CVE-2026-34840

creationtimestamp| type| source ---|---|--- 2026-04-02 21:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik5xb3jpw27 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww 2026-04-03 02:23:26+00:00| seen|...

CVE-2023-7342

creationtimestamp| type| source ---|---|--- 2026-04-02 21:33:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mik5ufznqr2z...

CVE-2026-34758

creationtimestamp| type| source ---|---|--- 2026-04-02 21:05:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik4ck4d5p2o 2026-04-02 22:22:50+00:00| seen| Telegram/8YijTp8Bkg1BgPYn1xfGtyu-IfZ2h3UIXQPTCviuLwYJAlo 2026-04-03 02:31:08+00:00| seen|...

CVE-2026-34833

creationtimestamp| type| source ---|---|--- 2026-04-02 20:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik3uzxlow23 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8...

CVE-2026-34838

creationtimestamp| type| source ---|---|--- 2026-04-02 20:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik3r6ye3j2j 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww 2026-04-03 02:22:10+00:00| seen|...

EUVD-2026-18478

Rack::Request accepts invalid Host characters, enabling host allowlist bypass...

Rack::Request accepts invalid Host characters, enabling host allowlist bypass

Summary Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, , and @. Because req.host returns the full parsed value, applications that validate hosts using naive prefix or suffix checks can be...

CVE-2026-35459

creationtimestamp| type| source ---|---|--- 2026-04-02 20:36:20+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-7gvf-3w72-p2pg 2026-04-06 21:21:26+00:00| published-proof-of-concept| Telegram/xKxKUYX0BRejEqYlrURXsjCQY9BctYcoeewNmSMWqY7riM 2026-04-06...

GHSA-5RRM-6QMQ-2364

creationtimestamp| type| source ---|---|--- 2026-04-02 19:27:20+00:00| published-proof-of-concept| Telegram/zJs9VhJAI5JOvrL4hzeWnrOleMDgHArbbwhOuzjaL80cudA 2026-04-03 02:18:18+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miknqzyvft2x...

CVE-2026-5354

creationtimestamp| type| source ---|---|--- 2026-04-02 18:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijupvycp32g...

CVE-2026-5353

creationtimestamp| type| source ---|---|--- 2026-04-02 18:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miju5yzr5j2i...

EUVD-2026-18436

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent...

EUVD-2026-18426

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...

CVE-2026-34120

creationtimestamp| type| source ---|---|--- 2026-04-02 18:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijtnewzrz2z 2026-04-02 19:26:29+00:00| seen| Telegram/tHMZo4t6KJ7O3rHGS3YAWNGCGRHee0gil3YJsfVKclsQ...

CVE-2026-34122

A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling component due to insufficient input validation. An attacker can exploit this vulnerability by supplying an excessively long value for a vulnerable configuration parameter,...

CVE-2026-34120

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to insufficient alignment and validation of buffer boundaries when processing streaming inputs.An attacker on the same network segment could...

CVE-2026-34119

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without continuous write‑boundary verification, due to insufficient boundary validation when handling externally supplied HTTP input. An...

CVE-2026-34118

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...

CVE-2026-27774

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image Windows before build 42902...

CVE-2026-34118

creationtimestamp| type| source ---|---|--- 2026-04-02 18:15:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijsrw5c7725 2026-04-02 19:26:29+00:00| seen| Telegram/tHMZo4t6KJ7O3rHGS3YAWNGCGRHee0gil3YJsfVKclsQ...