CERTFR-2026-ACT-021

creationtimestamp| type| source ---|---|--- 2026-05-11 12:08:19+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mllah4ffi42y 2026-05-11 12:08:27+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116555861087874714 2026-05-11 16:34:25+00:00| seen|...

CVE-2026-8230

creationtimestamp| type| source ---|---|--- 2026-05-10 08:22:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlidefjjkj2r...

CVE-2026-42575

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dmifud2f 2026-05-09 21:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6woiu5p2p 2026-05-10 03:00:27+00:00| seen|...

CVE-2026-44844

creationtimestamp| type| source ---|---|--- 2026-05-08 23:12:51+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-g47v-rwmh-r9f8...

CLSA-2026-1778276927 kernel: Fix of 33 CVEs

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - ext4: avoid OOB when system.data xattr changes underneath the filesystem CVE-2024-47701 - gpiolib: cdev: fix uninitialised kfifo CVE-2024-36898 - wifi: mt76: Fix...

CVE-2026-44214

creationtimestamp| type| source ---|---|--- 2026-05-08 20:49:40+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-m9g3-3g99-mhpx 2026-05-26 22:30:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mms26w6awm2h...

EUVD-2026-28697

In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for handle opening Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use mayseeallnamespaces helper...

UBUNTU-CVE-2026-43333

In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTRTOBUF pointers checkmemaccess matches PTRTOBUF via basetype which strips PTRMAYBENULL, allowing direct dereference without a null check. Map iterator ctx-key and ctx-value are PTRTOBUF |...

ShinyHunters escalates Canvas attacks with school login defacements

Days after confirming a major data breach, Instructure is now facing a second blow. Earlier this week, Instructure confirmed a major data breach affecting its cloud‑hosted Canvas environment, with the ShinyHunters group claiming it stole hundreds of millions of records tied to thousands of school...

GHSA-267C-6GRR-H53F

creationtimestamp| type| source ---|---|--- 2026-05-08 03:00:06+00:00| seen| Telegram/xvoYgOFnUf5jFw65bW2FC7fcn6orx4l4LTjm0d68ZkOEzo...

PT-2026-38675

Name of the Vulnerable Software and Affected Versions cPanel Nova plugin versions prior to 11.136.0.9 cPanel Nova plugin versions prior to 11.136.1.10 WP Squared cPanel Nova plugin versions prior to 11.134.0.25 cPanel Nova plugin versions prior to 11.132.0.31 cPanel Nova plugin versions prior to...

PT-2026-38674

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...

PT-2026-38673

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...

CVE-2026-32207

creationtimestamp| type| source ---|---|--- 2026-05-07 23:09:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdjiw4jr2w 2026-05-07 23:10:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcdlcfhct2o 2026-05-08 02:34:05+00:00| seen|...

CVE-2026-39836

creationtimestamp| type| source ---|---|--- 2026-05-07 22:02:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7s2lbje2v 2026-05-08 12:01:27+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mldoo2vosj2d 2026-05-15 16:19:42+00:00| seen|...

EUVD-2026-28415

Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...

CVE-2026-44244

creationtimestamp| type| source ---|---|--- 2026-05-07 19:21:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbwrbrdff2c 2026-05-07 19:51:57+00:00| seen| https://bsky.app/profile/cybercod.bsky.social/post/3mlbyihsuwt26 2026-05-07 21:15:01+00:00| seen|...

CVE-2026-44742

Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...

CVE-2026-44742

Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...

CVE-2026-44742

Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...