CVE-2026-1403

creationtimestamp| type| source ---|---|--- 2026-04-09 12:45:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tm4jzoj2z 2026-04-09 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260410...

CVE-2015-4152

creationtimestamp| type| source ---|---|--- 2026-04-09 12:45:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlogbtp2z...

CVE-2025-66038

creationtimestamp| type| source ---|---|--- 2026-04-09 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tlhrxnc2b...

GHSA-Q96J-3FMM-7FV4

creationtimestamp| type| source ---|---|--- 2026-04-09 11:16:38+00:00| seen| Telegram/nE1gVyn8jRxbZ-OhSUewb4fvVZDT-qjlGTvhk8YiMctdMk...

CVE-2026-40163

creationtimestamp| type| source ---|---|--- 2026-04-09 11:09:20+00:00| published-proof-of-concept| https://github.com/saltcorn/saltcorn/security/advisories/GHSA-32pv-mpqg-h292 2026-04-10 19:22:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj62bo53iz2g 2026-04-10 19:31:23+00:00|...

CVE-2026-25013

creationtimestamp| type| source ---|---|--- 2026-04-09 10:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2lzzujah2u...

CVE-2026-34178

In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/container/backup.yaml, a separate file in the same archive that is never checked against project restrictions. An...

CVE-2026-40111

creationtimestamp| type| source ---|---|--- 2026-04-09 10:01:19+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-v7px-3835-7gjx 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo 2026-04-09 23:30:43+00:00|...

CVE-2026-4436

creationtimestamp| type| source ---|---|--- 2026-04-09 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-099-02 2026-04-09 21:22:41+00:00| published-proof-of-concept| Telegram/3Mh7UNYEFXpMlnqwZliCqvVomRJKwd1lMrCq1dUb7HxJoTM 2026-04-09 21:37:12+00:00| seen|...

CVE-2026-3574

creationtimestamp| type| source ---|---|--- 2026-04-09 04:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizxv3nghk2d...

CVE-2026-5837

creationtimestamp| type| source ---|---|--- 2026-04-09 04:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizxm573fh2o 2026-04-09 05:15:27+00:00| published-proof-of-concept| Telegram/qm3ZDWS3OwUpmw9ncg5iRXx1aqT9bGCn0-RoRVSAPQoeyYE...

CVE-2026-5827

creationtimestamp| type| source ---|---|--- 2026-04-09 03:17:46+00:00| seen| Telegram/ZhHTvdGvqelQnWGxac6AgW1yDwBJoqk121-9f5TTSbIIEQ...

CVE-2026-24378

creationtimestamp| type| source ---|---|--- 2026-04-09 02:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizr7qdcza2j...

GHSA-H749-FXX7-PWPG

creationtimestamp| type| source ---|---|--- 2026-04-09 01:27:18+00:00| published-proof-of-concept| Telegram/viJYT7gg8S3gJ-1aMGboAArF-0qOTu7PWcGdGBWdFKwXc...

GHSA-FJ6V-43R7-GCJM

creationtimestamp| type| source ---|---|--- 2026-04-09 01:27:18+00:00| published-proof-of-concept| Telegram/viJYT7gg8S3gJ-1aMGboAArF-0qOTu7PWcGdGBWdFKwXc...

GHSA-9QX4-67JM-CC66

creationtimestamp| type| source ---|---|--- 2026-04-09 01:27:07+00:00| seen| Telegram/CihYo3BrEf6YGxiGwCEATnWAB3StjZgrXU02lSezsa6vAg...

CVE-2026-4332

creationtimestamp| type| source ---|---|--- 2026-04-09 00:50:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizln2w5vc2g 2026-04-09 12:45:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mj2tm4jzoj2z 2026-04-09 20:00:00+00:00| seen|...

CVE-2026-25462

creationtimestamp| type| source ---|---|--- 2026-04-09 00:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mizkj6bdel2o...

CVE-2026-5814

creationtimestamp| type| source ---|---|--- 2026-04-09 00:05:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mizj4vtmff2n 2026-04-09 01:28:16+00:00| published-proof-of-concept| Telegram/XRvc7f-x7KgmkvO7GcbaizI94C7ZhNHc5jsbe-dfAO5iAWk...

📄 Vaadin 25.x Authentication Bypass

An authentication bypass affects Vaadin versions 6.8.13, 14.x, 23.x, 24.x, and 25.x when used with Spring Security, due to inconsistent path pattern matching on reserved framework routes. Accessing the /VAADIN endpoint without a trailing slash can bypass security filters, allowing unauthenticated...