CVE-2026-35045

creationtimestamp| type| source ---|---|--- 2026-04-03 13:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/78618 2026-04-06 18:26:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitvbcrc752p 2026-04-06 18:26:59+00:00| seen|...

CVE-2026-28754

creationtimestamp| type| source ---|---|--- 2026-04-03 12:05:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3milol72t272o 2026-04-03 12:52:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3milr7sa34t26 2026-04-03 13:19:05+00:00| seen|...

CVE-2025-43323

creationtimestamp| type| source ---|---|--- 2026-04-02 22:20:00+00:00| seen| Telegram/FzJmdw1K-RYSLg7dqCQHoxSDPWLSiK0NE78nut-MSWafZk 2026-04-02 22:20:13+00:00| seen| Telegram/UFEpGV2QWu8Wd6S6IqU1LkqCMTnXzKbx5ZEOiNlH4x5jKhQ...

CVE-2025-43254

creationtimestamp| type| source ---|---|--- 2026-04-02 22:18:54+00:00| seen| Telegram/FPW4mPTw7L13FkaJiOQGC-q2hCdFUIx-Y-hbJT-Oh6Uj0 2026-04-02 22:19:09+00:00| seen| Telegram/t8lhBZO3-bZ9TFsvX2iDt2pY-voUNRZC7A74h2p8is6Io...

CVE-2025-43193

creationtimestamp| type| source ---|---|--- 2026-04-02 22:18:09+00:00| seen| Telegram/Xo8rcU-avFPltDp1GTd2dLaGLg60r5i2jXiWyq6xqnXxSs 2026-04-02 22:18:34+00:00| seen| Telegram/ofzxZdYhE5nMpuM1P1zGrKT9SL3EwVBffeTg8dXaW1MKkb4...

CVE-2025-24266

creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:18+00:00| seen| Telegram/P5-d6aZOqF55QElx3cS6BOd0aPe5lgIDzzkyeelTZVJswY 2026-04-02 22:15:27+00:00| seen| Telegram/zRO4yDgOkqitQ-0uPFlpuBUiTVJii3PBjh2HUkR1y964uzw...

CVE-2025-24249

creationtimestamp| type| source ---|---|--- 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4 2026-04-02 22:15:13+00:00| seen| Telegram/LEjwKyuBTB6b6mFnoSKeIfUM-CoxQ2buHbucYd1vZ1GovQ...

CVE-2025-24238

creationtimestamp| type| source ---|---|--- 2026-04-02 22:14:56+00:00| seen| Telegram/vazepRq8pUVmfE1hnQs7eSzvOH2CwegXcQp6HpwRm-K-I 2026-04-02 22:15:08+00:00| seen| Telegram/A1zSU9KcM20ZRLemoMFRz3NG5DsD-KNcnO6EGaNoIwAY1a4...

CVE-2026-35466

CVE-2026-35466 describes a stored XSS in cveInterface.js caused by unsanitized input from remote CVE API services. Multiple sources (NVD, Red Hat, ENISA, CIRCL, CVE List, ATT&CK references) reiterate the vulnerability, with the NVD metrics showing MEDIUM severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:...

CVE-2026-35386

creationtimestamp| type| source ---|---|--- 2026-04-02 18:18:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijswfk4sz2q 2026-04-02 18:24:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116336509679642725 2026-04-02 18:24:41+00:00| seen|...

CVE-2026-35388

creationtimestamp| type| source ---|---|--- 2026-04-02 18:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijsjwr3wj22 2026-04-02 18:24:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116336509679642725 2026-04-02 18:24:42+00:00| seen|...

CVE-2026-35387

creationtimestamp| type| source ---|---|--- 2026-04-02 18:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijscy23hz22 2026-04-02 18:24:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116336509679642725 2026-04-02 18:24:41+00:00| seen|...

CVE-2026-23248

creationtimestamp| type| source ---|---|--- 2026-04-02 17:33:59+00:00| seen| Telegram/WyXPwYEob5rwMzrjHEHOmHMfRm-UsFxuyIbkoxluRocgyg 2026-04-02 17:34:19+00:00| seen| Telegram/Eld7J3ikjfnD9ywmRscvQGl2AJKZKJZLAAy1yIRH8SzanLA...

Bentley Systems iTwin Platform exposed access token

RISK EVALUATION Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets. 2. RECOMMENDED PRACTICES As of 2026-03-27, the token is no longer present in the web pages and...

CVE-2026-33951

Signal K Server (boat hub) exposes an unauthenticated HTTP endpoint PUT /signalk/v1/api/sourcePriorities that directly assigns user input to the server configuration, enabling attackers to modify navigation data source priorities. The issue is triggered by missing authentication/authorization and...

CVE-2026-33951 signalk-server: Unauthenticated Source Priorities Manipulation

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.1, the SignalK Server exposes an unauthenticated HTTP endpoint that allows remote attackers to modify navigation data source priorities. This endpoint, accessible via PUT...

CVE-2026-33951

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.24.0-beta.1, the SignalK Server exposes an unauthenticated HTTP endpoint that allows remote attackers to modify navigation data source priorities. This endpoint, accessible via PUT...

CVE-2026-5245

creationtimestamp| type| source ---|---|--- 2026-04-02 10:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miix6a7d6i2o 2026-04-02 11:51:33+00:00| seen| https://gist.github.com/N3mes1s/5af547237daf3a1f075c27cafd0544d3...

CVE-2026-33614

creationtimestamp| type| source ---|---|--- 2026-04-02 09:04:05+00:00| seen| https://infosec.exchange/users/certvde/statuses/116334306568810530 2026-04-02 09:04:13+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3miitxsrop2j2 2026-04-02 11:20:58+00:00| seen|...

CVE-2026-33616

creationtimestamp| type| source ---|---|--- 2026-04-02 09:04:05+00:00| seen| https://infosec.exchange/users/certvde/statuses/116334306568810530 2026-04-02 09:04:13+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3miitxsrop2j2 2026-04-02 10:04:29+00:00| seen|...