CVE-2026-32972

OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile management routes through browser.request. Attackers can create or modify browser profiles and persist...

CVE-2026-5043

creationtimestamp| type| source ---|---|--- 2026-03-29 12:18:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi74xtv22j2m 2026-03-29 12:40:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mi766ktwt72l 2026-03-29 13:15:14+00:00|...

CVE-2026-0897

creationtimestamp| type| source ---|---|--- 2026-03-29 09:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77758 2026-03-29 15:00:08+00:00| published-proof-of-concept| Telegram/Fln1CDV-IIlp7EGS7hrJibbBYDcdeDsNTgWenTzMncUGCI 2026-04-29 19:58:54+00:00| published-proof-of-concept|...

CVE-2026-5014

creationtimestamp| type| source ---|---|--- 2026-03-29 00:19:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5us7vke72d...

CVE-2026-5013

creationtimestamp| type| source ---|---|--- 2026-03-29 00:14:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5ujbhlua2s...

CVE-2026-30458

creationtimestamp| type| source ---|---|--- 2026-03-29 00:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi5tqtwdq427...

SUSE CVE-2026-2463

Mattermost versions 11.3.x = 11.3.0, 11.2.x = 11.2.2, 10.11.x = 10.11.10 fail to filter invite IDs based on user permissions, which allows regular users to bypass access control restrictions and register unauthorized accounts via leaked invite IDs during team creation.. Mattermost Advisory ID:...

CVE-2026-5000

creationtimestamp| type| source ---|---|--- 2026-03-28 17:09:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi54rxttvh25 2026-03-28 17:15:31+00:00| seen| Telegram/UqVXoPD2ncgjy8FLcvETcR69G7ubUkWuPHFuyVDBoMX-28...

CVE-2026-33770

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the fixCleanTitle static method in objects/category.php constructs a SQL SELECT query by directly interpolating both $cleantitle and $id into the query string without using prepared statements or parameterized...

CVE-2026-2595

creationtimestamp| type| source ---|---|--- 2026-03-28 14:50:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4uy26joz2g...

CVE-2026-1307

creationtimestamp| type| source ---|---|--- 2026-03-28 10:30:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi4ghydagg2n...

CVE-2026-34448

creationtimestamp| type| source ---|---|--- 2026-03-28 09:24:20+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rx4h-526q-4458 2026-03-31 23:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifcntxhgv2i 2026-03-31 23:20:56+00:00...

CVE-2026-5044

creationtimestamp| type| source ---|---|--- 2026-03-28 06:35:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116305409206627975 2026-03-28 09:43:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306150391983612 2026-03-29 13:19:51+00:00| seen|...

Incorrect Authorization

Apache Artemis is vulnerable to Incorrect Authorization. The vulnerability is due to incorrect authorization, where an authenticated user with the 'createDurableQueue' permission but without the 'createAddress' permission can create a temporary address when attempting to create a non-durable JMS...

CVE-2026-33030

creationtimestamp| type| source ---|---|--- 2026-03-28 03:20:53+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-5hf2-vhj6-gj9m 2026-03-30 18:17:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micbj7kshn25 2026-03-30...

CVE-2026-4991

creationtimestamp| type| source ---|---|--- 2026-03-28 02:49:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3mq2hukv2z...

CVE-2026-33996

creationtimestamp| type| source ---|---|--- 2026-03-28 02:20:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi3l3mreog2i...

GHSA-QX3G-5G22-FQ5W

creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...

GHSA-M74M-F7CR-432X

creationtimestamp| type| source ---|---|--- 2026-03-28 01:18:50+00:00| seen| Telegram/DQ8Phmkx05Q1rHpnB8sJ1vhC9dSxcFzzTf0RtJAOAn3w7JQ...

[SECURITY] Fedora 43 Update: perl-XML-Parser-2.51-1.fc43

This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark's expat library. Each call to one of the parsing methods creates a new instance of XML::Parser::Expat which is then used to parse the document. Expat options...