CVE-2026-24467

creationtimestamp| type| source ---|---|--- 2026-04-20 17:21:45+00:00| seen| Telegram/7kKxZY5KjVtNNq82uAZn6qPfMFkWsKJQXsAec31tFmY88 2026-04-20 18:09:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjx2srud322i 2026-04-20 18:50:23+00:00| seen|...

CVE-2026-5265

creationtimestamp| type| source ---|---|--- 2026-04-20 16:12:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjwudarxe22v 2026-04-20 16:23:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjwuv7lkt72h...

CVE-2026-6629

creationtimestamp| type| source ---|---|--- 2026-04-20 12:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwgi72x5m2r 2026-04-20 13:16:52+00:00| published-proof-of-concept| Telegram/7GNSW27Y2N6zMsJzLht94-sDuqQRdO09nNnVciVhTSt0Y 2026-04-20 13:21:17+00:00| seen|...

Nginx UI security vulnerabilities

Nginx UI is a web interface for Nginx developed by Jacky. Versions of Nginx UI prior to 2.3.5 contained security vulnerabilities. These vulnerabilities stemmed from WebSocket endpoints that did not validate sources and an insecure storage of authentication tokens, which could lead to cross-site...

CVE-2026-6574

creationtimestamp| type| source ---|---|--- 2026-04-19 15:00:14+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mju7sa6ety2v 2026-04-19 15:00:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/116431966121032331 2026-04-19 15:15:14+00:00| seen|...

CVE-2026-6573

creationtimestamp| type| source ---|---|--- 2026-04-19 13:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116431613406912291 2026-04-19 13:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mju2rtiq652p 2026-04-19 13:32:52+00:00| seen|...

CVE-2026-6569

creationtimestamp| type| source ---|---|--- 2026-04-19 12:45:12+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjtyaskb5q23 2026-04-19 13:15:22+00:00| seen| Telegram/YgXeijrZB5WsTpBElNL5GhGy2ztSUOfDhY0-ECDYQWHxtTM 2026-04-19 13:52:54+00:00| seen|...

CVE-2026-6570

creationtimestamp| type| source ---|---|--- 2026-04-19 12:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116431259439926433 2026-04-19 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjtvqumily26 2026-04-19 13:47:53+00:00| seen|...

CVE-2026-6562

creationtimestamp| type| source ---|---|--- 2026-04-19 09:29:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjtncmbgsm2v 2026-04-19 09:41:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjtnz5tr6h2e 2026-04-19 11:15:54+00:00| published-proof-of-concept|...

CVE-2026-24749

The Silverstripe Assets Module is a required component of Silverstripe Framework. In versions prior to 2.4.5 and 3.0.0-rc1 through 3.1.2, images rendered in templates or otherwise accessed via DBFile::getURL or DBFile::getSourceURL incorrectly add an access grant to the current session, which...

CVE-2026-6518

creationtimestamp| type| source ---|---|--- 2026-04-18 06:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqtueebpf26 2026-04-18 07:01:11+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjqukpruc52v 2026-04-18 07:16:24+00:00| seen|...

CVE-2026-40493

creationtimestamp| type| source ---|---|--- 2026-04-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423827633920562 2026-04-18 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqm5bpu762l 2026-04-18 05:18:34+00:00| published-proof-of-concept|...

CVE-2026-40494

creationtimestamp| type| source ---|---|--- 2026-04-18 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423473750822766 2026-04-18 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqh4dxftd2j 2026-04-18 05:18:34+00:00| published-proof-of-concept|...

CVE-2026-40572

creationtimestamp| type| source ---|---|--- 2026-04-18 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423119797929424 2026-04-18 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqc3fc2ov2p 2026-04-18 03:16:44+00:00| published-proof-of-concept|...

CVE-2026-40258

creationtimestamp| type| source ---|---|--- 2026-04-17 23:00:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjpzopfphj2a 2026-04-17 23:00:17+00:00| seen| https://infosec.exchange/users/offseq/statuses/116422528958630190 2026-04-17 23:20:15+00:00| published-proof-of-concept|...

GHSA-7WV4-CC7P-JHXC OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

Summary Workspace .env could inject OpenClaw runtime-control variables. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.9 Impact A malicious workspace .env file could set OpenClaw runtime-control variables affecting update sources, gateway URLs,...

External Control of System or Configuration Setting

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to External Control of System or Configuration Setting via the loading of workspace .env files. An attacker can manipulate runtime-control variables by crafting a malicious .env file that se...

OpenClaw: Workspace .env could inject OpenClaw runtime-control variables

Summary Workspace .env could inject OpenClaw runtime-control variables. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.9 Impact A malicious workspace .env file could set OpenClaw runtime-control variables affecting update sources, gateway URLs,...

CVE-2026-32105

creationtimestamp| type| source ---|---|--- 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs 2026-04-17 21:30:12+00:00| seen| https://infosec.exchange/users/offseq/statuses/116422175064751572 2026-04-17 21:30:14+00:00| seen|...

CVE-2026-5718

creationtimestamp| type| source ---|---|--- 2026-04-17 18:21:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpk3gndxu2o 2026-04-17 19:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpmmmc3zg2d 2026-04-17 19:27:20+00:00| seen|...