CVE-2026-42431

creationtimestamp| type| source ---|---|--- 2026-04-28 20:20:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklfvlw2dx2e 2026-04-28 20:31:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklgia46ed2e 2026-04-29 01:00:42+00:00| seen|...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-41649 Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...

CVE-2026-6970

creationtimestamp| type| source ---|---|--- 2026-04-28 20:11:02+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mklfebpkit2s 2026-05-01 07:03:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkrkpz77ed26 2026-05-06 07:40:29+00:00| seen|...

CVE-2026-7348

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:41:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklugzsstg2e 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7363

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklwnjlgsb2h 2026-05-01 02:56:14+00:00| seen|...

CVE-2026-7361

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 01:00:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklvjpue7m2p 2026-04-29 04:10:36+00:00| seen|...

CVE-2026-7346

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:33:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkltzjp3az2h 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-7351

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mklu5o2z2n2k 2026-05-03 18:00:00+00:00| seen|...

CVE-2026-42486

creationtimestamp| type| source ---|---|--- 2026-04-28 18:38:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkla62aalt24 2026-04-29 12:50:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56ry53l2c 2026-04-29 17:13:58+00:00| seen|...

CVE-2026-39513

creationtimestamp| type| source ---|---|--- 2026-04-28 18:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkl7v6pnib2a...

CVE-2026-7324

creationtimestamp| type| source ---|---|--- 2026-04-28 17:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl4dvvv432v 2026-04-29 05:55:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4 2026-04-29 12:50:21+00:00| seen|...

CVE-2026-31688

creationtimestamp| type| source ---|---|--- 2026-04-28 16:58:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116483390904195645...

CVE-2026-24231

creationtimestamp| type| source ---|---|--- 2026-04-28 16:55:35+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116483372219679349...

CVE-2026-23558

creationtimestamp| type| source ---|---|--- 2026-04-28 12:54:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkkmx3sy7i2s 2026-04-29 01:49:24+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-citrix-xenserver 2026-04-29 12:45:35+00:00| seen|...

CVE-2026-23557

creationtimestamp| type| source ---|---|--- 2026-04-28 12:44:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkkmghsydi24 2026-04-29 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56ry53l2c...

BIT-KYVERNO-2026-41485 Kyverno Controller Denial of Service via forEach Mutation Panic

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked type assertion in the forEach mutation handler allows any user with permission to create a Policy or ClusterPolicy to crash the cluster-wide background controller int...

GHSA-74M3-9QVM-RP9H

creationtimestamp| type| source ---|---|--- 2026-04-28 10:10:28+00:00| seen| https://gist.github.com/alon710/88fd2e850268852a0a0d536e453359e1...

CVE-2026-7248

creationtimestamp| type| source ---|---|--- 2026-04-28 09:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkkbkxvuui2o 2026-04-28 09:30:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116481630491966753 2026-04-28 11:14:03+00:00| seen|...

USN-8214-1: NLTK vulnerability

It was discovered that NLTK incorrectly handled file extraction when opening a maliciously crafted zip file. An attacker could possibly use this issue to create or overwrite files on the system and execute arbitrary code...