CVE-2026-23866

CVE-2026-23866 affects WhatsApp for iOS and Android, in conjunction with Instagram Reels, where incomplete validation of AI-rich response messages could allow a user to trigger processing of media from an arbitrary URL on another user’s device, potentially invoking OS-controlled custom URL scheme...

CVE-2026-31724

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: feem: Fix netdevice lifecycle with devicemove The netdevice is allocated during function instance creation and registered during the bind phase with the gadget device as its sysfs parent. When the function unbinds, t...

CVE-2026-31722

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Fix netdevice lifecycle with devicemove The netdevice is allocated during function instance creation and registered during the bind phase with the gadget device as its sysfs parent. When the function unbinds,...

CVE-2026-31722

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Fix netdevice lifecycle with devicemove The netdevice is allocated during function instance creation and registered during the bind phase with the gadget device as its sysfs parent. When the function unbinds,...

CVE-2026-31722 usb: gadget: f_rndis: Fix net_device lifecycle with device_move

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Fix netdevice lifecycle with devicemove The netdevice is allocated during function instance creation and registered during the bind phase with the gadget device as its sysfs parent. When the function unbinds,...

PT-2026-36317

Name of the Vulnerable Software and Affected Versions The Ultimate Dashboard versions prior to 3.8.15 Description Cross-Site Request Forgery occurs due to a flawed nonce validation conditional in the handle module actions function. This allows unauthenticated attackers to toggle plugin modules on...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper lifecycle management of netdevice in fsubset. This vulnerability may lead to suspended...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper lifecycle management of netdevice in fecm, potentially leading to suspended sysfs symbol...

PT-2026-36359

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb gadget f eem component where the net device is allocated during function instance creation and registered during the bind phase. When the function unbinds, the...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper lifecycle management of netdevice in feem, potentially leading to suspended sysfs symbol...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper lifecycle management of netdevice in frndis, potentially leading to suspended sysfs...

CVE-2026-6389

creationtimestamp| type| source ---|---|--- 2026-04-30 22:18:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqnffksec2n 2026-04-30 22:54:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqpgzflso2k 2026-05-01 10:42:06+00:00| seen|...

CVE-2026-36767

creationtimestamp| type| source ---|---|--- 2026-04-30 19:46:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqewscpgn2w 2026-04-30 19:47:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexlowma2q 2026-04-30 20:43:37+00:00| seen|...

CVE-2026-40904

creationtimestamp| type| source ---|---|--- 2026-04-30 19:20:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqdhe6gww2n 2026-04-30 21:28:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqkmlikdx2p...

CVE-2026-5402

creationtimestamp| type| source ---|---|--- 2026-04-30 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116492483168335299 2026-04-30 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkp3s74gwm2g 2026-04-30 19:50:43+00:00| seen|...

EUVD-2026-26314

Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor. When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack...

CVE-2026-7470

creationtimestamp| type| source ---|---|--- 2026-04-30 04:19:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116491731051009332 2026-04-30 04:31:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkorrp2www2i 2026-04-30 04:41:17+00:00| seen|...

Directory Traversal

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Directory Traversal via the webchat audio embedding process. An attacker can access and exfiltrate arbitrary local audio-like files readable by the gateway process by influencing the...

CVE-2018-25318

creationtimestamp| type| source ---|---|--- 2026-04-29 21:13:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknzdmco6t2i 2026-04-29 21:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknzml5xqi2e 2026-05-04 22:07:07+00:00| seen|...

CVE-2018-25308

creationtimestamp| type| source ---|---|--- 2026-04-29 20:42:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxlfyp472h 2026-04-29 20:53:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkny7sdob62p...