CVE-2026-9294

creationtimestamp| type| source ---|---|--- 2026-05-24 01:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626962874841105...

CVE-2026-9295

creationtimestamp| type| source ---|---|--- 2026-05-24 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116626609621458470...

CVE-2024-9362

creationtimestamp| type| source ---|---|--- 2026-05-23 14:18:54+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9362.yaml...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fragment transmission helper function failing to propagate the SKBFLSHAREDFRAG bit. This coul...

CVE-2026-40596

creationtimestamp| type| source ---|---|--- 2026-05-22 22:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmhxb7f6tf2c...

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

EUVD-2026-31463

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

CVE-2026-9251

Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow and gain access to an entry's data via a crafted status change request. This issue affects : Devolutions Serv...

CVE-2026-9251

A missing authorization vulnerability in the entry status management feature of Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced Pending Approval flow. By sending a crafted status change request, an attacker can gain unauthorized access to an e...

CVE-2026-4635

creationtimestamp| type| source ---|---|--- 2026-05-22 12:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgxrcld642r...

CVE-2026-8679

The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handleplaylistendpoint function hooked to templateredirect accepting a user-controlled playlist ID via the audioigniterplaylistid query var or the...

EUVD-2026-31421

The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handleplaylistendpoint function hooked to templateredirect accepting a user-controlled playlist ID via the audioigniterplaylistid query var or the...

CVE-2026-8679 AudioIgniter Music Player <= 2.0.2 - Unauthenticated Insecure Direct Object Reference to 'audioigniter_playlist_id' Parameter

The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handleplaylistendpoint function hooked to templateredirect accepting a user-controlled playlist ID via the audioigniterplaylistid query var or the...

CVE-2026-9053

creationtimestamp| type| source ---|---|--- 2026-05-22 06:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgcuvhi3j2e...

CVE-2026-3481

creationtimestamp| type| source ---|---|--- 2026-05-22 06:26:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgchfbybg2p 2026-05-25 07:25:58+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnx74p6iv2c...

CVE-2026-42508 Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked...

CVE-2026-42508

The golang.org/x/crypto/ssh/knownhosts component is vulnerable to an auth bypass because a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. The fix ensures that both the 'key' and 'key.SignatureKey' are checked for the @revoked status. This vulnerability affects ...

CVE-2026-42508 Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked...