CVE-2026-42154

creationtimestamp| type| source ---|---|--- 2026-05-04 19:28:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2frwvvqg2l 2026-05-05 20:10:29+00:00| seen| https://gist.github.com/alon710/a8e4ac23aec9e5a4ede7f32cda789bc3 2026-05-07 18:07:47+00:00| seen|...

CVE-2026-42138

creationtimestamp| type| source ---|---|--- 2026-05-04 18:35:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2csqi3qc2q...

CVE-2026-42140

creationtimestamp| type| source ---|---|--- 2026-05-04 18:33:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cpesil22k...

CVE-2026-29514

creationtimestamp| type| source ---|---|--- 2026-05-04 18:28:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cgy4oyf2q...

CVE-2026-42230 n8n: Open Redirect in MCP OAuth Consent Flow

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth client registrations without authentication, allowing arbitrary redirecturi values to be registered. When a user denies the MCP OAuth consent dialog,...

CVE-2026-42091

creationtimestamp| type| source ---|---|--- 2026-05-04 18:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2cdogi7q2k...

CVE-2026-41571

creationtimestamp| type| source ---|---|--- 2026-05-04 18:24:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2c6ljvvg2r 2026-05-04 20:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2j2fwzwb2e...

CVE-2026-42374

creationtimestamp| type| source ---|---|--- 2026-05-04 18:04:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2b2wtauk2f 2026-05-04 18:53:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2dt3hwol2i 2026-05-25 11:37:06+00:00| seen|...

CVE-2026-33523

creationtimestamp| type| source ---|---|--- 2026-05-04 17:57:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ml2ao5fp4a2b 2026-05-05 00:01:51+00:00| seen| https://bsky.app/profile/slackers.it/post/3ml2v2k2mxj2q 2026-05-05 14:35:37+00:00| seen|...

CVE-2026-42376

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-42373

D-Link DIR-605L Hardware Revision B2 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn76dlwbrdir605L" read from /etc/alphaconfig/imagesign. The custom telnetd binary...

CVE-2026-42372

D-Link DIR-605L Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir605l" read from /etc/alphaconfig/imagesign. The custom telnetd binary...

CVE-2026-42375

D-Link DIR-600L Hardware Revision A1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir600l" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...

CVE-2026-41358

creationtimestamp| type| source ---|---|--- 2026-05-04 17:10:29+00:00| seen| https://gist.github.com/alon710/d4f3d9fbcfea6645ceefb383fa46637f...

CVE-2026-41181

creationtimestamp| type| source ---|---|--- 2026-05-04 16:54:31+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-p6hg-qh38-555r 2026-05-05 14:35:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fuoznxy2b 2026-05-05 16:20:01+00:00|...

CVE-2026-42375

creationtimestamp| type| source ---|---|--- 2026-05-04 16:48:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517327062901025 2026-05-04 18:08:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bcuhvhu2z 2026-05-04 18:30:01+00:00| seen|...

CVE-2026-24118

creationtimestamp| type| source ---|---|--- 2026-05-04 16:40:28+00:00| seen| https://gist.github.com/alon710/e818aa393dda5bd140273420e0cde714 2026-05-04 18:30:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckcncdj2k 2026-05-08 21:37:07+00:00| seen|...

GHSA-GRJ5-JJM8-H35P

creationtimestamp| type| source ---|---|--- 2026-05-04 16:40:28+00:00| seen| https://gist.github.com/alon710/e818aa393dda5bd140273420e0cde714...

EUVD-2026-27029

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...

CVE-2026-42376 D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials

D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...