CVE-2026-49051

Missing Authorization vulnerability in Prasad Kirpekar WP Meta and Date Remover allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Meta and Date Remover: from n/a through 2.3.6...

CVE-2026-39374

Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project member ADMIN or MEMBER to modify the startdate and targetdate of ANY issue across the entire Plane instance, regardless of workspace or project membership. The endpoint fetches...

CVE-2026-45743

creationtimestamp| type| source ---|---|--- 2026-06-05 19:24:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkui7pzna2l 2026-06-05 23:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnlalbga3t2r...

CVE-2026-35462

Papra is a minimalistic document management and archiving platform. Prior to 26.4.0, API keys with an expiresAt date are never validated against the current time during authentication. Any API key — regardless of its expiration date — is accepted indefinitely, allowing a user whose key has expire...

CVE-2026-44241

Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. From 4.3.0 to before 4.10.22, TimeConverterRegistrar caches DateTimeFormatter instances in an unbounded ConcurrentHashMap whose key is derived from the @Format annotation...

CVE-2026-44375

Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, Nerdbank.MessagePack contains an uncontrolled stack allocation vulnerability in DateTime decoding. A malicious MessagePack payload can declare an oversized timestamp extension length, causing the...

CVE-2026-44886

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. From 2024-06-29 to before 2026-05-07, the web application endpoint is vulnerable to SQL injection. The /pialert/php/server/devices.php route accepts requests from unauthenticated users when the action URL parameter is set to...

GHSA-PVFV-WVPM-Q6F6

creationtimestamp| type| source ---|---|--- 2026-06-05 14:49:28+00:00| seen| https://gist.github.com/ImTopz/33a987bda3c2850a7e9f373a49b245a7...

CVE-2026-3276

creationtimestamp| type| source ---|---|--- 2026-06-05 13:35:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkaxtlnnt2f...

CVE-2026-11308

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11265

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-06 09:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnmc2zu24c2d 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11227

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11223

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11217

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11209

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11191

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 01:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnnxr5ouck27 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11168

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11163

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-09 18:00:00+00:00| seen|...

CVE-2026-11154

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 10:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnovwiagqi2d 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11122

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...