CVE-2026-4491

creationtimestamp| type| source ---|---|--- 2026-03-20 18:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj6x6khj72e...

CVE-2026-4487

creationtimestamp| type| source ---|---|--- 2026-03-20 18:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj6oa3qtt2u 2026-03-20 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjfxcngsv2u 2026-03-20 21:01:22+00:00| seen|...

CVE-2026-4489

creationtimestamp| type| source ---|---|--- 2026-03-20 18:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj5tes2kl24...

EUVD-2026-13725

Precurio Intranet Portal 4.4 contains a cross-site request forgery CSRF weakness that can allow an attacker to induce an authenticated user to submit a crafted request to a profile update endpoint that handles file uploads. If the application stores attacker-controlled content as an executable...

CVE-2026-31836

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any...

CVE-2026-31836

CVE-2026-31836 affects Checkmate (open-source self-hosted tool). Versions up to and including 3.5.1 contain a mass assignment vulnerability in the user profile update endpoint, allowing any authenticated user to escalate to superadmin and bypass RBAC. This grants complete administrative access (v...

CVE-2026-31836 Mass Assignment Privilege Escalation in Checkmate

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any...

CVE-2026-31836

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any...

CVE-2026-31836 Mass Assignment Privilege Escalation in Checkmate

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any...

CLSA-2026-1774027715 Fix CVE(s): CVE-2026-30883

SECURITY UPDATE: heap over-write in PNG raw profile writer - debian/patches/CVE-2026-30883.patch: add overflow check for allocatedlength in Magickpngwriterawprofile to prevent integer overflow leading to heap over-write - CVE-2026-30883...

CVE-2026-4485

creationtimestamp| type| source ---|---|--- 2026-03-20 16:31:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhiwuzc45e2e...

CVE-2026-32989

Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads. Attackers can exploit this to upload executable files to web-accessible locations,...

CVE-2026-4434

creationtimestamp| type| source ---|---|--- 2026-03-20 15:51:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhiuojen7q2y...

CVE-2026-32989 Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload

Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads. Attackers can exploit this to upload executable files to web-accessible locations,...

CVE-2026-32989

Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads. Attackers can exploit this to upload executable files to web-accessible locations,...

CVE-2026-32989 Precurio Intranet Portal 4.4: Cross-Site Request Forgery leading to arbitrary file upload

Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a profile update endpoint handling file uploads. Attackers can exploit this to upload executable files to web-accessible locations,...

CVE-2026-33482

creationtimestamp| type| source ---|---|--- 2026-03-20 14:59:56+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-pmj8-r2j7-xg6c 2026-03-23 15:28:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqereajdu2p 2026-03-23 16:15:54+00:0...

CVE-2026-4223

creationtimestamp| type| source ---|---|--- 2026-03-20 14:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhiohd3eru2q...

CVE-2026-33124

creationtimestamp| type| source ---|---|--- 2026-03-20 13:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhimwht7w52u...

CVE-2026-33134

creationtimestamp| type| source ---|---|--- 2026-03-20 13:22:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhimekxzdp2e 2026-03-20 20:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhjcl2wxje2a 2026-03-20 21:00:57+00:00| seen|...