GHSA-WG36-WVJ6-R67P

creationtimestamp| type| source ---|---|--- 2026-04-15 23:27:35+00:00| seen| Telegram/ajbOyvFAewWZ2L70l5GRQuj2wRnDYaN4zfpEHfJh7NMuY...

GHSA-855C-R2VQ-C292

creationtimestamp| type| source ---|---|--- 2026-04-15 23:26:09+00:00| seen| Telegram/uDqb5UNOJD19g19jmJKdnJBBrEUml8WxLQrnFn708j03zpg...

CLSA-2026-1776246056 glib2: Fix of 5 CVEs

CVE-2026-1489: fix integer overflow in Unicode case conversion functions - CVE-2026-1484: fix integer overflow in GLib Base64 encoding - CVE-2026-1485: fix buffer underflow in content type treemagic parsing - CVE-2026-0988: fix integer overflow in gbufferedinputstreampeek - CVE-2025-7039: fix...

CVE-2026-22676

creationtimestamp| type| source ---|---|--- 2026-04-15 22:47:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjky2ltucy2t 2026-04-15 23:27:13+00:00| seen| Telegram/BTRiP8nJHP-5om9x2gw2G6e9UIMxwZAfdQggaCph1qz04g...

CVE-2026-6384

creationtimestamp| type| source ---|---|--- 2026-04-15 22:32:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkx7q2ru72k 2026-04-15 23:27:13+00:00| seen| Telegram/BTRiP8nJHP-5om9x2gw2G6e9UIMxwZAfdQggaCph1qz04g...

CVE-2026-33435

creationtimestamp| type| source ---|---|--- 2026-04-15 21:45:57+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjkum2kupx2l 2026-04-15 23:25:44+00:00| published-proof-of-concept| Telegram/M6EVzZe60-ZK2hxHMbXVzi0icuKFKnAtI2GiQ0rZVKguBtE 2026-04-22 12:07:07+00:00| seen|...

CVE-2026-41276

creationtimestamp| type| source ---|---|--- 2026-04-15 21:44:09+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-f6hc-c5jr-878p 2026-04-23 21:26:47+00:00| seen| Telegram/lUzHwqY45MHoOS5UDHqr6saeA9vYjttsYdPIjTNMATUwM 2026-04-25 01:11:56+00:00| seen|...

CVE-2026-41273

creationtimestamp| type| source ---|---|--- 2026-04-15 21:43:37+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6f7g-v4pp-r667 2026-04-23 21:26:47+00:00| seen| Telegram/lUzHwqY45MHoOS5UDHqr6saeA9vYjttsYdPIjTNMATUwM 2026-04-25 03:00:12+00:00| seen|...

CVE-2026-41270

creationtimestamp| type| source ---|---|--- 2026-04-15 21:43:08+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-xhmj-rg95-44hv 2026-04-23 21:26:31+00:00| seen| Telegram/BiTM4VWQdbYmMG43-mv447qo5-YjFbOvUme2BKAYDCNPPw...

CVE-2026-41138

creationtimestamp| type| source ---|---|--- 2026-04-15 21:42:02+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-f228-chmx-v6j6 2026-04-23 20:30:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mk6u56kkz62f 2026-04-23...

EUVD-2026-23007

IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPRight to incorrectly create new...

CVE-2026-40118

creationtimestamp| type| source ---|---|--- 2026-04-15 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN88396700...

GHSA-78X4-6X83-JX75

creationtimestamp| type| source ---|---|--- 2026-04-15 19:21:23+00:00| seen| Telegram/7Ck-SXA1c6Vf9FqVW81avKVix-fYO39OzelndhESQPxXBQ...

CVE-2025-60991

creationtimestamp| type| source ---|---|--- 2026-04-15 19:20:49+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjkmiin6ad26...

CVE-2026-20152

creationtimestamp| type| source ---|---|--- 2026-04-15 19:17:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkmbzpqxh2o 2026-04-16 17:19:57+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116415528739254723 2026-04-16 18:00:00+00:00| seen|...

GHSA-5R37-QPWQ-2JHH

creationtimestamp| type| source ---|---|--- 2026-04-15 18:59:08+00:00| seen| https://bsky.app/profile/Whiskeyomega.cupoftea.social.ap.brid.gy/post/3mjklbnicupa2 2026-04-23 21:26:07+00:00| published-proof-of-concept| Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9UsDC-frBku-7BiY...

CVE-2026-41323

creationtimestamp| type| source ---|---|--- 2026-04-15 18:43:09+00:00| published-proof-of-concept| https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4 2026-04-24 05:18:58+00:00| seen| Telegram/kIuLSWSF-lSSH53f04z2OEjKv8ykvXtTNiYc9dOAOt4c 2026-04-24 05:45:50+00:00| seen|...

GHSA-CW73-5F7H-M4GV Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands npm, npx accept argument flags that enable...

Upsonic: remote code execution vulnerability in its MCP server/task creation functionality

Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality. The application allows users to define MCP tasks with arbitrary command and args values. Although an allowlist exists, certain allowed commands npm, npx accept argument flags that enable...

CVE-2026-6297

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkujjp3g72k 2026-04-15 23:26:09+00:00| seen|...