CVE-2026-7002

creationtimestamp| type| source ---|---|--- 2026-04-26 02:04:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkehpzisv627...

CVE-2026-31681

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtmultiport: validate range encoding in checkentry portsmatchv1 treats any non-zero pflags entry as the start of a port range and unconditionally consumes the next ports element as the range end. The checkentry path...

CVE-2026-41322 @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed

@astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, requesting a static js/css resources from astro path with an incorrect/malformed if-match header returns a 500 error with a one year cache lifetime instead of 412 in some cases. This has the effect that all...

CVE-2026-41322

CVE-2026-41322 affects @astrojs/node used with Astro. Prior to 10.0.5, when a malformed/incorrect If-Match header triggers a precondition failure for static files under /_astro/, the underlying stream emits an error after emitting a file event and the server responds with 500 Internal Server Erro...

CVE-2026-38743

creationtimestamp| type| source ---|---|--- 2026-04-24 15:27:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkatnsscyw2u...

CVE-2026-41309

creationtimestamp| type| source ---|---|--- 2026-04-24 03:57:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk7n43ib3e2n 2026-04-24 05:18:58+00:00| seen| Telegram/kIuLSWSF-lSSH53f04z2OEjKv8ykvXtTNiYc9dOAOt4c...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0831

Updates of 'erlang' packages of Photon OS have been released...

CVE-2026-4117

creationtimestamp| type| source ---|---|--- 2026-04-23 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk76czqxax2s...

CVE-2026-29198

creationtimestamp| type| source ---|---|--- 2026-04-23 21:25:36+00:00| published-proof-of-concept| Telegram/tS2ffuiIBjg-jG5ou8TlrNJjBU2OGhcKfhZwclhyaQjdHg 2026-06-03 04:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/87073 2026-06-03 09:00:04+00:00| seen|...

CVE-2026-35351

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries. The utility falls back to a copy-and-delete routine that creates the destination file using the caller's UID/GID rather than the source's metadata. This flaw breaks backups and...

CVE-2026-35362

The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...

CVE-2026-35361

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

CVE-2026-35346

The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::fromutf8lossy, which replaces invalid UTF-8 byte sequences with the Unicode replacement character U+FFFD. This behavior differs from GNU comm, whic...

GHSA-C57F-MM3J-27Q9 Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

Summary Requesting a static JS/CSS resource from the astro path with an incorrect or malformed if-match header returns a 500 error with a one-year cache lifetime instead of 412 in some cases. As a result, all subsequent requests to that file — regardless of the if-match header — will be served a...

CVE-2026-6019

creationtimestamp| type| source ---|---|--- 2026-04-23 14:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk67gae64g2b 2026-06-23 12:01:34+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3moxe4mppew2g 2026-06-27 16:32:12+00:00| seen|...

CVE-2025-58226

creationtimestamp| type| source ---|---|--- 2026-04-23 11:38:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-58226.yaml 2026-04-25 21:03:13+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukgv3w2f 2026-10-08...

CVE-2026-41640

creationtimestamp| type| source ---|---|--- 2026-04-23 09:30:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-41640.yaml 2026-04-24 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkbgeo6kxw2t 2026-05-07...

CVE-2026-40924 vulnerabilities

Vulnerabilities for packages: tkn, tekton-chains...

CVE-2026-33277

creationtimestamp| type| source ---|---|--- 2026-04-22 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN57877356 2026-04-27 00:22:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkgsi5pxr72z 2026-04-27 03:00:31+00:00| seen|...

CVE-2026-41468

creationtimestamp| type| source ---|---|--- 2026-04-22 20:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4bz7iiyc2k 2026-04-22 21:21:17+00:00| published-proof-of-concept| Telegram/he0Z1Xxb4PMjQ5eYVBKNYLHtJZg-G0d3XJmG72co7nWMuw 2026-04-23 09:00:28+00:00| seen|...