PT-2026-35058

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.17 Description An out-of-bounds read occurs when parsing a malformed Content-ID URI in a SIP multipart message body. This is caused by insufficient length validation, which allows reads to extend beyond the intended...

PT-2026-34910

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Make kvm get vcpu by cpuid more robust kvm get vcpu by cpuid takes a cpuid parameter whose type is int, so cpuid can be negative. Let kvm get vcpu by cpuid return NULL for this case so as to make it more robust...

GHSA-3PRP-9GF7-4RXX

creationtimestamp| type| source ---|---|--- 2026-04-23 21:27:11+00:00| seen| Telegram/7J2TQ7boZzup2REzz7I0UjLQbEj9GYA2sSzdylgDH8Evqbs...

GHSA-CJCX-JFP2-F7M2

creationtimestamp| type| source ---|---|--- 2026-04-23 21:26:07+00:00| published-proof-of-concept| Telegram/wY3PGk1V7kusFG8GbDK0g0CtGhXXIm9UsDC-frBku-7BiY...

CVE-2026-41279 Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint POST /api/v1/text-to-speech/generate is whitelisted no auth and accepts a credentialId directly in the request body. When called without a chatflowId, th...

CVE-2026-41279

Flowise prior to v3.1.0 exposed an unauthenticated text-to-speech endpoint (POST /api/v1/text-to-speech/generate) that accepts a credentialId and, when called without a chatflowId, decrypts the stored credential to generate speech. This creates risk of credential misuse and API credit abuse, as t...

EUVD-2026-25298

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the text-to-speech generation endpoint POST /api/v1/text-to-speech/generate is whitelisted no auth and accepts a credentialId directly in the request body. When called without a chatflowId, th...

CVE-2026-41043

creationtimestamp| type| source ---|---|--- 2026-04-23 18:25:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk6n4dcaab2j...

CVE-2026-21841

creationtimestamp| type| source ---|---|--- 2026-04-23 18:19:41+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mk6mslzmsa24...

CVE-2026-39440

creationtimestamp| type| source ---|---|--- 2026-04-23 15:16:16+00:00| published-proof-of-concept| Telegram/GpzWIna0u4Xk2Mxyx7IImpynDcGXZQ8MHW9U4L55IHFQ 2026-04-23 16:35:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mk6gxwkn622a 2026-04-23 19:43:50+00:00| seen|...

CGA-F3XQ-534H-274W

Bulletin has no description...

EUVD-2026-25148

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-41233 Froxlor has a Reseller Domain Quota Bypass via Unvalidated adminid Parameter in Domains.add()

Froxlor is open source server administration software. Prior to version 2.3.6, in Domains.add, the adminid parameter is accepted from user input and used without validation when the calling reseller does not have the customersseeall permission. This allows a reseller to attribute newly created...

CVE-2026-1923

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-1923 Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via id

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-1923

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-1923

CVE-2026-1923 affects the WordPress plugin Social Rocket – Social Sharing Plugin. The vulnerability is a stored XSS via the id parameter in all versions up to and including 1.3.4.2, caused by insufficient input sanitization and output escaping. Exploitation requires authentication at Subscriber l...

CVE-2026-1923 Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via id

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-41200

STIG Manager versions 1.5.10–1.6.7 contain a reflected XSS in OIDC error handling (src/init.js, public/reauth.html) where error and error_description are written to the DOM via innerHTML without escaping. An attacker who composes a malicious redirect URL can cause JavaScript to run in the victim’...

CVE-2026-41243 OpenLearn's pending forum posts remain publicly readable by direct ID when moderation mode is enabled

OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580fe501923f0b391313ab, when safeMode is enabled, unapproved forum posts are hidden from the public list, but the direct post-read procedure still returns the full post to anyone with the post UUID. Commit...