PT-2026-37016

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.9 Description An environment variable injection issue exists where malicious workspace .env files can set runtime-control variables. This allows attackers to inject variables that affect update sources, gatewa...

CVE-2026-37749

creationtimestamp| type| source ---|---|--- 2026-04-16 19:00:11+00:00| published-proof-of-concept| Telegram/jBpTD-VrkkU4blOwQXqNEQHYP3qYdnW5ne9K2E9cd5frRY 2026-04-16 21:00:04+00:00| published-proof-of-concept| Telegram/YdSs7ODl4GqLLTJMVDK5lc2sRwnfVBIE8xXSYrBaURrpR0I 2026-04-17 15:00:04+00:00|...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssl (UTSA-2026-007124)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007124 advisory. Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications...

DataEase 安全漏洞

DataEase is an open-source data visualization and analysis tool developed by DataEase. It helps users quickly analyze data and gain insights into business trends, thereby enabling improvements and optimizations in their businesses. DataEase versions 2.10.20 and earlier contain security...

CVE-2026-6388

creationtimestamp| type| source ---|---|--- 2026-04-15 23:27:35+00:00| seen| Telegram/ajbOyvFAewWZ2L70l5GRQuj2wRnDYaN4zfpEHfJh7NMuY 2026-04-16 00:53:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjl72wjbmn2z 2026-04-16 01:30:30+00:00| seen|...

CVE-2026-6349

creationtimestamp| type| source ---|---|--- 2026-04-15 18:44:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10841-4f504-2.html 2026-04-16 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116412503035182529 2026-04-16 05:03:26+00:00| seen|...

CVE-2026-20186

creationtimestamp| type| source ---|---|--- 2026-04-15 16:21:39+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116409637135769540 2026-04-15 17:19:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfos5erv2f 2026-04-15 18:37:28+00:00| seen|...

CVE-2026-20147

creationtimestamp| type| source ---|---|--- 2026-04-15 16:21:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116409637135769540 2026-04-15 17:19:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfozrbcw2y 2026-04-15 19:12:10+00:00| seen|...

CVE-2026-25219

creationtimestamp| type| source ---|---|--- 2026-04-15 15:32:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjk7qcmrjv2g 2026-04-15 15:50:32+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjkaqjucrm2t...

CVE-2026-1555

creationtimestamp| type| source ---|---|--- 2026-04-15 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjj2qkoar62p 2026-04-15 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116406840802962869 2026-04-15 05:06:37+00:00| seen|...

OpenTofu has unbounded memory usage, high CPU usage, or deadlock in "tofu init" with maliciously-crafted dependency responses

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or deadlock when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...

CVE-2026-41064

creationtimestamp| type| source ---|---|--- 2026-04-14 23:27:18+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pq8p-wc4f-vg7j 2026-04-22 00:00:41+00:00| seen| https://infosec.exchange/users/offseq/statuses/116445415944468240 2026-04-22 00:00:42+00:00| seen|...

CVE-2026-34619

creationtimestamp| type| source ---|---|--- 2026-04-14 23:22:03+00:00| seen| Telegram/7o25spvsi10qoVsYDQCR4BvQZf2Pb0MXjY1dtOy-qDOy7tc 2026-04-15 12:00:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjtuloymz2w 2026-04-15 13:55:20+00:00| seen|...

CVE-2026-27305

creationtimestamp| type| source ---|---|--- 2026-04-14 23:21:52+00:00| seen| Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E 2026-04-15 13:19:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjycrdx3s2a 2026-04-15 13:55:19+00:00| seen|...

CVE-2026-33018

creationtimestamp| type| source ---|---|--- 2026-04-14 23:21:52+00:00| seen| Telegram/jHpVmdM968c9lFQ4KStSRALTqvtLmQ8NC1zLLnKyLbbys0E 2026-04-14 23:22:03+00:00| seen| Telegram/7o25spvsi10qoVsYDQCR4BvQZf2Pb0MXjY1dtOy-qDOy7tc...

CVE-2026-34618

creationtimestamp| type| source ---|---|--- 2026-04-14 20:19:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mji7c54dgc24 2026-04-14 20:31:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mji7yq5j4f2o 2026-04-14 21:25:42+00:00| published-proof-of-concept|...

CVE-2026-27303

creationtimestamp| type| source ---|---|--- 2026-04-14 20:07:55+00:00| seen| Telegram/b-0H5pCtilxNZxS-gRRPsAWUA3zqxMoGzwWTkVBCMIvH7s 2026-04-15 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116407194668187884 2026-04-15 06:00:31+00:00| seen|...

CVE-2026-27245

creationtimestamp| type| source ---|---|--- 2026-04-14 20:07:48+00:00| seen| Telegram/vjfxnNTg64imjnjxPGtl8BfvNjTDmt0KKDhXRC5WEaV7Sg 2026-04-15 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116407902478004814 2026-04-15 09:00:32+00:00| seen|...

CVE-2026-38529

creationtimestamp| type| source ---|---|--- 2026-04-14 16:47:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhtgkwkrb2s 2026-04-14 16:53:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhtrvd3vn2k 2026-04-23 20:37:07+00:00| seen|...

CVE-2026-38527

creationtimestamp| type| source ---|---|--- 2026-04-14 16:46:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhtgdu6nh2u 2026-04-14 17:07:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhulnqatj2z...