BELL-CVE-2026-31733

Bulletin has no description...

CVE-2026-42027

creationtimestamp| type| source ---|---|--- 2026-05-05 20:20:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4z5cnhi52s...

CVE-2026-31520

creationtimestamp| type| source ---|---|--- 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

CVE-2026-25588

creationtimestamp| type| source ---|---|--- 2026-05-05 12:03:10+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-423 2026-05-07 05:34:51+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-redis 2026-05-07 20:00:00+00:00| seen|...

CVE-2026-2729

creationtimestamp| type| source ---|---|--- 2026-05-05 10:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3zrsedcp2c...

CVE-2026-6702

creationtimestamp| type| source ---|---|--- 2026-05-05 06:26:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kk5lcqb2k 2026-05-09 01:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlf3zgnxta2g...

CVE-2026-7832

creationtimestamp| type| source ---|---|--- 2026-05-05 04:16:31+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-7832 2026-05-05 21:51:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116524180696562443...

CVE-2026-30246

creationtimestamp| type| source ---|---|--- 2026-05-05 04:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-30246...

CVE-2026-27693

creationtimestamp| type| source ---|---|--- 2026-05-05 04:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27693...

CVE-2026-27694

creationtimestamp| type| source ---|---|--- 2026-05-05 04:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-27694...

CVE-2026-28510

creationtimestamp| type| source ---|---|--- 2026-05-05 04:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-28510...

PT-2026-37254

Summary Mage ProductAlert AddController::stockAction reads the uenc query parameter and passes it directly to $this- redirectUrl$backUrl without calling $this- isUrlInternal When the supplied product id does not match any catalog product, the server issues an unvalidated HTTP 302 redirect to...

CVE-2026-7738

creationtimestamp| type| source ---|---|--- 2026-05-04 11:11:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzjyicqro2o...

Malicious Package

Overview @m0ntana/app.web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

ECHO-676A-E38E-E92A

Bulletin has no description...

CVE-2026-36767

creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqewscpgn2w 2026-04-30 19:47:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexlowma2q 2026-04-30 20:43:37+00:00| seen|...

CVE-2026-40595

creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqevntsov2r 2026-04-30 21:51:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkqlwhmhop2f...

CVE-2026-40601

creationtimestamp| type| source ---|---|--- 2026-04-30 19:20:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqdh4eymd2q 2026-04-30 19:49:00+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mkqf2pttnz2b...

CVE-2025-14576

creationtimestamp| type| source ---|---|--- 2026-04-30 16:46:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq2tzsw5o2h...

Malicious code in blackbeards-navigator (npm)

Four pirate-themed npm packages blackbeards-navigator, beusy, sirens-lament, gunpowder-ghost were published by the npm account beusy with heavily inflated version numbers 209.0.0–210.0.0, a hallmark of dependency confusion attacks. Each package contains identical malicious lifecycle scripts...