CVE-2026-33894

creationtimestamp| type| source ---|---|--- 2026-03-26 22:02:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-ppp5-5v6c-4jwp 2026-03-27 21:39:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi33fsgfdk2j 2026-03-27 23:27:55+00:00| seen|...

CVE-2026-32501

creationtimestamp| type| source ---|---|--- 2026-03-26 21:36:00+00:00| seen| Telegram/ZlwyyZCGobz0DL3VkciBBst8GvSl0UBVZV3ZV9Oa2yUbLdM 2026-04-07 15:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miw3uo5ff72c...

CVE-2026-32485

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:36+00:00| seen| Telegram/jNlDBTackbRa-OzLBD4eltRa4dE7lS0-uVg4cHfoz-Hg 2026-04-07 05:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miv2dr5xbv2w...

CVE-2026-31921

creationtimestamp| type| source ---|---|--- 2026-03-26 21:35:15+00:00| seen| Telegram/zW9IZrd6TGtn6tlC-J0V1NpAAnhFTvKo2N1YPzc1YC33cco 2026-03-26 21:35:36+00:00| seen| Telegram/jNlDBTackbRa-OzLBD4eltRa4dE7lS0-uVg4cHfoz-Hg 2026-04-08 01:30:07+00:00| seen|...

CVE-2026-25317

creationtimestamp| type| source ---|---|--- 2026-03-26 21:34:32+00:00| seen| Telegram/jvhOKmzqiPeYBdBxVFESt3SUAdqySxNGUXLiFxkgoqjLWk 2026-04-09 08:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj2fdhm5md2e...

CVE-2026-23977

creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:43+00:00| published-proof-of-concept| Telegram/fY4No4paH3d0dcxL7eHJzi9nTjzGU82ddBovSTYQV2kvbQ 2026-04-10 01:30:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj46dfqtn32u...

CVE-2026-33148

creationtimestamp| type| source ---|---|--- 2026-03-26 20:49:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyi4fsfsn2o...

CVE-2026-33622 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate...

CVE-2026-33622

PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate...

GO-2026-4713 File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely in github.com/filebrowser/filebrowser

File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely in github.com/filebrowser/filebrowser...

CVE-2026-3121

creationtimestamp| type| source ---|---|--- 2026-03-26 20:12:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfzxxcfd2d...

CVE-2026-33149

creationtimestamp| type| source ---|---|--- 2026-03-26 20:09:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfvikwi32i 2026-03-26 21:36:40+00:00| seen| Telegram/gdbQBvnuOgX0zlyJL9kfjxoCoTp9WBTGn5-zeTA4spKkwcA 2026-03-26 22:00:46+00:00| seen|...

CVE-2026-2436

creationtimestamp| type| source ---|---|--- 2026-03-26 20:05:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyfnja7ff24...

CVE-2026-26213

thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter...

CVE-2026-33632

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33632 2026-03-26 20:29:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhygylyn442s 2026-03-26 21:36:49+00:00| seen|...

CVE-2026-33525

creationtimestamp| type| source ---|---|--- 2026-03-26 19:16:14+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-33525 2026-03-26 19:54:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhyf2uyiqb2j...

CVE-2026-33496

creationtimestamp| type| source ---|---|--- 2026-03-26 19:14:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhycs6ngy62j 2026-03-26 19:26:19+00:00| published-proof-of-concept| Telegram/Dv-WNIQSBfenZP-L8llbvWNomtb7L7cuRFseuDShUkzpu6g 2026-03-26 22:01:22+00:00| seen|...

CVE-2026-3108

creationtimestamp| type| source ---|---|--- 2026-03-26 19:09:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhycja6nam2t 2026-03-26 22:16:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhymxiazgq2d 2026-03-30 23:20:09+00:00| seen|...

CVE-2026-3098

creationtimestamp| type| source ---|---|--- 2026-03-26 19:05:09+00:00| seen| https://bsky.app/profile/mysites.guru/post/3mhycc3upol2b 2026-03-27 03:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3098 2026-03-29 19:00:26+00:00| seen|...

CVE-2026-26213 thingino-firmware api.cgi Unauthenticated Command Injection in Captive Portal

thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter...