PT-2026-47211

Name of the Vulnerable Software and Affected Versions Symfony versions prior to 5.4.31 Symfony versions prior to 6.4.11 Description SymfonyComponentHttpClientNoPrivateNetworkHttpClient is a decorator designed to block requests to private networks. However, the list of blocked subnets omits severa...

CVE-2026-8951

creationtimestamp| type| source ---|---|--- 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520...

CVE-2026-31378

creationtimestamp| type| source ---|---|--- 2026-05-19 17:02:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm7umdaopw25...

CVE-2026-8739

creationtimestamp| type| source ---|---|--- 2026-05-17 09:02:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlzyqregxy26 2026-05-17 12:22:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm2e2tqw5c2p...

CVE-2026-45393

Technical details for CVE-2026-45393 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates when disclosure is published.

CVE-2026-42887

creationtimestamp| type| source ---|---|--- 2026-05-11 21:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlm7lupnk52e...

CVE-2026-35382

Voluntarily withdrawn...

CVE-2026-6386

creationtimestamp| type| source ---|---|--- 2026-04-22 04:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2ndtrzbr2h...

CVE-2026-33808

creationtimestamp| type| source ---|---|--- 2026-04-15 01:50:08+00:00| published-proof-of-concept| https://github.com/fastify/fastify-express/security/advisories/GHSA-6hw5-45gm-fj88 2026-04-15 09:37:06+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mjjlupakwk2c 2026-04-15...

CVE-2026-34861

creationtimestamp| type| source ---|---|--- 2026-04-13 07:17:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjed4rvgs62t...

CVE-2026-35568

creationtimestamp| type| source ---|---|--- 2026-04-07 23:21:25+00:00| seen| Telegram/ob3ye0FCdfhceb6CimILWC3jRIWmZERTbGMc-OQRsW6HR0 2026-04-08 01:06:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mix43getbr2t...

CVE-2026-4905

creationtimestamp| type| source ---|---|--- 2026-03-27 00:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyt4tzt522i 2026-03-27 01:18:53+00:00| seen| Telegram/67MCm8uvWkL1PFFVLqu-Ae9nhYuAfQmsKMFjCSOu4hiA4mc 2026-03-27 01:18:59+00:00| seen|...

CVE-2026-3525 File Access Fix (deprecated) - Moderately critical - Access bypass - SA-CONTRIB-2026-020

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

CVE-2026-32867

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage...

CVE-2026-32867

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage...

PT-2026-26309

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage...

CVE-2026-29174

creationtimestamp| type| source ---|---|--- 2026-03-09 22:58:48+00:00| published-proof-of-concept| https://github.com/craftcms/commerce/security/advisories/GHSA-pmgj-gmm4-jh6j...

CVE-2026-20031

A vulnerability in the HTML Cascading Style Sheets CSS module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit th...

DEBIAN-CVE-2026-3544

Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

CVE-2026-28372

creationtimestamp| type| source ---|---|--- 2026-02-27 17:10:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mfu7c6ijjb2z 2026-03-02 07:10:32+00:00| seen| https://gist.github.com/alon710/e03d04f1cd72c0b9caeca59fc12c90ff 2026-03-02 16:20:10+00:00| seen|...