CVE-2026-42590 Gotenberg: ExifTool group-prefix syntax bypasses dangerous-tag blocklist

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.30.0, The ExifTool metadata write blocklist in Gotenberg can be bypassed using ExifTool's group-prefix syntax, enabling arbitrary file rename, move, hardlink, and symlink creation on the server. ExifTool supports group-prefix...

CVE-2025-62619

Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality...

EUVD-2025-209845

Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality...

EUVD-2025-209847

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution...

CVE-2026-6504

creationtimestamp| type| source ---|---|--- 2026-05-14 13:48:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlsxgcb7c62p...

CVE-2026-6206

creationtimestamp| type| source ---|---|--- 2026-05-14 13:36:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlswqxyrkg2q...

CVE-2019-14197

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16...

CVE-2025-38697

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2026-6225

creationtimestamp| type| source ---|---|--- 2026-05-14 09:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlskhxod2l2i...

CVE-2026-6512

creationtimestamp| type| source ---|---|--- 2026-05-14 09:47:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlsjx7qqdg2z 2026-05-14 12:02:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/116572817091502090...

CVE-2026-8144

creationtimestamp| type| source ---|---|--- 2026-05-14 09:04:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlshliewmz2i 2026-05-14 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260515...

CVE-2026-44403

creationtimestamp| type| source ---|---|--- 2026-05-14 07:00:05+00:00| seen| https://t.me/GithubRedTeam/84174 2026-05-14 11:00:13+00:00| published-proof-of-concept| Telegram/KyHCshI6yZBJj8Foftsx5hfP7GLhbMmJ81CYC3g7d-oupU 2026-05-14 15:00:07+00:00| seen|...

CVE-2026-7481

creationtimestamp| type| source ---|---|--- 2026-05-14 06:40:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mls7jb7h3w2l 2026-05-14 07:52:53+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-14 2026-05-14 18:00:00+00:00| seen|...

CVE-2026-7377

creationtimestamp| type| source ---|---|--- 2026-05-14 06:40:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mls7izuys52z 2026-05-14 07:52:53+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-14 2026-05-14 18:00:00+00:00| seen|...

CVE-2026-6271

creationtimestamp| type| source ---|---|--- 2026-05-14 06:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mls72nq6sn2q 2026-05-14 09:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlshon6mjj2k 2026-05-14 13:30:30+00:00| seen|...

CVE-2026-46445

creationtimestamp| type| source ---|---|--- 2026-05-14 06:18:53+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mls6czolng2a...

CVE-2026-4527

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to create unauthorized Jira subscriptions for a targeted user's namespace via a specially crafted link due...

UBUNTU-CVE-2026-4527

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to create unauthorized Jira subscriptions for a targeted user's namespace via a specially crafted link due...

CVE-2026-4527 Cross-Site Request Forgery (CSRF) in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to create unauthorized Jira subscriptions for a targeted user's namespace via a specially crafted link due...

EUVD-2026-30230

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to create unauthorized Jira subscriptions for a targeted user's namespace via a specially crafted link due...