CVE-2026-4282

creationtimestamp| type| source ---|---|--- 2026-04-02 14:18:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijfkqcg5o2q 2026-04-02 15:20:57+00:00| seen| Telegram/1FZmwvj65iY9NiI7VGWCBujhZKTilfhPPvdqi0EqVANQnis 2026-04-02 16:00:18+00:00| seen|...

CVE-2026-23415

creationtimestamp| type| source ---|---|--- 2026-04-02 13:01:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116335238494662786 2026-04-02 14:10:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijf3yjfqh2s 2026-04-24 17:19:23+00:00| published-proof-of-concept|...

CVE-2026-23413

creationtimestamp| type| source ---|---|--- 2026-04-02 12:47:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116335185440605181 2026-04-24 17:19:06+00:00| seen| Telegram/JJSTAL9Od5belnpNTeT7EllHotzG8ircS1PMboCiKcbiY...

CERTFR-2026-ACT-014

creationtimestamp| type| source ---|---|--- 2026-04-02 12:38:04+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116335147847077250...

CVE-2026-33613

creationtimestamp| type| source ---|---|--- 2026-04-02 09:04:05+00:00| seen| https://infosec.exchange/users/certvde/statuses/116334306568810530 2026-04-02 11:20:38+00:00| seen| Telegram/gqnqvxcLpfM-QzjKR2b1lJqF9lh4WXmMivWkzQg3SSVoSEI 2026-04-13 11:32:39+00:00| seen|...

CVE-2026-33617

creationtimestamp| type| source ---|---|--- 2026-04-02 09:04:05+00:00| seen| https://infosec.exchange/users/certvde/statuses/116334306568810530 2026-04-02 10:02:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miixawe37b25 2026-04-13 11:32:39+00:00| seen|...

CVE-2026-4759

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-3882

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Fixed in Apache Tomcat 10.1.54

Moderate: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled CVE-2026-34500 CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used. This was fixed with commit 29b56a56. This issue was reported to the Tomcat security...

GHSA-4VXV-4XQ4-P84H

creationtimestamp| type| source ---|---|--- 2026-04-01 23:28:03+00:00| seen| Telegram/9GieXm2mvI1hTc72mHyuKx2RXs9Lk1GMse1mK9qILNsF30...

GHSA-G4PP-FHGF-8653

creationtimestamp| type| source ---|---|--- 2026-04-01 23:27:52+00:00| seen| Telegram/coMrEhctUArWfU1Esx58b8AZjuGB2Ws5YwoScTDx0IuKI...

GHSA-R4V5-RWR2-Q7R4

creationtimestamp| type| source ---|---|--- 2026-04-01 23:27:43+00:00| seen| Telegram/9bl7FEfQKeFpZFPlYLUaNlRChLBL7dB3Syrn3BTLiX1da84...

CVE-2026-34738

WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and dra...

CVE-2026-4101

creationtimestamp| type| source ---|---|--- 2026-04-01 22:35:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihqtgefr223 2026-04-01 23:27:43+00:00| seen| Telegram/9bl7FEfQKeFpZFPlYLUaNlRChLBL7dB3Syrn3BTLiX1da84 2026-04-02 03:21:19+00:00| seen|...

CVE-2023-3630

creationtimestamp| type| source ---|---|--- 2026-04-01 22:32:51+00:00| seen| https://gist.github.com/poespas/fc5f1bc78c4f58d6fc2aea0d777fb594...

Improper Authorization

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Improper Authorization in the overrideStatus request parameter, which is processed by the setStatus function. An attacker can bypass administrative moderation and...

EUVD-2026-17656

AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter...

GHSA-M577-W9J8-CH7J AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter

Summary AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and draft workflows. The setStatus method validates the status code again...

AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter

Summary AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and draft workflows. The setStatus method validates the status code again...

CVE-2026-34603

creationtimestamp| type| source ---|---|--- 2026-04-01 18:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihcrqz64w2i 2026-04-03 17:26:02+00:00| published-proof-of-concept| Telegram/XKiVP0TBNKcSgroBasKUd6A0zwSV-UpgyYoSDTGkjCiQdks 2026-04-08 07:40:08+00:00| seen|...