CVE-2026-5397

It has been identified that a vulnerability CWE-427 exists in the UPS Uninterruptible Power Supply management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed with administrator privileges. If a malicious DLL is...

CVE-2026-2834

creationtimestamp| type| source ---|---|--- 2026-04-15 05:04:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj4n6s5yj2k 2026-04-22 21:20:26+00:00| seen| Telegram/xHZW3dnIVlZ81UM5ayk21xAksqcQlWsb2BCoesl5IB3eE...

CVE-2026-40499

creationtimestamp| type| source ---|---|--- 2026-04-15 04:54:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj43bso7l2o 2026-04-16 05:17:50+00:00| published-proof-of-concept| Telegram/TCjlHJMv9N6S0B2yz3RFhhjLUk96NJtTkRt7NB8H70qfRI...

CVE-2026-40090

creationtimestamp| type| source ---|---|--- 2026-04-15 04:31:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2rvphkr2z 2026-04-17 17:30:37+00:00| published-proof-of-concept| Telegram/99IlCPIS9qBv42yzAhiUHqlKgiNRb4WP8dx5pH1uskzhuw...

CVE-2026-1509

creationtimestamp| type| source ---|---|--- 2026-04-15 04:27:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2lwkmci2z...

CVE-2026-39984

creationtimestamp| type| source ---|---|--- 2026-04-15 04:24:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2gkkbn72w...

CVE-2026-5397

The CVE-2026-5397 entry describes an Uncontrolled Search Path Element (CWE-427) in a UPS management application. It states that improper permissions on the installation directory allow a malicious DLL to be placed there and executed with administrator privileges because the product loads missing ...

CVE-2026-5397

It has been identified that a vulnerability CWE-427 exists in the UPS Uninterruptible Power Supply management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed with administrator privileges. If a malicious DLL is...

CVE-2026-5397 Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management Application

It has been identified that a vulnerability CWE-427 exists in the UPS Uninterruptible Power Supply management application, whereby improper permissions on the installation directory allow a malicious actor to place a DLL that is then executed with administrator privileges. If a malicious DLL is...

Malicious Package

Overview cw-isdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2026-33805

creationtimestamp| type| source ---|---|--- 2026-04-15 02:57:11+00:00| published-proof-of-concept| https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-gwhp-pf74-vj37 2026-04-15 10:24:33+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mjjojknm3c2t 2026-04-15...

GSD-2020-2021

creationtimestamp| type| source ---|---|--- 2026-04-15 02:43:43+00:00| seen| https://bsky.app/profile/installbasebot.bsky.social/post/3mjiurlrfns2k...

CVE-2026-33807

creationtimestamp| type| source ---|---|--- 2026-04-15 01:50:12+00:00| published-proof-of-concept| https://github.com/fastify/fastify-express/security/advisories/GHSA-hrwm-hgmj-7p9c 2026-04-15 10:02:22+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mjjnbuzv622t 2026-04-15...

CVE-2026-27297

creationtimestamp| type| source ---|---|--- 2026-04-15 01:19:21+00:00| published-proof-of-concept| Telegram/GYbH54sRbOOqgznzSrvNbIPKqa8TpEiUvDUzTYtUUyxy-E 2026-04-15 11:15:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjref64db2p 2026-04-15 23:37:07+00:00| seen|...

CVE-2026-39387

creationtimestamp| type| source ---|---|--- 2026-04-15 01:12:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjipoxlfxi2k 2026-04-15 01:19:29+00:00| seen| Telegram/4QaIVP4Z6j7I04jn6w3qCKrQ76Fz4EXtpUCBPkRfgX1dqr4 2026-05-02 09:00:04+00:00| seen|...

CVE-2026-35031

creationtimestamp| type| source ---|---|--- 2026-04-15 00:57:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjiou4c4hb2r 2026-04-15 01:19:21+00:00| published-proof-of-concept| Telegram/GYbH54sRbOOqgznzSrvNbIPKqa8TpEiUvDUzTYtUUyxy-E 2026-04-15 10:33:26+00:00| seen|...

CVE-2026-35032

creationtimestamp| type| source ---|---|--- 2026-04-15 00:49:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjiofpiwpc2a 2026-04-15 01:19:29+00:00| seen| Telegram/4QaIVP4Z6j7I04jn6w3qCKrQ76Fz4EXtpUCBPkRfgX1dqr4...

CVE-2026-2396

creationtimestamp| type| source ---|---|--- 2026-04-15 00:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjinvgwpcl2z...

CVE-2026-40386

creationtimestamp| type| source ---|---|--- 2026-04-15 00:01:48+00:00| seen| https://bsky.app/profile/slackers.it/post/3mjilq2wm3u2n...

PT-2026-33054

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.12 Mattermost version 11.5.0 Mattermost versions 11.4.0 through 11.4.2 Mattermost versions 11.3.0 through 11.3.2 Description Failure to enforce atomic single-use consumption of guest magic link tokens...