GHSA-G5PQ-48MJ-JVW8

creationtimestamp| type| source ---|---|--- 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I...

CVE-2026-25525

creationtimestamp| type| source ---|---|--- 2026-04-21 00:04:01+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjxonjsz2b2j...

PT-2026-34196

An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secret scanning push protection delegated bypass reviewer list on another repository by manipulating the owner id parameter in the request...

PT-2026-34037

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID and a non-empty Signing ID as an Apple platform binary. This bug allows a malicious software to impersonate an apple...

CVE-2026-30452

CVE-2026-30452 affects Textpattern CMS 4.9.0. A Broken Access Control flaw in the article management workflow lets authenticated users with low privileges modify articles owned by higher-privilege users. By altering the article ID parameter during the duplicate-and-save process in textpattern/inc...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010951)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010951 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifscopyfilerange If the file is used by swap, before return -EOPNOTSUPP,...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011229 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix SKB corruption in REO destination ring While running traffics for a long time,...

Unity Linux 20.1050e / 20.1070e Security Update: kernel (UTSA-2026-011368)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011368 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is...

CVE-2026-30452

Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with low privileges to modify articles owned by users with higher privileges. By manipulating the article ID parameter during the duplicate-and-save workflow in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010965)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010965 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not ignore genmask when looking up chain by id When adding a rule to a...

python311-PyPDF2-2.11.1-9.1 on GA media (moderate)

python311-PyPDF2-2.11.1-9.1 on GA media Announcement ID: openSUSE-SU-2026:10582-1 Rating: moderate Cross-References: CVE-2026-40260 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013247)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013247 advisory. Two memory leaks in the mwifiexpcieinitevtring function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006924)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006924 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctpv6fromsk syzbot found that sin6scopeid was not properly...

Linux Distros Unpatched Vulnerability : CVE-2026-40706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfsbuildpermissionsposix in acls.c that allows an attacker to corrupt heap memory in th...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011281 advisory. In the Linux kernel, the following vulnerability has been resolved: vdpa/vpvdpa: fix kfree a wrong pointer in vpvdparemove In vpvdparemove, the code...

CVE-2026-41295 OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup

OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows to execute during built-in channel setup and login. Attackers can clone a workspace with a malicious plugin claiming a bundled channel id to achieve unintended in-process code...

CVE-2026-5450

creationtimestamp| type| source ---|---|--- 2026-04-20 22:26:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxj7fnnpm2q 2026-04-21 21:25:58+00:00| seen| Telegram/zqh64O-3jGBNpD02e4IDQ2Ua8XH6cA6PRqW3q0FpcVLnRBs 2026-04-28 15:01:17+00:00| seen|...

RHSA-2025:1885

creationtimestamp| type| source ---|---|--- 2026-04-20 21:21:38+00:00| seen| Telegram/4zRGsEPwCWPOVkiJwGYn1RsXuEnREKMT0DdgACfDkyyoA...

CVE-2026-6257

creationtimestamp| type| source ---|---|--- 2026-04-20 20:23:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxccsfnrj2q 2026-04-20 21:22:19+00:00| published-proof-of-concept| Telegram/OLcxrKJ5zAhCDZ5T6GCelVBzr2kWns3QejwnSLKnpZyw 2026-04-21 01:30:30+00:00| seen|...

CVE-2026-1838

The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcodeid' parameter in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...