CVE-2026-33984

creationtimestamp| type| source ---|---|--- 2026-03-30 22:20:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micp3hxxzd2c 2026-03-30 23:20:23+00:00| published-proof-of-concept| Telegram/dTdXmSClQuUutduSI7B7lq8U0lWyZCa4SY-4SfXv6kqarNA 2026-03-31 00:35:14+00:00| seen|...

CVE-2026-4257

creationtimestamp| type| source ---|---|--- 2026-03-30 22:20:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micp3b722d27 2026-03-30 23:20:36+00:00| seen| Telegram/aYCyNSm85uFE8xgl3G3j-Sn1NnPkfaU1HaAlO581ff2GeJQ 2026-03-31 00:00:42+00:00| seen|...

CVE-2026-31946

creationtimestamp| type| source ---|---|--- 2026-03-30 22:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micnznfvfo25 2026-03-30 23:20:18+00:00| seen| Telegram/qLRVxcBpXTmPFtTmfhugZI-eibNxK7vt9WwygicfOox0-Q 2026-04-02 18:00:14+00:00| seen|...

CVE-2023-34092

creationtimestamp| type| source ---|---|--- 2026-03-30 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mickqn34q622...

CVE-2026-5147

creationtimestamp| type| source ---|---|--- 2026-03-30 21:00:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micklfjq5o2i 2026-03-30 21:21:40+00:00| seen| Telegram/3uob0OgNXCPySF5ZgiHiYbQAvLr6RIUarGC854yFCH2MAgQ...

CVE-2026-32714

creationtimestamp| type| source ---|---|--- 2026-03-30 20:27:55+00:00| published-proof-of-concept| https://github.com/scitokens/scitokens/security/advisories/GHSA-rh5m-2482-966c 2026-03-31 04:06:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3midcfsxmyc2s 2026-03-31...

CVE-2026-29872

creationtimestamp| type| source ---|---|--- 2026-03-30 19:21:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micf25tbea27...

CVE-2026-34714

creationtimestamp| type| source ---|---|--- 2026-03-30 19:18:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micevxbq3527 2026-03-30 20:35:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micj6mcusq2i 2026-03-30 21:21:40+00:00| seen|...

GHSA-H6C2-X2M2-MWHF

creationtimestamp| type| source ---|---|--- 2026-03-30 19:17:51+00:00| published-proof-of-concept| Telegram/fjirMqbI7HbDe3OLZhJWgKP9iQtg8z94oAYRFGU8rTUaV0 2026-03-31 16:13:29+00:00| seen| https://bsky.app/profile/ai-nerd.bsky.social/post/3miekzqjdw42a 2026-04-03 12:59:33+00:00|...

Fleet's Apple MDM profile delivery has second-order SQL Injection that can compromise the database

Summary A critical second-order SQL Injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user credentials, API tokens, and device enrollment...

OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface

Fixed in OpenClaw 2026.3.24, the current shipping release. Title browser.request still allows POST /reset-profile through the operator.write surface in OpenClaw v2026.3.22 after GHSA-vmhq-cqm9-6p7q Severity Assessment High CWE: - CWE-863: Incorrect Authorization Proposed CVSS v3.1: - 8.1...

GHSA-XP9R-PRPG-373R OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface

Fixed in OpenClaw 2026.3.24, the current shipping release. Title browser.request still allows POST /reset-profile through the operator.write surface in OpenClaw v2026.3.22 after GHSA-vmhq-cqm9-6p7q Severity Assessment High CWE: - CWE-863: Incorrect Authorization Proposed CVSS v3.1: - 8.1...

CVE-2026-35653

creationtimestamp| type| source ---|---|--- 2026-03-30 19:05:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xp9r-prpg-373r 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-10 19:31:00+00:00|...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser.request function on the operator.write surface. An attacker can disrupt browser operations, terminate active browser sessions, and move the local...

CVE-2026-32287

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic563sy6k2h 2026-03-30 17:22:57+00:00| seen| Telegram/hICGoMiiTAfNGiGPS6kLuEIjx0Cnqs2qprpkS-tW4S4edfo...

CVE-2025-67030

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0381/ 2026-03-31 14:45:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3xyw3g26...

CVE-2026-3991

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0378/ 2026-03-30 19:18:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micevqbsxx27 2026-03-30 20:50:07+00:00| seen|...

CVE-2026-28526

creationtimestamp| type| source ---|---|--- 2026-03-30 16:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic52zm2uf25...

CVE-2026-30565

creationtimestamp| type| source ---|---|--- 2026-03-30 16:29:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic3glnady2i...

CVE-2026-33373

creationtimestamp| type| source ---|---|--- 2026-03-30 16:11:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2gzibtu2j...