PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

Palo Alto Networks has warned that a recently disclosed medium-severity security flaw impacting PAN-OS and Prisma Access has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-0257 CVSS score: 7.8, refers to a case of authentication bypass that could be exploited b...

K000160932: Quarterly Security Notification (May 2026)

Security Advisory Description On May 13, 2026, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your F5 devices. You can find the details of each issue in the associated articles. You can watch t...

Barracuda ESG TAR Filename Command Injection

This module exploits CVE-2023-2868, a command injection vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the ESG processes TAR file attachments - filenames containing shell metacharacters backticks are passed directly to shell commands during...

CVE-2025-48486

creationtimestamp| type| source ---|---|--- 2025-05-30 06:49:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqen5nnerbe2...

CVE-2025-46570

creationtimestamp| type| source ---|---|--- 2025-05-29 18:07:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdcp3xzobo2...

CVE-2025-5054

creationtimestamp| type| source ---|---|--- 2025-05-29 15:19:54+00:00| seen| https://seclists.org/oss-sec/2025/q2/183 2025-05-29 17:47:17+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lqdblrdkqb2g 2025-05-29 17:57:31+00:00| seen|...

GHSA-2HJ5-G64G-FP6P

creationtimestamp| type| source ---|---|--- 2025-05-29 13:14:47+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lqcseht7mw2l 2026-01-24 21:30:37+00:00| seen| https://gist.github.com/alon710/da6cd5684b398c9cf5fbb614e2ac5c8a 2026-01-24 21:30:38+00:00| seen|...

CVE-2025-5277

creationtimestamp| type| source ---|---|--- 2025-05-28 13:56:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114585800636728854 2025-05-28 15:27:28+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaj63cav5t2...

CVE-2025-4947

creationtimestamp| type| source ---|---|--- 2025-05-28 03:48:12+00:00| seen| https://daniel.haxx.se/blog/2025/05/28/curl-8-14-0/ 2025-05-28 03:51:53+00:00| seen| https://seclists.org/oss-sec/2025/q2/173 2025-05-28 07:45:19+00:00| seen|...

CVE-2025-48929

The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential e.g., not a token with a short expiration time that can be reused at a later date if discovered by an adversary...

CVE-2025-48926

The admin panel in the TeleMessage service through 2025-05-05 allows attackers to discover usernames, e-mail addresses, passwords, and telephone numbers...

CVE-2025-2826

creationtimestamp| type| source ---|---|--- 2025-05-27 23:26:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114582383243251984...

CVE-2025-48054

creationtimestamp| type| source ---|---|--- 2025-05-27 04:47:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17604 2025-05-27 05:00:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq4vsqoyz352 2025-05-27...

CVE-2025-5203

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads to out-of-bounds read. Local access is required to approach this...

CVE-2025-40650

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17561 2025-05-26 14:08:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3dy3ntmz2a 2025-05-26 15:28:54+00:00| seen|...

Fedora: Security Advisory (FEDORA-2025-e94782e579)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5145

creationtimestamp| type| source ---|---|--- 2025-05-25 05:45:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17504 2025-05-25 06:09:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpxymhdeq722 2025-05-25...

CVE-2025-5128

creationtimestamp| type| source ---|---|--- 2025-05-24 16:21:27+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpwkh6kkwtz2 2025-05-24 16:45:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17493 2025-05-24...

CVE-2023-34873

creationtimestamp| type| source ---|---|--- 2025-05-23 17:44:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17439 2025-05-23 21:54:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpummxtfl32w...

CVE-2025-24916

creationtimestamp| type| source ---|---|--- 2025-05-23 16:46:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17423 2025-05-23 18:09:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpua2ab7wc2j 2025-05-23 23:29:35+00:00| seen|...