CVE-2023-34092

creationtimestamp| type| source ---|---|--- 2026-03-30 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mickqn34q622...

CVE-2026-5147

creationtimestamp| type| source ---|---|--- 2026-03-30 21:00:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3micklfjq5o2i 2026-03-30 21:21:40+00:00| seen| Telegram/3uob0OgNXCPySF5ZgiHiYbQAvLr6RIUarGC854yFCH2MAgQ...

CVE-2026-29954

creationtimestamp| type| source ---|---|--- 2026-03-30 19:34:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micfswovlq2r...

CVE-2026-30077

creationtimestamp| type| source ---|---|--- 2026-03-30 19:21:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micf2eefta2m...

OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface

Fixed in OpenClaw 2026.3.24, the current shipping release. Title browser.request still allows POST /reset-profile through the operator.write surface in OpenClaw v2026.3.22 after GHSA-vmhq-cqm9-6p7q Severity Assessment High CWE: - CWE-863: Incorrect Authorization Proposed CVSS v3.1: - 8.1...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser.request function on the operator.write surface. An attacker can disrupt browser operations, terminate active browser sessions, and move the local...

CVE-2026-35653

creationtimestamp| type| source ---|---|--- 2026-03-30 19:05:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xp9r-prpg-373r 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-10 19:31:00+00:00|...

CVE-2026-35665

creationtimestamp| type| source ---|---|--- 2026-03-30 18:32:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w6m8-cqvj-pg5v 2026-04-10 18:30:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xduwea22t...

CVE-2026-34526

creationtimestamp| type| source ---|---|--- 2026-03-30 18:20:28+00:00| published-proof-of-concept| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-wm7j-m6jm-8797 2026-03-30 18:20:28+00:00| published-proof-of-concept|...

CVE-2026-21627

creationtimestamp| type| source ---|---|--- 2026-03-30 17:49:10+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mic7vp46v526 2026-03-30 19:49:04+00:00| seen| https://bsky.app/profile/mysites.guru/post/3micgmbotup2x 2026-04-13 19:49:04+00:00| seen|...

CVE-2026-34522

creationtimestamp| type| source ---|---|--- 2026-03-30 17:36:08+00:00| published-proof-of-concept| https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-xvww-xhx6-22pf 2026-04-02 19:26:54+00:00| seen| Telegram/Wnflj9AVRNFcbzmT8RV9QbE39gd8mxBym86BZleqlS4uOZ8 2026-04-03 04:01:11+00:00...

FHIR Validator HTTP service has SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft

Summary The FHIR Validator HTTP service exposes an unauthenticated /loadIG endpoint that makes outbound HTTP requests to attacker-controlled URLs. Combined with a startsWith URL prefix matching flaw in the credential provider ManagedWebAccessUtils.getServer, an attacker can steal authentication...

CVE-2026-3779

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0382/ 2026-03-31 14:45:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3rhqh224 2026-04-01 02:24:41+00:00| seen|...

CVE-2026-25645

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0381/ 2026-03-31 14:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3xyw3g26...

CVE-2026-3991

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0378/ 2026-03-30 19:18:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micevqbsxx27 2026-03-30 20:50:07+00:00| seen|...

CVE-2026-3774

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0382/ 2026-03-31 14:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3rhqh224...

CVE-2026-28526

creationtimestamp| type| source ---|---|--- 2026-03-30 16:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic52zm2uf25...

CVE-2026-5165

creationtimestamp| type| source ---|---|--- 2026-03-30 16:48:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic4j4neq42j...

CVE-2026-30563

creationtimestamp| type| source ---|---|--- 2026-03-30 16:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2d6kslw2s...

CVE-2026-3321

creationtimestamp| type| source ---|---|--- 2026-03-30 15:22:38+00:00| seen| Telegram/rgowYjXIbIqHAY83QR77NdcMiEs7Q8IlbaGHk6-omsHWj8 2026-03-30 16:21:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2zvnwow2q 2026-05-15 00:19:35+00:00| seen|...