CVE-2026-27963

creationtimestamp| type| source ---|---|--- 2026-02-26 05:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfqie5wgmp2y...

CVE-2026-23703

creationtimestamp| type| source ---|---|--- 2026-02-26 05:00:00+00:00| seen| https://jvn.jp/en/jp/JVN48498976/ 2026-02-26 06:22:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqkmbwxji2c 2026-02-26 07:18:24+00:00| seen|...

CVE-2026-27952

creationtimestamp| type| source ---|---|--- 2026-02-26 04:57:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfqfur7f4s2v 2026-02-26 05:16:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqgwun6mm2s 2026-03-02 21:00:15+00:00| seen|...

Online-Traffic-Offense-Management-System-1.0-Unauthenticated-RCE-PoC

Online Traffic Offense Management System 1.0 — Unauthenticated...

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management via the IsAdmin field in the user profile update process. An attacker can gain unauthorized administrative privileges by sending a crafted PUT request to their own user profile endpoint with IsAdmin set to...

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management via the IsAdmin field in the user profile update process. An attacker can gain unauthorized administrative privileges by sending a crafted PUT request to their own user profile endpoint with IsAdmin set to...

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management via the IsAdmin field in the user profile update process. An attacker can gain unauthorized administrative privileges by sending a crafted PUT request to their own user profile endpoint with IsAdmin set to...

CVE-2026-27896

creationtimestamp| type| source ---|---|--- 2026-02-26 02:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfq5377qt324 2026-02-27 05:10:18+00:00| seen| https://gist.github.com/alon710/69aa4a4739e67bd07fef8e710308767b 2026-02-27 05:35:34+00:00| seen|...

CVE-2026-27899

WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...

CVE-2026-27837

creationtimestamp| type| source ---|---|--- 2026-02-26 01:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfq3lvr2dh2n 2026-02-26 21:10:19+00:00| seen| https://gist.github.com/alon710/542919c9baa74ad65aba77993c4f58c9...

CVE-2026-3053

creationtimestamp| type| source ---|---|--- 2026-02-26 01:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfq2tq2mty2e...

CVE-2026-27493

creationtimestamp| type| source ---|---|--- 2026-02-26 01:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpzvoee2m2e 2026-02-26 11:50:14+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-2 2026-03-11 13:51:00+00:00| seen|...

CVE-2026-27633

creationtimestamp| type| source ---|---|--- 2026-02-26 01:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpziyfnk42o 2026-02-28 10:11:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvydkhxm32k...

CVE-2026-27578

creationtimestamp| type| source ---|---|--- 2026-02-26 01:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpzdmgmkb2u 2026-02-26 05:10:19+00:00| seen| https://gist.github.com/alon710/0d80cde6bd8b242b554f8f77bc43b2c0 2026-02-26 11:50:14+00:00| seen|...

CVE-2026-26985

creationtimestamp| type| source ---|---|--- 2026-02-26 01:05:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpyw4brcq2d 2026-02-26 05:15:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfqgvmufgs2h 2026-02-26 07:17:19+00:00| seen|...

CVE-2026-27497

creationtimestamp| type| source ---|---|--- 2026-02-26 00:56:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpyf5r65m2x 2026-02-26 07:10:19+00:00| seen| https://gist.github.com/alon710/701a60f9f2d4887df5a419fe55913115 2026-02-26 09:00:37+00:00| seen|...

CVE-2026-26965

creationtimestamp| type| source ---|---|--- 2026-02-26 00:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfpy7mw5a72v 2026-02-26 07:17:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqnp2ihys2s 2026-03-01 13:40:10+00:00| seen|...

CVE-2026-27899

WireGuard Portal (wg-portal) prior to v2.1.3 allows any authenticated non-admin user to elevate to full admin by sending IsAdmin=true in a PUT to their own profile, with the admin flag not being preserved by the server’s protection logic. After logout and login, the session inherits admin privile...

CVE-2026-27899 WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update

WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...

CVE-2026-27899 WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update

WireGuard Portal or wg-portal is a web-based configuration portal for WireGuard server management. Prior to version 2.1.3, any authenticated non-admin user can become a full administrator by sending a single PUT request to their own user profile endpoint with "IsAdmin": true in the JSON body. Aft...