CVE-2026-33291

The CVE concerns Discourse (with the Zendesk plugin) where moderators can create Zendesk tickets for topics they are not allowed to view. Affected versions are prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2. The published fixes are included in 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, respec...

CVE-2026-33236

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

CVE-2026-33236

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downloader does not validate the subdir and id attributes when processing remote XML index...

CVE-2026-4493

creationtimestamp| type| source ---|---|--- 2026-03-20 22:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjkczsobw2o...

CVE-2026-32310

creationtimestamp| type| source ---|---|--- 2026-03-20 22:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjjsfu5mw2x...

CVE-2026-30580

creationtimestamp| type| source ---|---|--- 2026-03-20 21:54:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjiwy2tbu2e...

CVE-2026-30579

creationtimestamp| type| source ---|---|--- 2026-03-20 21:45:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhjii2ekok2e...

CVE-2026-33512

creationtimestamp| type| source ---|---|--- 2026-03-20 21:45:54+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-mwjc-5j4x-r686 2026-03-23 19:23:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrvjxw3h2u 2026-03-23 19:40:41+00:0...

CVE-2026-33177

CVE-2026-33177 affects Statamic CMS (Laravel/Git-powered). Prior to versions 5.73.14 and 6.7.0, low-privileged Control Panel users could bypass authorization by submitting requests to the field action processing endpoint with attacker-controlled field definitions, enabling creation of taxonomy te...

CVE-2026-33156

creationtimestamp| type| source ---|---|--- 2026-03-20 21:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjgvn3l7v25 2026-03-27 22:20:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi35npq7me2a...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

UBUNTU-CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

AVideo Affected by Unauthenticated Disk Space Exhaustion via Unlimited Temp File Creation in aVideoEncoderChunk.json.php

Summary The aVideoEncoderChunk.json.php endpoint is a completely standalone PHP script with no authentication, no framework includes, and no resource limits. An unauthenticated remote attacker can send arbitrary POST data which is written to persistent temp files in /tmp/ with no size cap, no rat...

CVE-2026-2476

creationtimestamp| type| source ---|---|--- 2026-03-20 20:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhjesgztx22m 2026-03-20 20:40:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mhjeshjqdj2u...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

CVE-2026-4500

creationtimestamp| type| source ---|---|--- 2026-03-20 19:16:50+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4500...

CVE-2026-4226

creationtimestamp| type| source ---|---|--- 2026-03-20 19:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhj77qw5fy2w...

CVE-2026-4487

creationtimestamp| type| source ---|---|--- 2026-03-20 18:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj6oa3qtt2u 2026-03-20 21:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjfxcngsv2u 2026-03-20 21:01:22+00:00| seen|...

CVE-2026-22898

creationtimestamp| type| source ---|---|--- 2026-03-20 18:40:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhj64dabvf24 2026-03-23 10:37:14+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-qnap-7 2026-03-23 14:40:08+00:00| seen|...