CVE-2026-42994

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident...

CVE-2026-48491

creationtimestamp| type| source ---|---|--- 2026-06-05 13:35:32+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnkay2lpgr2j...

CVE-2026-50258

creationtimestamp| type| source ---|---|--- 2026-06-05 13:33:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnkatubr7y2v...

CVE-2026-11210

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-11162

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-11114

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-11093

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-11044

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-10998

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-10990

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-10928

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-10904

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise. The vulnerability in question is CVE-2026-3300 CVSS score: 9.8, a remote code execution...

CVE-2026-50591

creationtimestamp| type| source ---|---|--- 2026-06-05 04:44:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjdctzxpa2h...

CVE-2026-11309

creationtimestamp| type| source ---|---|--- 2026-06-05 03:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnja6ai2fh2h 2026-06-05 13:24:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

CVE-2026-11322

creationtimestamp| type| source ---|---|--- 2026-06-04 23:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mniqhz3vnc26...

CVE-2026-42540

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch...

EUVD-2026-34329

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 are vulnerable to a cross-site request forgery attack, because they use the HTTP method GET to change state on the server. Version 2.4.28 contains a patch...

CVE-2026-42540 IRIS has a Mass Assignment issue

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch...

CVE-2026-42539

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch...