CVE-2026-40487

creationtimestamp| type| source ---|---|--- 2026-04-18 03:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqhtmq72h2f 2026-04-18 03:16:49+00:00| seen| Telegram/pg0pMMwJv5FTHbXxc3MO00N2B5ehQq9biiv2KNNNK0Va5Yk 2026-05-03 11:00:04+00:00| seen| https://t.me/GithubRedTeam/82615...

CVE-2026-40317

creationtimestamp| type| source ---|---|--- 2026-04-18 02:58:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqgyrhcwj2r 2026-04-18 03:16:44+00:00| published-proof-of-concept| Telegram/uiCSDEnb8aQmWF7FrTZmjJQGi4eEk-7sLrqhzwnkCLApk 2026-04-18 07:30:27+00:00| seen|...

CVE-2026-41650

creationtimestamp| type| source ---|---|--- 2026-04-18 02:46:45+00:00| published-proof-of-concept| https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-gh4j-gqv2-49f6 2026-05-07 17:49:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbro3vgly2k...

CVE-2026-40593

creationtimestamp| type| source ---|---|--- 2026-04-18 01:58:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqdnsg3fr2d...

CVE-2026-40340

creationtimestamp| type| source ---|---|--- 2026-04-18 01:31:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqc5bweaq2q...

CVE-2026-40480

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE 2026-04-18 01:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqd3qgtig2f...

CVE-2026-40348

creationtimestamp| type| source ---|---|--- 2026-04-18 01:18:19+00:00| published-proof-of-concept| Telegram/lPGIWgtQcs4RDQrNkGM74AEu7FEWLIcUMs54pp3qHTSOJE 2026-04-18 01:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqckfdixb26...

CVE-2026-39886

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:27+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq547cnbt27 2026-04-21 02:15:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxvzgfyqp2e...

CVE-2026-40250

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:27+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq547cnbt27 2026-04-21 02:19:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjxw7aqjsr2q 2026-04-21 03:18:08+00:00| seen|...

CVE-2026-34979

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq5442fbv2n...

CVE-2026-39314

creationtimestamp| type| source ---|---|--- 2026-04-18 00:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjq5442fbv2n...

CVE-2026-40351

creationtimestamp| type| source ---|---|--- 2026-04-17 23:03:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpzvahi772f 2026-04-17 23:20:20+00:00| published-proof-of-concept| Telegram/pKVsSWpOH4ztPjCePA6f2TZasDjFWE2MPBTfIhx3aN4UBbI 2026-05-31 13:37:07+00:00| seen|...

CVE-2026-35512

creationtimestamp| type| source ---|---|--- 2026-04-17 22:29:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpxybsgmk26 2026-04-17 23:20:07+00:00| published-proof-of-concept| Telegram/nSRvyMMuDO4LVDIhCRx7gx27JwRYoRyOv-3439P5STagmw...

CVE-2026-35402

creationtimestamp| type| source ---|---|--- 2026-04-17 22:26:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpxscq4l32f...

GHSA-2767-2Q9V-9326 OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes

Summary QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.12 Impact QQBot reply media URLs could be treated as trusted media sources, allowing SSRF fetches whose returned...

GHSA-4C3Q-X735-J3R5 Complete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing

Executive Summary This report documents a critical security research finding in the compressing npm package specifically tested on the latest v2.1.0. The core vulnerability is a Partial Fix Bypass of CVE-2026-24884. The current patch relies on a purely logical string validation within the...

CVE-2026-33516

creationtimestamp| type| source ---|---|--- 2026-04-17 21:23:11+00:00| published-proof-of-concept| Telegram/GxkwnkIopWEGLbC11BdcbbYVRqOADIf4t7f5VnXFMKG7Kn8 2026-04-24 11:15:46+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mkaflhxcmk22...

CVE-2026-40303

creationtimestamp| type| source ---|---|--- 2026-04-17 21:18:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpty6khsr2q 2026-04-17 22:57:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpzki4xdn2f 2026-04-17 23:20:15+00:00| published-proof-of-concept|...

CVE-2026-28224

creationtimestamp| type| source ---|---|--- 2026-04-17 20:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjppn74kwq2i 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs...

CVE-2026-6497

creationtimestamp| type| source ---|---|--- 2026-04-17 18:40:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpl62mbf42r...