CVE-2026-33386

creationtimestamp| type| source ---|---|--- 2026-05-29 07:15:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-33384...

CVE-2026-41236

creationtimestamp| type| source ---|---|--- 2026-05-29 06:30:36+00:00| published-proof-of-concept| https://github.com/froxlor/froxlor/security/advisories/GHSA-mq5v-pxpm-8jw2 2026-06-04 18:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnibsgjzcn2y...

CVE-2026-46822

creationtimestamp| type| source ---|---|--- 2026-05-28 23:35:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6rsqhkt2w 2026-05-29 22:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmzlxzqqhp2f...

CVE-2026-44466

creationtimestamp| type| source ---|---|--- 2026-05-28 18:02:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwm5ilszt2s 2026-05-28 19:35:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwreavbin2t 2026-06-02 22:07:07+00:00| seen|...

CVE-2026-10004

creationtimestamp| type| source ---|---|--- 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260529 2026-05-28 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260529 2026-05-29...

CVE-2026-47761

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiqloac22z 2026-05-28 17:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwixsmqhn2i 2026-05-29 00:37:08+00:00| seen|...

CVE-2026-47759

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiq4djr42l 2026-05-28 17:23:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjz5vnzt2i 2026-05-28 21:37:06+00:00| seen|...

The CISO Whisperer’s Watch List For The Gartner Security & Risk Management Summit 2026

New York, USA, 28th May 2026, CyberNewswire...

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server EMS deployments to deliver a credential-stealing malware family dubbed EKZ Infostealer. "The campaign abused trusted endpoint management infrastructure to deliver malware...

Malicious code in @service-suppliers/set_suppliers_loading_stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52d21512cf72b6b9822978fa95b217f0412f0d8ec55e5667addf4a486ad0965b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-7802

creationtimestamp| type| source ---|---|--- 2026-05-28 07:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvh6mbxne2l 2026-05-28 07:02:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhcdq5r42p...

CVE-2026-5737

creationtimestamp| type| source ---|---|--- 2026-05-28 06:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgtbfpf62h...

CVE-2026-2374

creationtimestamp| type| source ---|---|--- 2026-05-28 06:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mmvgi2bzcs2k...

RockyLinux 9 : webkit2gtk3 (RLSA-2026:19206)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19206 advisory. webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2025-43213 webkitgtk: Processing maliciously crafted we...

CVE-2026-44886

Pi.Alert’s web interface is vulnerable to unauthenticated blind SQL injection in the /pialert/php/server/devices.php endpoint when action=getDevicesTotals is used and the scansource parameter is injected. From 2024-06-29 until 2026-05-07, unauthenticated users could trigger the vulnerability; the...

CVE-2026-44888

Pi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.Alert's SaveConfigFile endpoint writes user-supplied numeric config values e.g., SMTPPORT directly into pialert.conf without validation. Since pialert.conf is loaded via Python's exec every 3–5 minutes...

CVE-2026-48149

creationtimestamp| type| source ---|---|--- 2026-05-27 19:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6x6poof2n 2026-05-27 19:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuafe64q72n...

CVE-2026-48027 Compromised Nx Console version 18.95.0

Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for 18 minutes in Visual Studio Marketplace. For OpenVSX, the problem was detected later, and the...

Malicious code in bulletproof-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00849bd08fa4e9ebb1877039ab1ff287fd0ab89a683a45229176f717b6db1e9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-45837

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arenavmclose on fork arenavmopen only bumps vml-mmapcount but never registers the child VMA in arena-vmalist. The vml-vma always points at the parent VMA, so after parent munmap the pointer dangles. If...