Linux Distros Unpatched Vulnerability : CVE-2026-23245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actgate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list...

PT-2026-26199

Summary The WhatsApp POST webhook handler /notification/whatsapp/webhook processes incoming status update events without verifying the Meta/WhatsApp X-Hub-Signature-256 HMAC signature, allowing any unauthenticated attacker to send forged webhook payloads that manipulate notification delivery stat...

CVE-2026-4148

creationtimestamp| type| source ---|---|--- 2026-03-17 15:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4148 2026-03-17 18:24:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116245912063981591 2026-03-17 21:02:34+00:00| seen|...

CVE-2026-4318

creationtimestamp| type| source ---|---|--- 2026-03-17 10:31:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116244052137878986 2026-03-17 22:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbxxu7hht2s...

CVE-2026-4157

creationtimestamp| type| source ---|---|--- 2026-03-17 06:28:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116243096592688532 2026-04-11 02:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6sc23blx2m 2026-04-11 03:21:29+00:00| seen|...

CVE-2026-4252

creationtimestamp| type| source ---|---|--- 2026-03-17 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242987588275568 2026-03-20 12:34:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3024 2026-04-03 21:00:14+00:00| seen|...

CVE-2026-23489

creationtimestamp| type| source ---|---|--- 2026-03-17 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242633628583910 2026-03-18 15:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhdqurfkas2a 2026-08-05 15:00:07+00:00| published-proof-of-concept|...

CVE-2026-4156

creationtimestamp| type| source ---|---|--- 2026-03-17 02:52:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116242247253222316 2026-04-11 03:21:29+00:00| seen| Telegram/9p2zwy9MZzhVwoc6VK1G-jeZ0lfiSFc0xC5yOTrHz-Zg8Sw 2026-04-11 05:52:01+00:00| seen|...

CVE-2026-4288

A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of the component Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be...

CVE-2026-4288

CVE-2026-4288 affects Tiandy Easy7 Integrated Management Platform 7.17.0. The vulnerability is an SQL injection in an unknown function of the Endpoint component, triggered by manipulating the argument ID in /rest/devStatus/getDevDetailedInfo. Access is remote and exploitation is publicly availabl...

PT-2026-25838

A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of the component Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be...

USN-8101-1 vim vulnerabilities

Rahul Hoysala discovered that Vim did not correctly handle certain tag resolutions. An attacker could possibly use this issue to cause a denial of service. CVE-2026-25749 It was discovered that Vim did not correctly handle processing certain specialKey commands. An attacker could possibly use thi...

USN-8101-1: Vim vulnerabilities

Rahul Hoysala discovered that Vim did not correctly handle certain tag resolutions. An attacker could possibly use this issue to cause a denial of service. CVE-2026-25749 It was discovered that Vim did not correctly handle processing certain specialKey commands. An attacker could possibly use thi...

CVE-2026-23862

creationtimestamp| type| source ---|---|--- 2026-03-16 18:32:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116240282724440505...

EUVD-2026-12458

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execut...

EUVD-2026-12460

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Location field. Attackers can inject malicious scripts through the System Status interface that...

CVE-2026-29513

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Location field. Attackers can inject malicious scripts through the System Status interface that...

CVE-2026-29510

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execut...

CVE-2025-62404

creationtimestamp| type| source ---|---|--- 2026-03-16 17:00:29+00:00| seen| https://infosec.place/objects/3235557a-973e-4707-a5a1-6216a897e9f4...

CVE-2026-29510 Hereta ETH-IMC408M Stored XSS via Device Name

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by manipulating the Device Name field. Attackers can inject malicious scripts through the System Status interface that execut...