CVE-2026-5311

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

CVE-2026-5429

creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8 2026-04-03 02:30:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mikohmm4px2c...

CVE-2025-65114

creationtimestamp| type| source ---|---|--- 2026-04-02 22:22:04+00:00| published-proof-of-concept| Telegram/23ZcvUWmnJsq-zA1xOv2ctyvywAVz8hRL5r96BcfYjQKx08 2026-04-03 06:01:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mil2aaz7wy2p 2026-04-03 06:05:49+00:00| seen|...

CVE-2025-15620

creationtimestamp| type| source ---|---|--- 2026-04-02 22:20:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikaikdgyk2d 2026-04-02 23:18:37+00:00| seen| Telegram/wPpcMbRpbo1Ga69LyA-eFh8R0SLzJGU8C7s0zmgI81BZZk 2026-04-03 02:22:03+00:00| seen|...

CVE-2026-34932

creationtimestamp| type| source ---|---|--- 2026-04-02 21:45:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik6j5zxnm2i 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...

CVE-2026-35053

creationtimestamp| type| source ---|---|--- 2026-04-02 21:40:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik6a7kjlp22 2026-04-02 22:23:23+00:00| seen| Telegram/3gsJ80xyJgAiTFZiH4SjKRBEhW5SGPUuKPeFIX1uRKbZ4...

CVE-2024-40849

creationtimestamp| type| source ---|---|--- 2026-04-02 21:35:27+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mik5xcpvlq2k...

CVE-2026-34840

creationtimestamp| type| source ---|---|--- 2026-04-02 21:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik5xb3jpw27 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww 2026-04-03 02:23:26+00:00| seen|...

CVE-2023-7342

creationtimestamp| type| source ---|---|--- 2026-04-02 21:33:50+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mik5ufznqr2z...

CVE-2026-34758

creationtimestamp| type| source ---|---|--- 2026-04-02 21:05:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik4ck4d5p2o 2026-04-02 22:22:50+00:00| seen| Telegram/8YijTp8Bkg1BgPYn1xfGtyu-IfZ2h3UIXQPTCviuLwYJAlo 2026-04-03 02:31:08+00:00| seen|...

CVE-2026-34833

creationtimestamp| type| source ---|---|--- 2026-04-02 20:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik3uzxlow23 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8...

CVE-2026-34838

creationtimestamp| type| source ---|---|--- 2026-04-02 20:56:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik3r6ye3j2j 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww 2026-04-03 02:22:10+00:00| seen|...

Rack::Request accepts invalid Host characters, enabling host allowlist bypass

Summary Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, , and @. Because req.host returns the full parsed value, applications that validate hosts using naive prefix or suffix checks can be...

EUVD-2026-18478

Rack::Request accepts invalid Host characters, enabling host allowlist bypass...

CVE-2026-35459

creationtimestamp| type| source ---|---|--- 2026-04-02 20:36:20+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-7gvf-3w72-p2pg 2026-04-06 21:21:26+00:00| published-proof-of-concept| Telegram/xKxKUYX0BRejEqYlrURXsjCQY9BctYcoeewNmSMWqY7riM 2026-04-06...

GHSA-5RRM-6QMQ-2364

creationtimestamp| type| source ---|---|--- 2026-04-02 19:27:20+00:00| published-proof-of-concept| Telegram/zJs9VhJAI5JOvrL4hzeWnrOleMDgHArbbwhOuzjaL80cudA 2026-04-03 02:18:18+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miknqzyvft2x...

CVE-2026-5354

creationtimestamp| type| source ---|---|--- 2026-04-02 18:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijupvycp32g...

CVE-2026-5353

creationtimestamp| type| source ---|---|--- 2026-04-02 18:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miju5yzr5j2i...

EUVD-2026-18426

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...

EUVD-2026-18436

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent...