CVE-2026-1115

creationtimestamp| type| source ---|---|--- 2026-04-10 07:18:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rswudie2h 2026-04-10 07:19:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rtmsbzr2t 2026-04-10 08:47:51+00:00| seen|...

CVE-2026-34424

creationtimestamp| type| source ---|---|--- 2026-04-10 00:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116377468153554720 2026-04-10 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mj3zdgg6dv22 2026-04-10 00:48:30+00:00| seen|...

LiteLLM 安全漏洞

LiteLLM is an open-source application developed by Berri AI. It allows for the invocation of all LLM APIs in the OpenAI format. Versions of LiteLLM dated before April 8, 2026, contain a security vulnerability. This vulnerability stems from the /guardrails/testcustomcode URI, which allows arbitrar...

GHSA-VFG3-PQPQ-93M4

creationtimestamp| type| source ---|---|--- 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo...

CVE-2026-35639

creationtimestamp| type| source ---|---|--- 2026-04-09 22:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3tqrmla32o 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo 2026-04-10 07:11:26+00:00| seen|...

GHSA-6GM9-3G7M-3965

creationtimestamp| type| source ---|---|--- 2026-04-09 21:22:41+00:00| published-proof-of-concept| Telegram/3Mh7UNYEFXpMlnqwZliCqvVomRJKwd1lMrCq1dUb7HxJoTM...

CVE-2026-28704

creationtimestamp| type| source ---|---|--- 2026-04-09 21:15:00+00:00| seen| https://jvn.jp/en/jp/JVN00263243/ 2026-04-10 07:17:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rr3mnti27 2026-04-10 09:02:53+00:00| seen|...

CVE-2026-40089

creationtimestamp| type| source ---|---|--- 2026-04-09 20:57:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3p4r7jpv2d 2026-04-09 21:22:41+00:00| published-proof-of-concept| Telegram/3Mh7UNYEFXpMlnqwZliCqvVomRJKwd1lMrCq1dUb7HxJoTM 2026-04-10 08:07:45+00:00| seen|...

CVE-2026-5329

creationtimestamp| type| source ---|---|--- 2026-04-09 19:23:14+00:00| seen| Telegram/Y2UpQC9zCL6PqNfAxsSoQJ7YUumR5oW0JI3RILB7SgtOVH4 2026-04-09 21:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3per6g4y2s 2026-04-12 08:44:54+00:00| seen|...

GHSA-9FR2-PPRW-PP9J

creationtimestamp| type| source ---|---|--- 2026-04-09 17:23:27+00:00| seen| Telegram/UYy9QXiDWOzFY7CBVA8MS0Xr-No70LVttPhqPBLktKhMGyQ...

CVE-2026-5959

creationtimestamp| type| source ---|---|--- 2026-04-09 17:19:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3cvp2pde2s...

This fake Windows support website delivers password-stealing malware

A fake Microsoft support website is tricking people into downloading what looks like a normal Windows update. Instead, it installs malware designed to steal passwords, payment details, and account access. Because the file looks legitimate and avoids detection, it can slip past both users and...

Exploit for CVE-2026-40271

Lazarus Group: 19-Day A/B Test Campaign Analysis TLP:CLEA...

CVE-2026-39890

creationtimestamp| type| source ---|---|--- 2026-04-08 22:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizetxhbte2n 2026-04-09 01:27:32+00:00| published-proof-of-concept| Telegram/Dz-0u6C1u9T0WCXCs4W5hHtkLp3TtNEV9yEjsLh0yFvD1Y 2026-04-09 06:00:37+00:00| seen|...

CVE-2026-4498

creationtimestamp| type| source ---|---|--- 2026-04-08 19:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyylbxgtj2o 2026-04-08 23:32:47+00:00| seen| Telegram/ZztUGlJiiCH0mZAuu7v3RF9KN1NNH1hWH4kt4dDN5ep1QI 2026-04-09 09:00:49+00:00| seen|...

EUVD-2026-20425

Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5Plus April: from n/a through = 6.8...

CVE-2026-39714

Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5Plus April: from n/a through = 6.8...

CVE-2026-39714 WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5Plus April: from n/a through = 6.8...

CVE-2026-39714 WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5Plus April: from n/a through = 6.8...

CVE-2026-39714

CVE-2026-39714 describes a Missing Authorization (broken access control) vulnerability in G5Theme G5Plus April for WordPress, affecting versions up to 6.8. The root cause is misconfigured access control enabling unauthorized access (no privileges, no user interaction required) over network. The C...