CVE-2026-6196

creationtimestamp| type| source ---|---|--- 2026-04-13 19:19:19+00:00| published-proof-of-concept| Telegram/7iGszM2mqKx30nQgCgbQFUXsVI5c5hkrxtNNiaNgzMbZ5ag 2026-04-13 20:28:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfpdym7y62o...

CVE-2026-39479

creationtimestamp| type| source ---|---|--- 2026-04-13 19:18:48+00:00| published-proof-of-concept| Telegram/faPFXRAaRfhi9SNZmtwnWuzO2c0g7l8werKC93MLkaum65E...

CVE-2026-6195

creationtimestamp| type| source ---|---|--- 2026-04-13 18:17:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfhzt73vl2p 2026-04-13 19:19:19+00:00| published-proof-of-concept| Telegram/7iGszM2mqKx30nQgCgbQFUXsVI5c5hkrxtNNiaNgzMbZ5ag 2026-04-13 20:43:06+00:00| seen|...

CVE-2026-36943

creationtimestamp| type| source ---|---|--- 2026-04-13 18:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhwnnqom2z...

CVE-2026-36942

creationtimestamp| type| source ---|---|--- 2026-04-13 18:09:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhlualfs2z...

CVE-2026-30999

creationtimestamp| type| source ---|---|--- 2026-04-13 18:04:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfhcujoaw2t 2026-04-13 22:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjfuiecy6n2s...

CVE-2026-30806

creationtimestamp| type| source ---|---|--- 2026-04-13 18:01:43+00:00| seen| Telegram/mgx4OESgILIX0WlIlJJnUrKrutJBiy7rqG6NL0bWgANWmeU...

CVE-2025-13014

creationtimestamp| type| source ---|---|--- 2026-04-13 17:59:16+00:00| seen| Telegram/1KhgTJq5EuvhXX-yd5lbCkG8G4yI8UcDDGLbhCLR2px6vQ...

CVE-2025-11714

creationtimestamp| type| source ---|---|--- 2026-04-13 17:58:40+00:00| seen| Telegram/p3rLkRNsYJZ67sP09Ii9oq0h-GstdR6uHp9Rsmqv7xN00c...

CVE-2025-10534

creationtimestamp| type| source ---|---|--- 2026-04-13 17:58:03+00:00| seen| Telegram/PvZD5YcMZj48r083VHwgZVfyAkWlDNaqDYlcGIZPQjhAu9s...

CVE-2025-9182

creationtimestamp| type| source ---|---|--- 2026-04-13 17:57:38+00:00| seen| Telegram/9o4BfNtIOZ97fNW94XQZtKman2tFufd5bSC8ENSBdHyp2c...

CVE-2025-8037

creationtimestamp| type| source ---|---|--- 2026-04-13 17:57:07+00:00| published-proof-of-concept| Telegram/X7VHG2-47Qhhj8GB65kRLNGPkxuaTLxPWX3Bbqfyik...

CVE-2025-8043

creationtimestamp| type| source ---|---|--- 2026-04-13 17:57:07+00:00| published-proof-of-concept| Telegram/X7VHG2-47Qhhj8GB65kRLNGPkxuaTLxPWX3Bbqfyik 2026-04-13 17:57:12+00:00| seen| Telegram/6v6zD9tAOLQqBWglapyz-ckJ2uvJM6ALnCTHHJnFRLcYW7Q...

CVE-2026-1462

creationtimestamp| type| source ---|---|--- 2026-04-13 15:36:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjf722gpiq27 2026-04-13 18:01:28+00:00| published-proof-of-concept| Telegram/GGU4l3ghB8B3Ai9EUxQ7xduUqm6NQYmTwZHkJoJpqeQPEQk 2026-07-10 15:40:41+00:00| seen|...

CVE-2026-2728

creationtimestamp| type| source ---|---|--- 2026-04-13 15:10:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjf5kiy4pl2m 2026-05-12 00:21:23+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-5gm9-622f-qcg5 2026-05-18 17:10:50+00:00|...

CVE-2026-36923

creationtimestamp| type| source ---|---|--- 2026-04-13 15:00:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjf4ztv33x2a...

CVE-2025-66849

creationtimestamp| type| source ---|---|--- 2026-04-13 15:00:18+00:00| published-proof-of-concept| Telegram/dj4imeQmrYQwcQ02maJeiX9ofB3TXoiNOC04yDTJaU4PN0A...

CVE-2026-3830

creationtimestamp| type| source ---|---|--- 2026-04-13 14:33:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjf3j5oqc62u...

`pretty-changelog-logger` was removed from crates.io for malicious code

pretty-changelog-logger contains a build script build.rs that acts as a loader/dropper for malicious payloads. The malicious crate had 3 versions published on 2026-04-08 that had a total of 2239 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecti...

RUSTSEC-2026-0101 `safe-agent-rs` was removed from crates.io for being affiliated with malicious code

While safe-agent-rs did not directly contain malicious code, it was owned by the same user as pretty-changelog-logger and microsoftsystem64. safe-agent-rs also appeared to be imitating a different websocket library. We decided to remove it out of an abundance of caution. This crate had 2 versions...