CVE-2026-35431

creationtimestamp| type| source ---|---|--- 2026-04-23 23:06:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk74ttkqhg2n 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE 2026-04-28 07:11:26+00:00| seen|...

CVE-2026-4131

creationtimestamp| type| source ---|---|--- 2026-04-23 22:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk72xprt7a2q...

CVE-2026-41349

creationtimestamp| type| source ---|---|--- 2026-04-23 22:25:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72kw6rkh2r 2026-04-23 22:27:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72mstot72n 2026-04-23 23:27:23+00:00| seen|...

CVE-2026-41353

creationtimestamp| type| source ---|---|--- 2026-04-23 22:25:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72koj46b2w 2026-04-23 22:26:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk72mlk4ff2g 2026-04-23 23:27:23+00:00| seen|...

CVE-2026-41353

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353 OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353 OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353 OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353

OpenClaw before 2026.3.22 contains an access control bypass vulnerability in the allowProfiles feature that allows attackers to circumvent profile restrictions through persistent profile mutation and runtime profile selection. Remote attackers can exploit this by manipulating browser proxy profil...

CVE-2026-41353

OpenClaw vulnerable in versions before 2026.3.22 due to an access control bypass in the allowProfiles feature. The root cause is via persistent profile mutation and runtime profile selection, enabling remote attackers to manipulate browser proxy profiles at runtime to access restricted profiles a...

CVE-2026-4128

creationtimestamp| type| source ---|---|--- 2026-04-23 21:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk6xmhhxy52l...

CVE-2026-6375

A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records PNRs without any access controls. Because PNR identifiers follow a predictable pattern, an attacker could systematically enumerate valid records and obtain associated passenger names. This flaw...

CVE-2026-41460

creationtimestamp| type| source ---|---|--- 2026-04-23 19:43:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rhqgrmc2q 2026-04-24 15:21:36+00:00| published-proof-of-concept| Telegram/l8-tUjdZo5KblLOe421TQB8MZuX2H9CaOdWKzaRMJrauLgw 2026-05-31 22:07:08+00:00| seen|...

CVE-2026-40472

creationtimestamp| type| source ---|---|--- 2026-04-23 19:39:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rawsxnu2n 2026-04-24 15:22:14+00:00| seen| Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE...

CVE-2026-40471

creationtimestamp| type| source ---|---|--- 2026-04-23 19:39:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6rapfj252t 2026-04-24 15:22:14+00:00| seen| Telegram/9MQPqn6NQB4yNQwBhEjQmfZAQamilmjjvNDDQhjtzrN-0VE...

CVE-2026-42606

creationtimestamp| type| source ---|---|--- 2026-04-23 19:37:18+00:00| published-proof-of-concept| https://github.com/AzuraCast/AzuraCast/security/advisories/GHSA-gv7r-3mr9-h5x8 2026-05-09 21:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5aco5sj2e 2026-05-09...

CVE-2026-41044

creationtimestamp| type| source ---|---|--- 2026-04-23 18:30:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk6nfceoup2i 2026-04-24 22:06:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkbjwdmqjf2c 2026-05-05 12:00:05+00:00| seen|...

CVE-2026-21841

creationtimestamp| type| source ---|---|--- 2026-04-23 18:19:41+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mk6mslzmsa24...

CVE-2026-41893

creationtimestamp| type| source ---|---|--- 2026-04-23 17:45:50+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-vmfm-ch9h-5c7g 2026-05-09 21:17:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh66esqzt2e 2026-05-10...

CVE-2026-42294

creationtimestamp| type| source ---|---|--- 2026-04-23 08:17:59+00:00| published-proof-of-concept| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-jcc8-g2q4-9fxq 2026-05-09 04:59:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfhkyvosz2q...