CVE-2026-34832 Scoold: Cross-Account Feedback Deletion (IDOR)

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.66.1, Scoold contains an authenticated authorization flaw in feedback deletion that allows any logged-in, low-privilege user to delete another user's feedback post by submitting its ID to POST /feedback/id/delete. The...

CVE-2026-34832 Scoold: Cross-Account Feedback Deletion (IDOR)

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to version 1.66.1, Scoold contains an authenticated authorization flaw in feedback deletion that allows any logged-in, low-privilege user to delete another user's feedback post by submitting its ID to POST /feedback/id/delete. The...

CVE-2026-5354

creationtimestamp| type| source ---|---|--- 2026-04-02 18:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijupvycp32g...

CVE-2026-35038

creationtimestamp| type| source ---|---|--- 2026-04-02 18:45:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijugxic5f2q...

EUVD-2026-18426

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP input. An...

EUVD-2025-209188

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...

CVE-2026-34124

creationtimestamp| type| source ---|---|--- 2026-04-02 18:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijtgnzybk2s 2026-04-02 19:26:54+00:00| seen| Telegram/Wnflj9AVRNFcbzmT8RV9QbE39gd8mxBym86BZleqlS4uOZ8...

CVE-2026-34577

creationtimestamp| type| source ---|---|--- 2026-04-02 18:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijtaovcuf23 2026-04-02 19:26:58+00:00| published-proof-of-concept| Telegram/7DVhAvDfvaCSFfrp-315YEAfd2kaZp9OZJgmE0wwvo2i8o 2026-04-03 04:01:07+00:00| seen|...

CVE-2026-34119

creationtimestamp| type| source ---|---|--- 2026-04-02 18:20:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijt3cw5zj2o 2026-04-02 19:26:29+00:00| seen| Telegram/tHMZo4t6KJ7O3rHGS3YAWNGCGRHee0gil3YJsfVKclsQ...

CVE-2026-35388

creationtimestamp| type| source ---|---|--- 2026-04-02 18:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijsjwr3wj22 2026-04-02 18:24:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116336509679642725 2026-04-02 18:24:42+00:00| seen|...

CVE-2026-34576

creationtimestamp| type| source ---|---|--- 2026-04-02 18:02:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijrzyehmm2o 2026-04-02 19:26:58+00:00| published-proof-of-concept| Telegram/7DVhAvDfvaCSFfrp-315YEAfd2kaZp9OZJgmE0wwvo2i8o...

EUVD-2026-18466

The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lcx509extractnamesegment casts sizet vlen to uint8t when storing the Common Name CN length. An attacker who crafts a certificate with CN = victim's CN +...

CVE-2026-34790

creationtimestamp| type| source ---|---|--- 2026-04-02 17:37:38+00:00| seen| Telegram/s8qY890P48N3Wo9aQa8rI-zenhf5cWovFj-1HEcEoggzt84 2026-04-08 07:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mixqxgjfg72r...

CVE-2026-23243

creationtimestamp| type| source ---|---|--- 2026-04-02 17:33:51+00:00| seen| Telegram/-E8D-G5mrov9BTBwIGpE99cQvtqBsnFAkyRSFMUliZNHWgQ 2026-04-17 12:45:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjoxda4ub42f 2026-05-05 18:00:00+00:00| seen|...

CVE-2026-34118 Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C100, C101 & C520WS

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C100/C101 v5, C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of remaining buffer capacity after dynamic allocation, due to insufficient boundary validation when handling externally supplied HTTP...

CVE-2026-35002

creationtimestamp| type| source ---|---|--- 2026-04-02 17:18:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijpm4axuq2j 2026-04-02 17:38:06+00:00| published-proof-of-concept| Telegram/MQ6ai6F8nIsMgggTBJXuPSpPwamg57gds1UAnW3xco8kE...

CVE-2025-58136

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...

CVE-2025-58136

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...

UBUNTU-CVE-2025-58136

A bug in POST request handling causes a crash under a certain condition. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.1, from 9.0.0 through 9.2.12. Users are recommended to upgrade to version 10.1.2 or 9.2.13, which fix the issue. A workaround for older versions is to...

CVE-2026-34797

creationtimestamp| type| source ---|---|--- 2026-04-02 17:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijpd5rw5p2n 2026-04-02 17:38:00+00:00| seen| Telegram/-NvE3DOHeY-1Q0zG5YCstM01cFOFdgBxqrRb0oXZGokSQ 2026-04-03 08:00:17+00:00| seen|...