PT-2026-42432

Name of the Vulnerable Software and Affected Versions Mattermost Mobile Apps versions prior to 2.38 Description The application fails to properly validate the SSO authentication callback origin. This allows an attacker who controls a malicious Mattermost server to steal user credentials for a...

CVE-2026-9141

creationtimestamp| type| source ---|---|--- 2026-05-20 21:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmcsfgqmlg2k 2026-05-21 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmdbhrxmv52l 2026-05-21 01:30:33+00:00| seen|...

CVE-2026-9120

creationtimestamp| type| source ---|---|--- 2026-05-20 20:44:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608850419186046 2026-05-21 19:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmf4j6yey42z 2026-05-25 18:00:00+00:00| seen|...

CVE-2026-9118

creationtimestamp| type| source ---|---|--- 2026-05-20 20:30:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608796896901473 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...

CVE-2026-9126

creationtimestamp| type| source ---|---|--- 2026-05-20 20:17:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608743862604761 2026-05-20 22:40:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcxxhekzf2k 2026-05-21 17:07:07+00:00| seen|...

CVE-2026-9111

creationtimestamp| type| source ---|---|--- 2026-05-20 20:03:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608690801419755 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...

CVE-2009-1537

creationtimestamp| type| source ---|---|--- 2026-05-20 18:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/675f3e40-1b20-4f43-8a01-57264171ed3f 2026-05-20 21:13:36+00:00| seen| https://infosec.exchange/users/secdb/statuses/116608677530202595 2026-05-2...

EUVD-2026-31103

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Fixed kernel address leakage in atomic cmpxchg operations with R0 as an auxiliary register. The implementation of BPFCMPXCHG at a high level has the following parameters: .-old-val .-new-val BPFR0 = cmpxchg32,64DSTREG +...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: slab: Avoid race conditions in allocslabobjexts. If two competing threads enter allocslabobjexts, and one of them fails to allocate the object extension vector, it may override the valid slab-objexts allocated by the other thread...

CVE-2026-6555

creationtimestamp| type| source ---|---|--- 2026-05-20 03:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmaw35ylzv2n 2026-05-20 04:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmb4ilpq4u2i 2026-05-20 07:30:27+00:00| seen|...

Detecting Offensive Cyber Agents: A Detection-In-Depth Approach

Artificial Intelligence AI agents can now orchestrate cyberattacks. This development is already increasing the speed and scale of cyber attacks, decreasing attack costs, and improving the operational autonomy of cyber capabilities. To defend against these emerging threats, actors must first devel...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

SUSE-SU-2026:21824-1 Security update for leancrypto

This update for leancrypto fixes the following issues Security issue: - CVE-2026-34610: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when stori...

libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash...

libssh: Memory Exhaustion via Repeated Key Exchange in libssh

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

CVE-2023-32692

creationtimestamp| type| source ---|---|--- 2026-05-19 10:42:04+00:00| seen| https://infosec.exchange/users/mogwailabsgmbh/statuses/116600819170781636...

GHSA-87XG-PXX2-7HVX

creationtimestamp| type| source ---|---|--- 2026-05-19 09:29:12+00:00| seen| https://bsky.app/profile/cure53.infosec.exchange.ap.brid.gy/post/3mm73btqiso62...

CVE-2026-8803

creationtimestamp| type| source ---|---|--- 2026-05-19 05:03:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116599487590126091...

CVE-2026-41948

creationtimestamp| type| source ---|---|--- 2026-05-19 04:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116599359441666989 2026-05-19 11:42:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116601058386037204 2026-05-31 11:02:08+00:00| seen|...