CVE-2026-32689

creationtimestamp| type| source ---|---|--- 2026-05-05 17:00:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4nxphuoq2k 2026-05-08 20:40:28+00:00| seen| https://gist.github.com/alon710/bf727aea4f480d1e2e016713a2841996...

CVE-2026-43067

creationtimestamp| type| source ---|---|--- 2026-05-05 16:42:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mxfrwuy2h...

CVE-2026-43072

creationtimestamp| type| source ---|---|--- 2026-05-05 16:38:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4mqus5v22t 2026-07-02 05:51:52+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 05:54:05+00:00| seen...

CVE-2026-7411

creationtimestamp| type| source ---|---|--- 2026-05-05 16:31:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mefctky2k 2026-05-05 18:43:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4tqy34lp2t 2026-05-06 08:13:41+00:00| seen|...

CVE-2026-43002

creationtimestamp| type| source ---|---|--- 2026-05-05 15:38:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml4jgb2lgf2i...

CVE-2025-61310

creationtimestamp| type| source ---|---|--- 2026-05-05 14:58:24+00:00| seen| https://gist.github.com/ZeroBreach-GmbH/9d68c717a402aab13eb0d4771a08fc79...

CVE-2026-42437

creationtimestamp| type| source ---|---|--- 2026-05-05 14:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gyxc7zt2h 2026-05-05 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4rcoj5ey2k...

CVE-2026-42434

creationtimestamp| type| source ---|---|--- 2026-05-05 14:46:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4gid7yxw2k 2026-05-05 19:04:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uwjowjc2z 2026-09-12 10:00:16+00:00| seen|...

CVE-2023-54345

creationtimestamp| type| source ---|---|--- 2026-05-05 14:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4fredgql2p 2026-05-05 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml53qzxehq2o 2026-05-05 21:25:42+00:00| seen|...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the QQBot reply media URL handling process. An attacker can access internal resources and exfiltrate sensitive information by supplying crafted media...

CVE-2023-54342

creationtimestamp| type| source ---|---|--- 2026-05-05 13:33:16+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml4cfcmpf225 2026-05-05 14:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4fioxymm2c 2026-09-12 10:00:15+00:00| seen|...

CVE-2026-43531

creationtimestamp| type| source ---|---|--- 2026-05-05 12:56:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4admiy662r...

CVE-2026-43526

OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by providing malicious media URLs that trigger SSRF requests, with fetched bytes subsequently re-uploaded...

Update WhatsApp now: Two new flaws could expose you to malicious files

Meta has published a new security advisory for messaging app WhatsApp, announcing patches for two vulnerabilities. WhatsApp has fixed two security flaws that could be abused to interfere with how media and attachments are handled on your device. There is no evidence that either bug has been...

CVE-2026-43526

OpenClaw is affected by a server-side request forgery (SSRF) in QQBot reply media URL handling, exploitable in versions before 2026.4.12. Attackers can supply malicious media URLs to trigger SSRF and have the fetched bytes re-uploaded through the channel. The issue has been fixed in 2026.4.12 (an...

CVE-2026-43526 OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling

OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by providing malicious media URLs that trigger SSRF requests, with fetched bytes subsequently re-uploaded...

EUVD-2026-27263

OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by providing malicious media URLs that trigger SSRF requests, with fetched bytes subsequently re-uploaded...

CVE-2026-43526 OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling

OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by providing malicious media URLs that trigger SSRF requests, with fetched bytes subsequently re-uploaded...

CVE-2026-6180

creationtimestamp| type| source ---|---|--- 2026-05-05 11:19:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml42vmaprd2v 2026-05-05 14:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fubobns2c...

python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...