CVE-2026-41431

creationtimestamp| type| source ---|---|--- 2026-05-11 18:24:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvi2f77q2g 2026-05-11 18:24:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvi2f77q2g 2026-05-11 18:25:04+00:00| seen|...

CVE-2026-43639

creationtimestamp| type| source ---|---|--- 2026-05-11 18:24:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvhlnan72e...

CVE-2026-44413

creationtimestamp| type| source ---|---|--- 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-11 18:22:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllvdvujox2l 2026-05-12 12:31:51+00:00| seen|...

CVE-2026-43640

creationtimestamp| type| source ---|---|--- 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-11 18:17:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllv3ug34r2k 2026-05-16 18:07:08+00:00| seen|...

CVE-2026-45000

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...

GHSA-68W5-W573-Q2R8 MantisBT Has Authorization Bypass in Global Profile Creation

MantisBT allows a low-privileged authenticated user having addprofilethreshold to create a global profile despite not having manageglobalprofilethreshold, by tampering with the userid parameter in a valid profile creation request. Impact Authentication bypass Patches -...

MantisBT Has Authorization Bypass in Global Profile Creation

MantisBT allows a low-privileged authenticated user having addprofilethreshold to create a global profile despite not having manageglobalprofilethreshold, by tampering with the userid parameter in a valid profile creation request. Impact Authentication bypass Patches -...

Authorization Bypass Through User-Controlled Key

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the userid parameter during the profile creation process. An attacker can gain unauthorized access to create global profiles by tampering wit...

CVE-2026-7210

creationtimestamp| type| source ---|---|--- 2026-05-11 17:56:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mlltwjtgei2s 2026-05-11 19:35:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mllzgb52dt2n 2026-05-11 19:35:14+00:00| seen|...

CVE-2026-33359

creationtimestamp| type| source ---|---|--- 2026-05-11 17:39:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllsx6dccq2t...

CVE-2026-43437

creationtimestamp| type| source ---|---|--- 2026-05-11 17:08:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllr6chqak2w 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-45000 OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...

CVE-2026-45000

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...

CVE-2026-45000 OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...

CVE-2026-45000

OpenClaw before 2026.4.20 is affected by a server-side request forgery in the browser CDP profile creation flow. The vulnerability allows creation of stored profiles that can point to private-network or metadata endpoints and bypass strict-mode SSRF policy checks, with the sensitive endpoints pot...

CVE-2026-45000 OpenClaw < 2026.4.20 - Server-Side Request Forgery via Browser CDP Profile Creation

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing to private-network or metadata endpoints that bypass security policies and are later probed durin...

EUVD-2026-29052

A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smfnsmfhandleupdatedatainvsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation of the argument qosFlowProfile leads to denial of service. Remote exploitation of the attack is...

CVE-2026-44774

creationtimestamp| type| source ---|---|--- 2026-05-11 15:10:49+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-96qj-4jj5-wcjc 2026-05-12 23:15:01+00:00| seen| https://bsky.app/profile/dbt3.ch/post/3mlow66ezsf2e...

CVE-2026-4802

creationtimestamp| type| source ---|---|--- 2026-05-11 14:50:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlljizydxu2p 2026-05-11 15:00:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllk2366jn2n 2026-05-20 19:48:54+00:00| seen|...

CVE-2026-8289

A vulnerability was identified in Open5GS up to 2.7.7. This vulnerability affects the function smfnsmfhandleupdatedatainvsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulation of the argument qosFlowProfile leads to denial of service. Remote exploitation of the attack is...