CVE-2026-39355

creationtimestamp| type| source ---|---|--- 2026-04-07 20:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwn6mn47z25 2026-04-07 21:22:07+00:00| seen| Telegram/G7jwG369FM-EA8JMh95pmFocIEiy10HcnXiWAHgS3Vj404 2026-04-08 07:04:11+00:00| seen|...

CVE-2026-39838

creationtimestamp| type| source ---|---|--- 2026-04-07 20:37:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwn25b2kb27...

CVE-2026-32497

creationtimestamp| type| source ---|---|--- 2026-04-07 20:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miwmn3rdes2h...

CVE-2026-39390

creationtimestamp| type| source ---|---|--- 2026-04-07 20:07:21+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-x3hr-cp7x-44r2 2026-04-08 18:01:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyut3qg6x2s...

CVE-2026-39392

creationtimestamp| type| source ---|---|--- 2026-04-07 20:07:13+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-fjpj-6qcq-6pw2 2026-04-08 18:16:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyvnxbmju27...

CVE-2026-24913

creationtimestamp| type| source ---|---|--- 2026-04-07 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN33581068/ 2026-04-08 06:19:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixnln6bez2h 2026-04-08 07:15:31+00:00| seen|...

CVE-2026-39332

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:33+00:00| seen| Telegram/MwNatB1kDaoxbSrZihFWwC12FE1HreAtxbr2hmQcZTjcFY 2026-04-07 19:39:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwjrzupty23 2026-04-08 08:15:04+00:00| seen|...

CVE-2026-39337

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:33+00:00| seen| Telegram/MwNatB1kDaoxbSrZihFWwC12FE1HreAtxbr2hmQcZTjcFY 2026-04-07 19:48:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwkcbdjif2g 2026-04-08 00:41:21+00:00| seen|...

CVE-2026-39329

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks 2026-04-08 08:09:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixtply4fk2x 2026-04-12 08:07:07+00:00| seen|...

CVE-2026-39327

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks 2026-04-08 09:07:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixwxybqkw2s 2026-04-11 01:07:08+00:00| seen|...

CVE-2026-39323

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:16+00:00| seen| Telegram/yEepCm2Odjvpf0uI90hS1hr8dhkmidpoORZ8hNAmW5Xwfo 2026-04-07 19:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwk4carkf2q 2026-04-08 09:07:35+00:00| seen|...

CVE-2026-35576

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:02+00:00| published-proof-of-concept| Telegram/b7kqkVlyupyGML8IRNuJF5vW46V1gBKnrWAnE54KrYglqM 2026-04-07 19:35:16+00:00| seen| Telegram/yEepCm2Odjvpf0uI90hS1hr8dhkmidpoORZ8hNAmW5Xwfo 2026-04-08 10:00:28+00:00| seen|...

CVE-2026-39330

creationtimestamp| type| source ---|---|--- 2026-04-07 19:34:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwjjg4oll2q 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks 2026-04-07 19:35:33+00:00| seen|...

CVE-2026-35581

creationtimestamp| type| source ---|---|--- 2026-04-07 19:33:54+00:00| seen| Telegram/2sVgvXJxKnqdd0t3ix7z2PFFoP4qMIqNMJ7HHwXtd94aJL4 2026-04-17 14:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjp3vgyzwy2v...

CVE-2026-35574

creationtimestamp| type| source ---|---|--- 2026-04-07 19:33:43+00:00| seen| Telegram/7stdzVfIjMVb7tvEQLoql-CFRLg5JIYu0eUqsXCfmQ30DI4 2026-04-07 19:33:54+00:00| seen| Telegram/2sVgvXJxKnqdd0t3ix7z2PFFoP4qMIqNMJ7HHwXtd94aJL4 2026-04-17 05:07:08+00:00| seen|...

CVE-2026-5734

creationtimestamp| type| source ---|---|--- 2026-04-07 19:33:24+00:00| seen| Telegram/UR5TCX5vufcj9skQtsOGmPNpHO32u3eWlC-vhPXaaDs7Lc 2026-04-08 12:10:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3miyb6aeqsg2z 2026-04-09 00:01:20+00:00| seen|...

CVE-2026-39326

creationtimestamp| type| source ---|---|--- 2026-04-07 19:32:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwjfl5pyy2z 2026-04-07 19:35:24+00:00| seen| Telegram/d9ntGhgAXUNib3HVhoGCh5gTeuhEkXLp8JxGb0TRA4y7Jks 2026-04-08 09:07:42+00:00| seen|...

CVE-2026-39354 Scoold has an Authenticated Arbitrary Question Overwrite via Client-Controlled postId in POST /questions/ask

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.66.2, an authenticated authorization flaw in Scoold allows any logged-in, low-privilege user to overwrite another user's existing question by supplying that question's public ID as the postId parameter to POST /questions/ask...

CVE-2026-39354 Scoold has an Authenticated Arbitrary Question Overwrite via Client-Controlled postId in POST /questions/ask

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.66.2, an authenticated authorization flaw in Scoold allows any logged-in, low-privilege user to overwrite another user's existing question by supplying that question's public ID as the postId parameter to POST /questions/ask...

CVE-2026-39354

CVE-2026-39354 affects Scoold prior to version 1.66.2, where an authenticated low-privilege user can overwrite another user’s question by supplying the victim question’s public ID as postId to POST /questions/ask. This enables direct integrity loss in an existing discussion thread. Root cause is ...