CVE-2026-6855 Instructlab: instructlab: path traversal allows arbitrary directory creation and file write

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the logsdir parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to...

CVE-2026-33260

creationtimestamp| type| source ---|---|--- 2026-04-22 12:13:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3hvqcf4a2c...

CVE-2026-40892

A flaw was found in PJSIP, a multimedia communication library. This vulnerability, a stack buffer overflow, occurs in the pjsipauthcreatedigest2 function when processing pre-computed digest credentials. A remote attacker could exploit this by providing specially crafted credential data, leading t...

WordPress Create DB Tables plugin <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Database Table Creation/Deletion vulnerability discovered by theviper17y in WordPress Plugin Create DB Tables versions = 1.2.1...

CVE-2026-41666

creationtimestamp| type| source ---|---|--- 2026-04-22 09:22:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk36dqogt72r...

CVE-2026-6848 Quay: red hat quay: authentication bypass allows privileged actions without valid credentials

A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentication prompt can be bypassed. This allows a user with a timed-out session, or an attacker with access to an idle...

CVE-2026-6848

A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentication prompt can be bypassed. This allows a user with a timed-out session, or an attacker with access to an idle...

CVE-2026-22747

creationtimestamp| type| source ---|---|--- 2026-04-22 08:49:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk34ilz6jn2i 2026-04-22 12:45:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnvyvfq2h 2026-04-28 14:00:04+00:00| published-proof-of-concept|...

CVE-2026-6023

creationtimestamp| type| source ---|---|--- 2026-04-22 08:46:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk34cmwggp2k 2026-04-22 09:15:31+00:00| seen| Telegram/4TzioWDgsVQC8RNZfmkg0C5nwkVRV-bYkkXJoHA6GlOJ-c 2026-04-22 10:23:24+00:00| seen|...

CVE-2026-41665

creationtimestamp| type| source ---|---|--- 2026-04-22 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33id3frp2o...

CVE-2026-40450

creationtimestamp| type| source ---|---|--- 2026-04-22 08:29:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33exhwe62n...

CVE-2026-22748

creationtimestamp| type| source ---|---|--- 2026-04-22 08:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk336shaxa2p 2026-04-22 12:45:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnvyvfq2h...

CVE-2026-4119

CVE-2026-4119 affects the WordPress plugin Create DB Tables (versions up to and including 1.2.1). The vulnerability arises from missing capability checks and nonce verification in admin_post hooks for creating and deleting tables, allowing any authenticated user (including Subscribers) to execute...

CVE-2026-4119 Create DB Tables <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion via admin-post.php

The Create DB Tables plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.2.1. The plugin registers adminpost action hooks for creating tables adminpostaddtable and deleting tables adminpostdeletedbtable without implementing any capability checks via...

CVE-2026-6416

creationtimestamp| type| source ---|---|--- 2026-04-22 04:46:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2ovzzxx42q...

CVE-2026-41457

creationtimestamp| type| source ---|---|--- 2026-04-22 04:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2mtmcsed2i...

CVE-2026-40344

creationtimestamp| type| source ---|---|--- 2026-04-22 03:09:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2jhjnulk2q 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg...

CVE-2026-41131

creationtimestamp| type| source ---|---|--- 2026-04-22 02:49:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2idpwpez2t...

CVE-2026-41128

creationtimestamp| type| source ---|---|--- 2026-04-22 02:44:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2i2rinzz2i...

CVE-2026-40343

creationtimestamp| type| source ---|---|--- 2026-04-22 02:12:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk2gcftelj2c 2026-04-22 02:15:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mk2gh34d43w2...