GHSA-24C2-GP6C-24C6

creationtimestamp| type| source ---|---|--- 2026-04-23 15:16:16+00:00| published-proof-of-concept| Telegram/GpzWIna0u4Xk2Mxyx7IImpynDcGXZQ8MHW9U4L55IHFQ...

CVE-2026-38751

creationtimestamp| type| source ---|---|--- 2026-04-23 15:00:13+00:00| published-proof-of-concept| Telegram/7RYD-KdzD7Ne0F0JHI5ZiA7kNScXDMi5uB6zWqPs3lSPss 2026-04-23 21:00:04+00:00| published-proof-of-concept| Telegram/iDpciKSSZoAuKLzHCBxsxmN8Po66tQiLuLn1GSrxH7iP5o 2026-04-24 06:00:05+00:00|...

CVE-2026-3259

creationtimestamp| type| source ---|---|--- 2026-04-23 11:16:37+00:00| seen| Telegram/wFSQsgW7X9YvnPcwQoIwWZcAEOwcl2-nLfGCKL8FlikswBY...

GHSA-75H4-C557-J89R

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:15+00:00| seen| Telegram/Np0HDJKgovD5cW8jduvZL9F8almQ8yF8RTJlUUKmbI8o04...

GHSA-GC9W-CC93-RJV8

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:15+00:00| seen| Telegram/Np0HDJKgovD5cW8jduvZL9F8almQ8yF8RTJlUUKmbI8o04...

GHSA-47HF-23PW-3M8C

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:15+00:00| seen| Telegram/Np0HDJKgovD5cW8jduvZL9F8almQ8yF8RTJlUUKmbI8o04...

GHSA-W59F-67XM-RXX7

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:00+00:00| seen| Telegram/AFbUj5XU0FaWjJKIeAgIoECWWJJu8HcCym9i1gF2DKGuNiY...

GHSA-33R3-4WHC-44C2

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:00+00:00| seen| Telegram/AFbUj5XU0FaWjJKIeAgIoECWWJJu8HcCym9i1gF2DKGuNiY...

CVE-2026-41211

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:00+00:00| seen| Telegram/AFbUj5XU0FaWjJKIeAgIoECWWJJu8HcCym9i1gF2DKGuNiY 2026-05-13 18:53:27+00:00| seen| https://bsky.app/profile/threat-surface.bsky.social/post/3mlqxzd36zh2x...

GHSA-68QG-G8MG-6PR7

creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:00+00:00| seen| Telegram/AFbUj5XU0FaWjJKIeAgIoECWWJJu8HcCym9i1gF2DKGuNiY...

GHSA-533Q-W4G6-5586

creationtimestamp| type| source ---|---|--- 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng...

GHSA-WG33-J3RV-JQ72

creationtimestamp| type| source ---|---|--- 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng...

GHSA-265W-RF2W-CJH4

creationtimestamp| type| source ---|---|--- 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng...

GHSA-JJ7C-X25R-R8R3

creationtimestamp| type| source ---|---|--- 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng...

CVE-2026-41200

creationtimestamp| type| source ---|---|--- 2026-04-23 05:18:40+00:00| seen| Telegram/x9tyUe3u3o8RRyRxn4MyOTn6X2M4g6ykuZunUy8vPfx8ng 2026-05-02 07:00:14+00:00| seen| Telegram/IhwMCwgpZcPxUFPSjnDIjcwTT5eYvaw7of5mdJi-nepdGhw 2026-07-13 22:00:21+00:00| seen| https://t.me/GithubRedTeam/89926 2026-07-...

CVE-2026-6018

creationtimestamp| type| source ---|---|--- 2026-04-23 05:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/81383...

CVE-2026-41680

creationtimestamp| type| source ---|---|--- 2026-04-23 01:54:48+00:00| published-proof-of-concept| https://github.com/markedjs/marked/security/advisories/GHSA-6v9c-7cg6-27q7 2026-04-24 19:23:03+00:00| published-proof-of-concept| Telegram/KzwiN8QhKmj3TuqYtGeX9siiyoqjfAY8f7zipbEz0Wiqhk 2026-04-30...

PT-2026-34771

OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts. Attackers can exploit this trust propagation to bypass authentication controls and gain unauthorized access to name...

PT-2026-34790

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.31 contained security vulnerabilities. These vulnerabilities stemmed from a legacy Telegram “allowFrom” migration error, which allowed attackers to bypass authentication control...