CVE-2026-28377 S3 SSE-C Encryption Key Exposed in Plaintext via Config Endpoint (CVE-2025-41118 Pattern)

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to williamgoodfellow for reporting this vulnerability...

GHSA-X636-4JX6-XC4W

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:40+00:00| seen| Telegram/gdbQBvnuOgX0zlyJL9kfjxoCoTp9WBTGn5-zeTA4spKkwcA...

GHSA-F83R-V3H5-PCHF

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:40+00:00| seen| Telegram/gdbQBvnuOgX0zlyJL9kfjxoCoTp9WBTGn5-zeTA4spKkwcA...

CVE-2026-32498

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:00+00:00| seen| Telegram/ZlwyyZCGobz0DL3VkciBBst8GvSl0UBVZV3ZV9Oa2yUbLdM...

CVE-2026-22512

creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:35+00:00| seen| Telegram/AFZ76yel3WM-XKg00oUEdJJdzUq8UaXb2Zj6ypxdRWKrm8I...

Insufficiently Protected Credentials

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the config.get and channels.status processes. An attacker can obtain sensitive credentials by accessing gateway snapshots that include unredacted...

GHSA-PPWQ-6V66-5M6J OpenClaw Exposes Credentials Embedded in baseUrl Fields via config.get and channels.status

Summary Read-scoped gateway snapshots could expose credentials embedded in channel baseUrl and related endpoint fields. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.22 - Latest released tag checked: v2026.3.23-2 630f1479c44f78484dfa21bb407cbe6f171dac87 - Latest...

CVE-2026-25306

creationtimestamp| type| source ---|---|--- 2026-03-26 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mhyiuuu3sm2o 2026-04-09 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj23blrhm62h...

CVE-2026-4923

creationtimestamp| type| source ---|---|--- 2026-03-26 18:56:15+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mhybs4t2sk27 2026-03-26 20:17:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhygeac6dl2i...

CVE-2026-27663

creationtimestamp| type| source ---|---|--- 2026-03-26 17:42:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy5or3yeh25 2026-03-27 15:20:31+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mi2g7ehr3326 2026-04-02 10:00:00+00:00| seen|...

CVE-2026-29934

creationtimestamp| type| source ---|---|--- 2026-03-26 17:24:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy4ohoqaj2d...

CVE-2026-29933

creationtimestamp| type| source ---|---|--- 2026-03-26 17:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy3elljsx23...

CVE-2026-27659

Mattermost versions 11.2.x = 11.2.2, 10.11.x = 10.11.10, 11.4.x = 11.4.0, 11.3.x = 11.3.1 fail to properly validate CSRF tokens in the /api/v4/accesscontrolpolicies/policyid/activate endpoint, which allows an attacker to trick an admin into changing access control policy active status via a craft...

GHSA-M4PC-P4Q3-4C7J

creationtimestamp| type| source ---|---|--- 2026-03-26 16:00:58+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116296309675649424...

CVE-2025-15473

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

CVE-2026-29173

Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, a stored XSS vulnerability exists when a user tries to update the Order Status from the Commerce Orders Table. The Order Status Name is rendered without proper escaping, allowing script execution to occur. This...

CVE-2026-4533

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exploit is now publi...

CVE-2026-29510

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execut...

CVE-2026-29513

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Location field. Attackers can inject malicious scripts through the System Status interface that...

CVE-2026-32050

OpenClaw versions prior to 2026.2.25 contain an access control vulnerability in signal reaction notification handling that allows unauthorized senders to enqueue status events before authorization checks are applied. Attackers can exploit the reaction-only event path in event-handler.ts to queue...