CVE-2026-42259

Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes \ to forward...

CVE-2026-42011

creationtimestamp| type| source ---|---|--- 2026-05-07 18:27:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbtqne62b2r...

CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

EUVD-2026-28406

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

CVE-2026-36458

creationtimestamp| type| source ---|---|--- 2026-05-07 17:38:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbr2jyjvb2k...

CVE-2025-67202

creationtimestamp| type| source ---|---|--- 2026-05-07 17:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbquckepu2p...

CVE-2026-8093

creationtimestamp| type| source ---|---|--- 2026-05-07 17:10:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbph22zky2z 2026-05-11 07:46:10+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-5 2026-05-11 12:05:22+00:00| seen|...

CVE-2026-41688

creationtimestamp| type| source ---|---|--- 2026-05-07 17:06:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpafknnf2t 2026-05-07 18:06:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbsmrbmxi2c...

CVE-2026-40108

creationtimestamp| type| source ---|---|--- 2026-05-07 16:00:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlblk4t3e52k 2026-06-02 13:45:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4nolce2y 2026-06-03 01:30:27+00:00| seen|...

CVE-2026-20169

creationtimestamp| type| source ---|---|--- 2026-05-07 14:40:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k 2026-06-29 18:17:59+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3xawdan2d...

CVE-2026-6508

creationtimestamp| type| source ---|---|--- 2026-05-07 14:17:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbfsmvfu32i 2026-05-07 21:06:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc4o5tfjp2f 2026-05-20 13:02:40+00:00| seen|...

CVE-2026-32686

creationtimestamp| type| source ---|---|--- 2026-05-07 14:02:14+00:00| published-proof-of-concept| https://github.com/ericmj/decimal/security/advisories/GHSA-rhv4-8758-jx7v 2026-05-07 17:58:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbs6ebsmr2r 2026-05-12 15:40:29+00:00|...

CVE-2026-33588

creationtimestamp| type| source ---|---|--- 2026-05-07 14:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbetkupxr2h 2026-05-07 21:07:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc4p4pvk226...

CVE-2026-7415

creationtimestamp| type| source ---|---|--- 2026-05-07 14:00:00+00:00| seen| http://takeonme.org/cves/cve-2026-7413/ 2026-05-07 14:00:00+00:00| seen| http://takeonme.org/cves/cve-2026-7414/ 2026-05-07 14:00:00+00:00| seen| http://takeonme.org/cves/cve-2026-7415/ 2026-05-07 17:18:12+00:00| seen|...

CVE-2026-7414

creationtimestamp| type| source ---|---|--- 2026-05-07 14:00:00+00:00| seen| http://takeonme.org/cves/cve-2026-7413/ 2026-05-07 14:00:00+00:00| seen| http://takeonme.org/cves/cve-2026-7414/ 2026-05-07 14:00:00+00:00| seen| http://takeonme.org/cves/cve-2026-7415/ 2026-05-07 17:18:05+00:00| seen|...

CVE-2026-28201

creationtimestamp| type| source ---|---|--- 2026-05-07 13:57:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbep2vyur2i 2026-05-07 21:07:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlc4pev2sm2w...

CVE-2026-44407

creationtimestamp| type| source ---|---|--- 2026-05-07 13:49:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbe7yrvv62v...

CVE-2025-9661

creationtimestamp| type| source ---|---|--- 2026-05-07 10:23:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlayppxeh32e 2026-05-07 23:59:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcgdwdsu52z 2026-05-08 18:37:07+00:00| seen|...