CVE-2026-34203

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password validation rules defined by Django's AUTHPASSWORDVALIDATORS setting which defaults to an empty list, i.e., no specific...

CVE-2026-4101

creationtimestamp| type| source ---|---|--- 2026-04-01 22:35:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihqtgefr223 2026-04-01 23:27:43+00:00| seen| Telegram/9bl7FEfQKeFpZFPlYLUaNlRChLBL7dB3Syrn3BTLiX1da84 2026-04-02 03:21:19+00:00| seen|...

CVE-2023-3630

creationtimestamp| type| source ---|---|--- 2026-04-01 22:32:51+00:00| seen| https://gist.github.com/poespas/fc5f1bc78c4f58d6fc2aea0d777fb594...

CVE-2026-4820

creationtimestamp| type| source ---|---|--- 2026-04-01 22:18:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihpusgg5427...

CVE-2026-34566

creationtimestamp| type| source ---|---|--- 2026-04-01 22:06:28+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-458r-h248-29c5 2026-04-01 22:31:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihqlqrjev23 2026-04-01 23:27:52+00:00| seen|...

CVE-2026-34563

creationtimestamp| type| source ---|---|--- 2026-04-01 22:04:21+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-85m8-g393-jcxf 2026-04-01 22:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihpeqx5ps2j 2026-04-01 23:27:43+00:00| seen|...

CVE-2026-35187

creationtimestamp| type| source ---|---|--- 2026-04-01 21:50:38+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-2wvg-62qm-gj33 2026-04-06 21:21:26+00:00| published-proof-of-concept| Telegram/xKxKUYX0BRejEqYlrURXsjCQY9BctYcoeewNmSMWqY7riM 2026-04-07...

CVE-2025-28863

creationtimestamp| type| source ---|---|--- 2026-04-01 21:29:00+00:00| seen| Telegram/6y4OW2G1A8XZhZLMGjxYxeNXlyTAQDqUEjYEIveMn1hLA...

CVE-2025-26935

creationtimestamp| type| source ---|---|--- 2026-04-01 21:28:26+00:00| seen| Telegram/EgY-3dooiREg-dALgS8idmo8jFkn1Hp5AACRbJP7ZYbsQN4...

CVE-2026-34519

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the reason parameter when creating a Response may be able to inject extra headers or similar exploits. This issue has been patched in version 3.13.4...

CVE-2026-34875

creationtimestamp| type| source ---|---|--- 2026-04-01 21:15:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihme55qqg25 2026-04-02 05:26:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miihsin2yo2w 2026-04-07 12:00:14+00:00| seen|...

CVE-2026-34748

creationtimestamp| type| source ---|---|--- 2026-04-01 21:00:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihljbpvno2g 2026-04-01 23:27:18+00:00| seen| Telegram/bl6LC3S0UxxO5vDfC3lE4LaBC6ObKrhuhRcx8XqwmK5Cxg 2026-04-02 04:01:01+00:00| seen|...

CVE-2026-34236

creationtimestamp| type| source ---|---|--- 2026-04-01 20:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihkrw5hex2o 2026-04-02 06:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miijpsj6q32s 2026-04-03 17:26:14+00:00| published-proof-of-concept|...

CVE-2026-3831

creationtimestamp| type| source ---|---|--- 2026-04-01 20:45:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mihkodgmvj2e...

CVE-2026-34519

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.13.4, an attacker who controls the reason parameter when creating a Response may be able to inject extra headers or similar exploits. This issue has been patched in version 3.13.4...

CVE-2026-33978

creationtimestamp| type| source ---|---|--- 2026-04-01 18:35:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihdg4oqzu2t...

CVE-2026-34603

creationtimestamp| type| source ---|---|--- 2026-04-01 18:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihcrqz64w2i 2026-04-03 17:26:02+00:00| published-proof-of-concept| Telegram/XKiVP0TBNKcSgroBasKUd6A0zwSV-UpgyYoSDTGkjCiQdks 2026-04-08 07:40:08+00:00| seen|...

CVE-2026-34604

creationtimestamp| type| source ---|---|--- 2026-04-01 18:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihc2ydh7y25 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ 2026-04-08 08:00:15+00:00| seen|...

CVE-2026-34445

creationtimestamp| type| source ---|---|--- 2026-04-01 18:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihbib4dmj2q 2026-04-02 06:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miijq7xfra2t 2026-04-02 06:01:43+00:00| seen|...

CVE-2026-33276

Stored cross-site scripting XSS in Checkmk 2.5.0 beta before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in the browsers of other users performing searches in the Unified Search feature...