PT-2026-41784

Name of the Vulnerable Software and Affected Versions OpenTelemetry eBPF Instrumentation versions prior to 0.9.0 Description OpenTelemetry eBPF Instrumentation exports raw Redis error text as the span status message. Because Redis error replies can contain sensitive values or attacker-controlled...

MINI-7J88-XJQ4-3V5X

Bulletin has no description...

GHSA-Q7RR-3CGH-J5R3

creationtimestamp| type| source ---|---|--- 2026-05-17 09:27:14+00:00| seen| https://gist.github.com/okilicarslan/c1a124840cde2bb66278de96a61a2a72...

CVE-2018-25337

creationtimestamp| type| source ---|---|--- 2026-05-17 04:16:45+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2018-25337 2026-05-17 15:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2o45oufr2p...

Exploit for CVE-2026-0265

CVE-2026-0265 Risk Checker for Palo Alto PAN-OS A Python script...

GHSA-965H-392X-2MH5

creationtimestamp| type| source ---|---|--- 2026-05-16 02:04:03+00:00| seen| https://gist.github.com/AlgoDev-hash/09b8d3924b1510f4f9fb853b347af34a 2026-05-17 18:09:49+00:00| seen| https://gist.github.com/web3securityauditor/7d7d8acf63a2ec18ed25f500c878c123...

CLSA-2026-1778874422 postfix: Fix of CVE-2026-43964

CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...

[SECURITY] Fedora 42 Update: nginx-mod-vts-0.2.4-9.fc42

Nginx virtual host traffic status module...

GHSA-WXW3-Q3M9-C3JR

creationtimestamp| type| source ---|---|--- 2026-05-15 21:40:29+00:00| seen| https://gist.github.com/alon710/4cc7bcd5f1c1a36dc5ed49cf14f62cbd...

Operation on a Resource after Expiration or Release

Overview Affected versions of this package are vulnerable to Operation on a Resource after Expiration or Release due to the failure to enforce the PostEditTimeLimit in the post patch and update API endpoints. An attacker can alter file attachments, properties, and pin status of posts after the...

[SECURITY] Fedora 43 Update: nginx-mod-vts-0.2.4-9.fc43

Nginx virtual host traffic status module...

[SECURITY] Fedora 44 Update: nginx-mod-vts-0.2.4-9.fc44

Nginx virtual host traffic status module...

CGA-G745-8989-65MC

Bulletin has no description...

CVE-2026-4053

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints...

CVE-2026-4053 post edit time limit is not enforced on some post update operations

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints...

CVE-2026-4053

Mattermost versions 11.5.x = 11.5.1, 10.11.x = 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, and pin status after the edit window has expired via the post patch and update API endpoints...

CVE-2026-4053

CVE-2026-4053 affects Mattermost 11.5.x (11.5.0–11.5.1) and 10.11.x (10.11.0–10.11.13). The issue is that the system fails to enforce the PostEditTimeLimit on non‑message post fields, allowing an authenticated user to modify post file attachments, props, and pin status after the edit window has e...

GHSA-MQ5J-PW29-JCV3

creationtimestamp| type| source ---|---|--- 2026-05-15 18:40:29+00:00| seen| https://gist.github.com/alon710/603dfdf0e01af88d7ae6413c9f3332fe...

GHSA-MXG3-432P-MR72

creationtimestamp| type| source ---|---|--- 2026-05-15 17:40:36+00:00| seen| https://gist.github.com/alon710/1474aba13ecdd80a0e1ac1b868112ef1...

CVE-2026-43964

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...