CVE-2026-43434

creationtimestamp| type| source ---|---|--- 2026-05-11 18:01:23+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116557246423998157 2026-05-11 19:00:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllxhbfqww2n 2026-05-11 19:00:01+00:00| seen|...

CVE-2026-44327

creationtimestamp| type| source ---|---|--- 2026-05-08 22:59:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-cmpj-2x3g-m7g3 2026-05-27 18:01:22+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116647845023345610 2026-05-27 18:01:27+00:00| seen|...

CVE-2025-66369

creationtimestamp| type| source ---|---|--- 2026-05-06 19:00:25+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116529167159124842 2026-05-10 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities20260511...

CVE-2025-42511

creationtimestamp| type| source ---|---|--- 2026-05-05 07:53:03+00:00| seen| https://mastodon.social/users/bagder/statuses/116520883197857253 2026-05-05 07:53:12+00:00| seen| https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3ml3pf5ml3y62...

CVE-2026-6429

creationtimestamp| type| source ---|---|--- 2026-04-29 07:10:54+00:00| seen| https://mastodon.social/users/bagder/statuses/116486743707813679 2026-04-29 07:11:04+00:00| seen| https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mkmkagqvtir2 2026-04-29 07:16:06+00:00| seen|...

CVE-2026-5545

creationtimestamp| type| source ---|---|--- 2026-04-29 07:10:54+00:00| seen| https://mastodon.social/users/bagder/statuses/116486743707813679 2026-04-29 07:11:04+00:00| seen| https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mkmkagqvtir2 2026-04-29 07:21:06+00:00| seen|...

BIT-MASTODON-2026-41259 Mastodon: Insufficient verification of email addresses

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

CVE-2026-11234

creationtimestamp| type| source ---|---|--- 2026-04-26 16:22:38+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/116471926431000914 2026-04-26 16:22:54+00:00| seen| https://bsky.app/profile/netsecio.bsky.social/post/3mkfxojpptk2q 2026-04-27 03:46:54+00:00| seen|...

CVE-2026-7036

creationtimestamp| type| source ---|---|--- 2026-04-26 14:17:21+00:00| seen| https://mastodon.social/users/RedPacketSecurity/statuses/116471403742228494...

CVE-2026-7035

creationtimestamp| type| source ---|---|--- 2026-04-26 14:17:15+00:00| seen| https://mastodon.social/users/RedPacketSecurity/statuses/116471403743332437 2026-04-30 18:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkq7ekvz6p2u...

CVE-2026-41259

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

CVE-2026-41259

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

CVE-2026-41259 Mastodon: Insufficient verification of email addresses

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

EUVD-2026-25282

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

CVE-2026-41259

CVE-2026-41259 affects Mastodon prior to versions 4.5.9, 4.4.16, and 4.3.22. The issue is insufficient verification of email addresses: Mastodon allows restricting new user sign-up by domain but does not properly handle characters that some mail servers interpret differently. Root cause is incomp...

CVE-2026-41259 Mastodon: Insufficient verification of email addresses

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

CVE-2026-41259 Mastodon: Insufficient verification of email addresses

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

PT-2026-34728

Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.5.9 Mastodon versions prior to 4.4.16 Mastodon versions prior to 4.3.22 Description Mastodon allows restricting new user sign-up based on e-mail domain names and performs basic validation on e-mail addresses, but i...

Mastodon 安全漏洞

Mastodon is an open-source social networking server based on ActivityPub. Versions of Mastodon prior to 4.5.9, 4.4.16, and 4.3.22 contained security vulnerabilities due to a lack of mechanisms to prevent certain email servers from interpreting characters differently...

CVE-2026-6198

creationtimestamp| type| source ---|---|--- 2026-04-13 20:00:11+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116399152239781958 2026-04-13 21:08:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfrkm6hwx2z 2026-04-13 21:22:51+00:00|...