CVE-2026-43985

creationtimestamp| type| source ---|---|--- 2026-06-04 23:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3kpziq2q...

CVE-2026-5066

creationtimestamp| type| source ---|---|--- 2026-06-04 22:42:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnip2hi5672f...

CVE-2026-41249

creationtimestamp| type| source ---|---|--- 2026-06-04 21:01:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnijg3sqtc22 2026-06-04 22:21:00+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mninur6c7d2w 2026-06-04 22:47:45+00:00| seen|...

CVE-2026-41522

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at /graphql that does not enforce the same authorization checks as the REST API. Any authenticated user can...

CVE-2026-41522 Iris has an Improper Authorization issue

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at /graphql that does not enforce the same authorization checks as the REST API. Any authenticated user can...

CVE-2026-41522

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at /graphql that does not enforce the same authorization checks as the REST API. Any authenticated user can...

CVE-2026-41522 Iris has an Improper Authorization issue

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at /graphql that does not enforce the same authorization checks as the REST API. Any authenticated user can...

EUVD-2026-34320

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at /graphql that does not enforce the same authorization checks as the REST API. Any authenticated user can...

CVE-2026-41522

Affected software: Iris DFIR-IRIS web collaboration platform. Vulnerable version: earlier than 2.4.28. Issue: optional GraphQL endpoint at /graphql did not enforce the same authorization as the REST API, enabling three unauthorized actions by any authenticated user: (1) IOC read across cases (IDO...

GHSA-V39M-97P8-GQG7 Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

UserController::upsertUser writes user data in SYSTEMSCOPE and does not filter the admin field. A non-admin API user with user:create or user:update ACL permission can set admin: true on new or existing users, escalating to full admin access. The Problem In...

CVE-2026-41207

creationtimestamp| type| source ---|---|--- 2026-06-04 19:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnidzlfbgm2f...

GHSA-WC3V-3457-C8CM OpenMeter: SQL injection through meter creation

Summary An authenticated tenant can inject arbitrary SQL through the valueProperty or groupBy fields of POST /api/v1/meters. The injection passes the application's JSONPath validation check and executes against the shared ClickHouse database, which contains event data for all tenants with no...

OpenMeter: SQL injection through meter creation

Summary An authenticated tenant can inject arbitrary SQL through the valueProperty or groupBy fields of POST /api/v1/meters. The injection passes the application's JSONPath validation check and executes against the shared ClickHouse database, which contains event data for all tenants with no...

CVE-2026-10864

creationtimestamp| type| source ---|---|--- 2026-06-04 15:51:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116692633027353872...

CVE-2025-62338

creationtimestamp| type| source ---|---|--- 2026-06-04 15:11:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhvupnvuy2p...

CVE-2026-40605

creationtimestamp| type| source ---|---|--- 2026-06-04 15:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhvehyugn2b...

CVE-2026-50076

creationtimestamp| type| source ---|---|--- 2026-06-04 15:00:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnhvaiggnp2z 2026-06-04 22:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnimqlnbzi2f 2026-07-03 22:54:47+00:00| seen|...

CVE-2019-25745

creationtimestamp| type| source ---|---|--- 2026-06-04 14:49:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhunutpu526 2026-06-04 23:28:00+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnirmljg7r2d 2026-06-04 23:30:30+00:00| seen|...

CVE-2026-10861

creationtimestamp| type| source ---|---|--- 2026-06-04 14:46:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhuhzxasw2b...

CVE-2026-10840

creationtimestamp| type| source ---|---|--- 2026-06-04 14:21:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116692281779225455 2026-07-25 23:56:44+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrj2yw5jzz2c...