CVE-2026-1995

creationtimestamp| type| source ---|---|--- 2026-03-27 12:55:52+00:00| seen| https://bsky.app/profile/oxfemale.bsky.social/post/3mi264ootpj22 2026-03-29 05:15:56+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mi6fe3r6es2g...

CVE-2026-0394

creationtimestamp| type| source ---|---|--- 2026-03-27 12:13:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi23qsvkva2g...

CVE-2023-7339

creationtimestamp| type| source ---|---|--- 2026-03-27 12:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi23b6ijjr24...

WordPress Blog2Social: Social Media Auto Post & Scheduler plugin <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Meta Deletion via 'b2sresetsocialmetatags' AJAX Action vulnerability discovered by s00me00ne in WordPress Plugin Blog2Social versions = 8.8.2...

CVE-2026-3457

creationtimestamp| type| source ---|---|--- 2026-03-27 11:16:46+00:00| seen| Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60 2026-03-27 12:42:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi25ffwdni2q...

OESA-2026-1737 freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI...

CVE-2026-25100

creationtimestamp| type| source ---|---|--- 2026-03-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-25099/ 2026-03-27 16:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2j2byy2o2q...

CVE-2026-25099

creationtimestamp| type| source ---|---|--- 2026-03-27 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-25099/ 2026-03-27 12:53:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi25z4fuux2i 2026-03-27 15:17:14+00:00| seen|...

CVE-2025-59032

creationtimestamp| type| source ---|---|--- 2026-03-27 09:51:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhzts74hux2g 2026-03-27 11:16:46+00:00| seen| Telegram/hnc41FvgR2VyITu4BVl6HabBwFPEZ-H6ltaZ3k0o3hEQc60 2026-03-27 12:37:50+00:00| seen|...

CVE-2026-29955

creationtimestamp| type| source ---|---|--- 2026-03-27 09:00:13+00:00| published-proof-of-concept| Telegram/8LISbnUQFWA86ak3ubyaCZMxs8RQbiaZ8ONexaBDd7tfzQU 2026-04-13 20:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjfp2mok6g2g...

CVE-2024-14028

creationtimestamp| type| source ---|---|--- 2026-03-27 08:11:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhzoatwa4522...

BIT-DISCOURSE-2026-33408 Discourse has Improper Authorization in "Post Edits" Report For Moderators

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, moderators were able to see the first 40 characters of post edits in PMs and private categories. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No known workarounds are available...

BIT-DISCOURSE-2026-33394 Discourse leaks PM post edits to moderators

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, the Post Edits admin report /admin/reports/postedits leaked the first 40 characters of raw post content from private messages and secure categories to moderators who shouldn't have access. Version...

BIT-DISCOURSE-2026-33355 Discourse filters whisper posts from private-posts feed

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, the /private-posts endpoint did not apply post-type visibility filtering, allowing regular PM participants to see whisper posts in PM topics they had access to. Versions 2026.3.0, 2026.2.1, and...

BIT-DISCOURSE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing postid as an...

BIT-DISCOURSE-2026-30888 Discourse has moderator privilege escalation via arbitrary post_id in suspend/silence endpoint

Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 allow a moderator to edit site policy documents ToS, guidelines, privacy policy that they are explicitly prohibited from modifying. Versions 2026.3.0, 2026.2.1, and 2026.1.2 contain a patch. No kno...

BIT-DISCOURSE-2026-27491 Discourse has a bypass of official warnings messages by non-staff users

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, a type coercion issue in a post actions API endpoint allowed non-staff users to issue warnings to other users. Warnings are a staff-only moderation feature. The vulnerability required the attacker...

BIT-DISCOURSE-2026-27454 Discourse has check revision visibility on posts endpoint

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, requesting /posts/:id.json?version=X bypassed authorization checks on post revisions. The displaypost method called post.revertto directly without verifying whether the revision was hidden or if t...

CVE-2026-33910

creationtimestamp| type| source ---|---|--- 2026-03-27 04:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhza6vqtih2r...

CVE-2026-4910

creationtimestamp| type| source ---|---|--- 2026-03-27 03:16:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4910 2026-03-27 05:15:30+00:00| published-proof-of-concept| Telegram/8aZpBgfObgmmQRKj5IyYoJHoHXYw9up8SwQpMMsDKs2WlD0 2026-03-27 08:56:31+00:00|...