CVE-2026-4277 Privilege abuse in GenericInlineModelAdmin

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-4277

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-4277

The CVE-2026-4277 issue affects Django: versions 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. The vulnerability concerns improper validation of permissions on inline model instances when submitting forged POST data via GenericInlineModelAdmin. This could allow unauthorized access o...

CVE-2026-4277 Privilege abuse in GenericInlineModelAdmin

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

UBUNTU-CVE-2026-4277

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Add permissions on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

UBUNTU-CVE-2026-4292

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-25344

creationtimestamp| type| source ---|---|--- 2026-04-07 12:30:15+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mivrsrts472c...

CVE-2026-5642

A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php of the component HTTP POST Request Handler. This manipulation of the argument Name causes improper authorization. It ...

CVE-2026-34899

creationtimestamp| type| source ---|---|--- 2026-04-07 10:20:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mivkku23dp2j...

shadowforge

ShadowForge "Trust no one. Suspect ev...

CVE-2026-39846

creationtimestamp| type| source ---|---|--- 2026-04-07 09:16:34+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-phhp-9rm9-6gr2 2026-04-07 23:21:25+00:00| seen| Telegram/ob3ye0FCdfhceb6CimILWC3jRIWmZERTbGMc-OQRsW6HR0 2026-04-08 00:24:24+00:00| seen...

WordPress wpForo Forum plugin <= 2.4.16 - Authenticated (Subscriber+) Arbitrary File Deletion via Post Body vulnerability

Authenticated Subscriber+ Arbitrary File Deletion via Post Body vulnerability discovered by WordFence in WordPress Plugin wpForo Forum versions = 2.4.16...

CVE-2025-57834

creationtimestamp| type| source ---|---|--- 2026-04-07 06:02:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv462gvya2s 2026-04-08 03:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mixcgodylv2q 2026-05-10 20:00:00+00:00| seen|...

CVE-2025-54328

creationtimestamp| type| source ---|---|--- 2026-04-07 06:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv45ttzr425 2026-04-07 08:06:44+00:00| seen| https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mivd3t5d2m2o 2026-04-08 08:07:19+00:00| seen|...

CVE-2026-20432

creationtimestamp| type| source ---|---|--- 2026-04-07 06:02:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miv44zzap62i 2026-04-07 14:52:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mivzrg66ve2j 2026-04-07 15:20:46+00:00| seen|...

CVE-2026-33866

creationtimestamp| type| source ---|---|--- 2026-04-07 05:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-33865/...

CVE-2026-32533

creationtimestamp| type| source ---|---|--- 2026-04-07 03:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miutn6m6mq2k...

CVE-2026-39324

creationtimestamp| type| source ---|---|--- 2026-04-07 03:00:08+00:00| published-proof-of-concept| Telegram/c-9nM9mslhGNLfW7QsPDgkIMfnwsyr-9epKeORTrIU88Ta0 2026-04-07 03:00:11+00:00| published-proof-of-concept| Telegram/HzOqBhluyLlt9yC4XLrvomtg4oZEtrGKU8ieYWYpvETezc 2026-04-07 19:35:16+00:00| see...

CVE-2026-39360

creationtimestamp| type| source ---|---|--- 2026-04-07 02:06:49+00:00| published-proof-of-concept| https://github.com/rustfs/rustfs/security/advisories/GHSA-mx42-j6wv-px98 2026-04-07 20:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwndj2ph62d...

CVE-2026-5688

creationtimestamp| type| source ---|---|--- 2026-04-07 01:16:43+00:00| published-proof-of-concept| Telegram/NRb0QMHrG2YdeQFhFIBC199wVAoJ1DSSMrQ5jp3E6gcHNig 2026-04-07 02:36:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miuqmwcrrt2t...