p...

CVE-1999-0702

creationtimestamp| type| source ---|---|--- 2026-04-26 12:02:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkfj4kdwe52u...

CVE-2026-4139

creationtimestamp| type| source ---|---|--- 2026-04-26 00:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkecm5ozla2l...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the browser profile creation process. An attacker can cause unauthorized requests to internal network resources by storing a profile with a cdpUrl...

NPM: OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks

NPM: OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks vulnerability discovered by ? in WordPress Npm openclaw versions 2026.4.20...

GHSA-J4C5-89F5-F3PM OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Browser profile creation normalized cdpUrl values before persisting them, but did not apply the configured browser SSRF policy at creation time. In deployments that explicitly...

OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Browser profile creation normalized cdpUrl values before persisting them, but did not apply the configured browser SSRF policy at creation time. In deployments that explicitly...

CVE-2026-4138

creationtimestamp| type| source ---|---|--- 2026-04-25 21:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdykbgp6c2g...

CVE-2026-23541

creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukrhzx2t...

CVE-2026-40557

creationtimestamp| type| source ---|---|--- 2026-04-25 19:27:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkdriu7ur62j...

CVE-2026-41081

creationtimestamp| type| source ---|---|--- 2026-04-25 19:22:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkdr7v62tj25...

CVE-2026-4280

creationtimestamp| type| source ---|---|--- 2026-04-25 18:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdoigax452s...

CVE-2026-4074

creationtimestamp| type| source ---|---|--- 2026-04-25 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdl55axg22x...

CVE-2026-6980

creationtimestamp| type| source ---|---|--- 2026-04-25 15:35:34+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkdekxgybr27...

CVE-2026-5767

creationtimestamp| type| source ---|---|--- 2026-04-25 12:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkd2eoas5o2l...

CLSA-2026-1777047310 ImageMagick: Fix of 5 CVEs

CVE-2026-33900: fix integer truncation in viff encoder leading to heap out-of-bounds write on 32-bit builds - CVE-2026-33905: fix out-of-bounds read in -sample operation via sample:offset define - CVE-2026-34238: fix integer overflow in despeckle operation causing heap buffer overflow on 32-bit...

CVE-2026-32936

creationtimestamp| type| source ---|---|--- 2026-04-25 01:02:18+00:00| published-proof-of-concept| https://github.com/coredns/coredns/security/advisories/GHSA-63cw-r7xf-jmwr 2026-05-05 21:56:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml56jp3x6v2e...

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2026:1596-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1596-1 advisory. - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via integer truncati...

SUSE SLES15 Security Update : ImageMagick (SUSE-SU-2026:1597-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1597-1 advisory. - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via...