CVE-2026-5212

The CVE-2026-5212 entry maps to a concrete stack-based buffer overflow in D-Link devices, affecting the Webdav_Upload_File function in /cgi-bin/webdav_mgr.cgi. The vulnerability is triggered by manipulating the f_file argument and allows remote exploitation. Affected devices include D-Link DNS-12...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the MCP server insecure CORS configuration and lack of authentication in the MCP interface. An attacker can gain unauthorized control over all active sessions and exfiltrate sensitive data...

CVE-2026-2950

creationtimestamp| type| source ---|---|--- 2026-03-31 20:06:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3miey32of4k2f...

CVE-2026-5211

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vulnerability affects the function...

CVE-2026-5211 D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vulnerability affects the function...

CVE-2026-5211

The CVE-2026-5211 entry concerns multiple D-Link NAS models (DNS-120, DNS-315L, DNS-320/320L/320LW/321, DNS-727 etc., including DNS-1550-04) with a vulnerability in UPnP_AV_Server_Path_Del within /cgi-bin/app_mgr.cgi. The flaw arises from manipulating the f_dir argument, causing a stack-based buf...

CVE-2026-5211 D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vulnerability affects the function...

CVE-2026-2123

creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:27+00:00| published-proof-of-concept| Telegram/pGlKXNBirRT0gxqFC1bVLs6pojbUfu72MTdyyvCxHD2SpM 2026-03-31 19:20:34+00:00| published-proof-of-concept| Telegram/E6DSeVNy1uX9gptW9gUevVOkWF-Be1dfF2SOnx5Xk2F0EI 2026-03-31 19:35:19+00:00| seen...

CVE-2026-2275

creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:10+00:00| seen| Telegram/kcbrs7WWw-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA 2026-04-01 06:26:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mig2peqfxt2h 2026-04-04 05:36:38+00:00| seen|...

EUVD-2026-17476

Uncontrolled search path elements in Anthropic Claude for Windows installer Claude Setup.exe versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs e.g., profapi.dll from its own directory after UAC elevation, enabling arbitrary code...

CVE-2026-34573

creationtimestamp| type| source ---|---|--- 2026-03-31 17:26:20+00:00| published-proof-of-concept| Telegram/eKNKUl3o6DiU-2-jA1Bozh3wu6D5ajzBDCTSMbn5G7zvLo 2026-03-31 19:06:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieuo7xpy52t...

CVE-2026-34219

creationtimestamp| type| source ---|---|--- 2026-03-31 17:25:56+00:00| published-proof-of-concept| Telegram/DQc3fgzqy6DN4suTckTk8JzzlHKPkbNE2HsjPTkc7SF-k 2026-03-31 18:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mietaoxw5i2g 2026-07-10 20:06:41+00:00| seen|...

CVE-2026-5277

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 15:25:49+00:00| seen| Telegram/0Pt1cki95fA53ajnnsK8Av3dKVeZdTqxfrxRx4frF74hO10 2026-04-01 17:02:36+00:00| seen|...

CVE-2026-5282

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:01:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mig7yd45t522 2026-04-01 15:31:15+00:00| seen|...

CVE-2026-5283

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:24:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migbbrqc5a25 2026-04-01 15:25:49+00:00| seen|...

CVE-2026-5280

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:27:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migbhqt6g624 2026-04-01 18:00:00+00:00| seen|...

CVE-2026-5289

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:13:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migaoseuhk2s 2026-04-01 15:22:49+00:00| seen|...

CVE-2026-5284

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miga2zax3r2i 2026-04-01 15:25:49+00:00| seen|...

CVE-2026-3469

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0383/ 2026-03-31 22:45:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mifawdgaid2s 2026-04-01 12:20:24+00:00| seen|...

CVE-2026-5288

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migahejbzd2j 2026-04-01 14:51:55+00:00| seen|...