CVE-2026-2436

creationtimestamp| type| source ---|---|--- 2026-03-26 20:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfnja7ff24...

CVE-2026-26213

thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter...

CVE-2026-33632

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33632 2026-03-26 20:29:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhygylyn442s 2026-03-26 21:36:49+00:00| seen|...

CVE-2026-33525

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33525 2026-03-26 19:54:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyf2uyiqb2j...

CVE-2026-33496

creationtimestamp| type| source ---|---|--- 2026-03-26 19:14:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhycs6ngy62j 2026-03-26 19:26:19+00:00| published-proof-of-concept| Telegram/Dv-WNIQSBfenZP-L8llbvWNomtb7L7cuRFseuDShUkzpu6g 2026-03-26 22:01:22+00:00| seen|...

CVE-2026-3108

creationtimestamp| type| source ---|---|--- 2026-03-26 19:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhycja6nam2t 2026-03-26 22:16:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhymxiazgq2d 2026-03-30 23:20:09+00:00| seen|...

CVE-2026-3098

creationtimestamp| type| source ---|---|--- 2026-03-26 19:05:09+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mhycc3upol2b 2026-03-27 03:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3098 2026-03-29 19:00:26+00:00| seen|...

CVE-2026-26213 thingino-firmware api.cgi Unauthenticated Command Injection in Captive Portal

thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter...

CVE-2026-26213

The CVE-2026-26213 issue affects thingino-firmware up to firmware-2026-03-16, where an unauthenticated OS command injection exists in the WiFi captive portal CGI script. An attacker can inject malicious code through unsanitized HTTP parameter names, exploiting eval in parse_query() and parse_post...

CVE-2026-32846

creationtimestamp| type| source ---|---|--- 2026-03-26 18:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyboazvuk22 2026-03-27 03:00:05+00:00| seen| https://github.com/openclaw/openclaw/commit/4797bbc5b96e2cca5532e43b58915c051746fe37...

CVE-2026-33009

creationtimestamp| type| source ---|---|--- 2026-03-26 18:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyb5mpmwy2d 2026-03-26 22:22:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhyndnlegi2d...

EUVD-2026-16275

Firecrawl version 2.8.0 and prior contain a server-side request forgery SSRF protection bypass vulnerability in the Playwright scraping service where network policy validation is applied only to the initial user-supplied URL and not to subsequent redirect destinations. Attackers can supply an...

GHSA-3439-VQGJ-2GCF Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences

Mattermost versions 11.2.x = 11.2.2, 10.11.x = 10.11.10, 11.4.x = 11.4.0, 11.3.x = 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences...

Mattermost allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences

Mattermost versions 11.2.x = 11.2.2, 10.11.x = 10.11.10, 11.4.x = 11.4.0, 11.3.x = 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences...

CVE-2026-26008

creationtimestamp| type| source ---|---|--- 2026-03-26 17:37:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy5fsn5in25 2026-03-26 23:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhypickeh22s 2026-03-31 15:40:09+00:00| seen|...

CVE-2026-26071

creationtimestamp| type| source ---|---|--- 2026-03-26 17:32:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy54u7dy727...

CVE-2026-32857

Firecrawl versions 2.8.0 and earlier contain a server-side request forgery (SSRF) protection bypass in the Playwright scraping service. The issue arises because network policy validation is applied only to the initial user-supplied URL and not to subsequent redirected destinations, enabling an ex...

CVE-2026-29934

creationtimestamp| type| source ---|---|--- 2026-03-26 17:24:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy4ohoqaj2d...

CVE-2026-22790

creationtimestamp| type| source ---|---|--- 2026-03-26 17:18:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy4d4jkjt22 2026-03-26 23:01:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhypijukn62h 2026-03-31 15:00:14+00:00| seen|...

CVE-2026-25001

Improper Control of Generation of Code 'Code Injection' vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post Snippets: from n/a through = 4.0.12...