CVE-2026-33580

OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets. Attackers who can reach the webhook endpoint can exploit this to forge inbound webhook events by repeatedly attempting...

synapse Authorization Issues Vulnerabilities

synapse is an application for open federated instant messaging and VoIP An authorization issue vulnerability exists in Synapse that stems from a read receipt that allows an attacker to forge any event. Affected Products and Versions:Synapse versions prior to 0.34.0 through 1.93.0...