CVE-2026-43220

creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x...

CVE-2026-31499

creationtimestamp| type| source ---|---|--- 2026-05-22 13:05:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmgyri3mmq2x...

CVE-2026-3473

creationtimestamp| type| source ---|---|--- 2026-05-22 12:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgxuvf5my2h...

CVE-2026-5308

creationtimestamp| type| source ---|---|--- 2026-05-22 12:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgxkrnsjj2k...

CVE-2026-6864

creationtimestamp| type| source ---|---|--- 2026-05-22 07:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgf3hprox2k 2026-05-25 05:49:15+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnrs6gp4q2l...

CVE-2026-7509

creationtimestamp| type| source ---|---|--- 2026-05-22 06:58:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgeamfjm22k 2026-05-25 04:25:55+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mmnn56cp2o2s...

CVE-2026-9104

creationtimestamp| type| source ---|---|--- 2026-05-22 06:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgdxnw2x32k...

CVE-2026-9053

creationtimestamp| type| source ---|---|--- 2026-05-22 06:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgcuvhi3j2e...

CVE-2026-6394

creationtimestamp| type| source ---|---|--- 2026-05-22 06:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmgcs2lkaa2a...

CVE-2026-46595

creationtimestamp| type| source ---|---|--- 2026-05-22 06:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgc4lusjl2k...

CVE-2026-46597

creationtimestamp| type| source ---|---|--- 2026-05-22 06:16:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgbwgulo32c...

CVE-2026-46598

creationtimestamp| type| source ---|---|--- 2026-05-22 06:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmgbtjxtaj2k...

GHSA-JQQ5-8PX3-9M6M

creationtimestamp| type| source ---|---|--- 2026-05-22 06:10:50+00:00| seen| https://gist.github.com/alon710/1dd7eb9b2d2403233c4fe934b5852750...

CVE-2026-6391

creationtimestamp| type| source ---|---|--- 2026-05-22 05:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmg7gqbumh2l...

CVE-2026-8245

creationtimestamp| type| source ---|---|--- 2026-05-22 02:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmfwclbti72p...

EUVD-2026-31380

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName because updateCollectionAliasExternal bypasses being sanitized. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.0 with...

PT-2026-42791

Improper input validation in the external authentication provider flow in Devolutions Server allows an unauthenticated remote attacker to redirect victims to an attacker-controlled domain via a crafted login link. This issue affects : Devolutions Server 2026.1.6.0 through 2026.1.16.0 Devolutions...

PT-2026-42832

Name of the Vulnerable Software and Affected Versions TP-Link range extenders affected versions not specified Description An authentication logic flaw allows an unauthenticated attacker on an adjacent network to reset the administrator password due to insufficient validation of a login parameter...

BentoML 后置链接漏洞

BentoML is an open-source model service library developed by BentoML. It is used to build high-performance and scalable artificial intelligence applications using Python. Versions of BentoML prior to 1.4.38 contained a post-link vulnerability. This vulnerability stemmed from the fact that the bui...

Unity Linux 20.1070e Security Update: velocity-tools (UTSA-2026-016718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016718 advisory. The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an X...