CVE-2026-42301

creationtimestamp| type| source ---|---|--- 2026-05-09 05:37:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfjnj2u4u2q 2026-05-09 17:46:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgsfyqxeu2z...

CVE-2026-8209

creationtimestamp| type| source ---|---|--- 2026-05-09 05:26:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfj3m6ba52e...

CVE-2026-42137

creationtimestamp| type| source ---|---|--- 2026-05-09 05:08:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfi3awge42k...

CVE-2026-42174

creationtimestamp| type| source ---|---|--- 2026-05-09 05:02:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfhpvrzss2k...

CVE-2026-42069

creationtimestamp| type| source ---|---|--- 2026-05-09 04:57:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfhgjjwta2k...

CVE-2025-66172

creationtimestamp| type| source ---|---|--- 2026-05-09 04:51:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfh3cmokg25...

CVE-2025-66170

creationtimestamp| type| source ---|---|--- 2026-05-09 04:46:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlfgsdlek52e 2026-05-10 06:15:00+00:00| seen| https://bsky.app/profile/releaseport.com/post/3mli4aews2d22...

CVE-2026-6665

creationtimestamp| type| source ---|---|--- 2026-05-09 04:25:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlffnzarsx2i 2026-05-09 17:46:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgsgh3l6j2n 2026-05-27 00:07:11+00:00| seen|...

CVE-2026-44284

creationtimestamp| type| source ---|---|--- 2026-05-09 02:59:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfaukdund2e...

CVE-2026-44313

creationtimestamp| type| source ---|---|--- 2026-05-09 02:54:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlfallignb2e 2026-05-09 18:44:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlgvnqcqgb2w...

SUSE CVE-2026-43174

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all associated page pools are terminated right away, let the refcounting do the work instead of releasing the zcrx ctx directly...

CVE-2026-42455

creationtimestamp| type| source ---|---|--- 2026-05-09 02:39:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf7qqacn72h...

CVE-2026-44656

creationtimestamp| type| source ---|---|--- 2026-05-09 02:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf7j2og4t2o 2026-05-09 09:00:04+00:00| seen| Telegram/Yr-1ppOQlsAxCk9olefEOIlRJklCfDEolOYJn0mNy08hY4...

CVE-2026-41903

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

CVE-2026-42259

Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes \ to forward...

CVE-2025-69690

Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the postrebootcommands property. NOTE: the Supplier disputes this because this installer is only available to admins and they are intentionally allowed to execut...

CVE-2026-42453

creationtimestamp| type| source ---|---|--- 2026-05-09 01:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlf3icpcbg2v...

CVE-2026-44966

creationtimestamp| type| source ---|---|--- 2026-05-09 00:40:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-j658-c2gf-x6pq 2026-05-26 23:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3vppgf52q 2026-05-27 01:07:12+00:00| seen|...

GHSA-8JR5-6GVJ-RFPF @yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools

SSE Transport Has No Authentication and Wildcard CORS, Exposing All 86 GitLab Tools Including Destructive Operations A review of mcp-gitlab-server at commit 80a7b4cf3fba6b55389c0ef491a48190f7c8996a uncovered that the SSE HTTP transport — advertised in the README and comparison table as a...

PT-2026-39306

Name of the Vulnerable Software and Affected Versions GitLab MCP Server versions prior to 0.6.0 Description The HTTP transport in src/transport.ts lacks an authentication layer and implements a wildcard Access-Control-Allow-Origin: header on all responses. This allows any cross-origin browser...