CVE-2026-40860

creationtimestamp| type| source ---|---|--- 2026-04-26 19:27:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgbyr3nyr2v 2026-07-06 19:53:52+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyul5kuor2t 2026-07-13 22:00:05+00:00| seen|...

CVE-2026-40022

creationtimestamp| type| source ---|---|--- 2026-04-26 19:11:31+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkgb3zl7js2i 2026-07-16 19:00:20+00:00| seen| Telegram/ZLovNjLGg89Xdb85Ncg0gPVvljsBTAp4HPBtfrCi2Mibg 2026-07-17 01:00:18+00:00| seen|...

CVE-2026-42267

creationtimestamp| type| source ---|---|--- 2026-04-26 18:02:01+00:00| published-proof-of-concept| https://github.com/kimai/kimai/security/advisories/GHSA-3xc2-h5r3-wv3r 2026-05-08 04:38:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcvwai3352o...

CVE-2026-9135

creationtimestamp| type| source ---|---|--- 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsxttik2h 2026-04-26 15:13:52+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkftsw4gzs2h 2026-07-17 19:20:04+00:00| seen|...

CVE-2026-7032

creationtimestamp| type| source ---|---|--- 2026-04-26 12:52:59+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkflx674nw2w 2026-04-29 21:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mknyxj2b4l2p...

CVE-1999-0702

creationtimestamp| type| source ---|---|--- 2026-04-26 12:02:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mkfj4kdwe52u...

CVE-2026-4139

creationtimestamp| type| source ---|---|--- 2026-04-26 00:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkecm5ozla2l...

NPM: OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks

NPM: OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks vulnerability discovered by ? in WordPress Npm openclaw versions 2026.4.20...

GHSA-J4C5-89F5-F3PM OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Browser profile creation normalized cdpUrl values before persisting them, but did not apply the configured browser SSRF policy at creation time. In deployments that explicitly...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the browser profile creation process. An attacker can cause unauthorized requests to internal network resources by storing a profile with a cdpUrl...

OpenClaw: Browser CDP profile creation skipped strict-mode SSRF checks

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact Browser profile creation normalized cdpUrl values before persisting them, but did not apply the configured browser SSRF policy at creation time. In deployments that explicitly...

CVE-2026-4138

creationtimestamp| type| source ---|---|--- 2026-04-25 21:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdykbgp6c2g...

CVE-2026-23541

creationtimestamp| type| source ---|---|--- 2026-04-25 21:03:15+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwukrhzx2t...

CVE-2026-40557

creationtimestamp| type| source ---|---|--- 2026-04-25 19:27:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkdriu7ur62j...

CVE-2026-41081

creationtimestamp| type| source ---|---|--- 2026-04-25 19:22:01+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkdr7v62tj25...

CVE-2026-4280

creationtimestamp| type| source ---|---|--- 2026-04-25 18:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdoigax452s...

CVE-2026-4074

creationtimestamp| type| source ---|---|--- 2026-04-25 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkdl55axg22x...

CVE-2026-6980

creationtimestamp| type| source ---|---|--- 2026-04-25 15:35:34+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mkdekxgybr27...

CVE-2026-5767

creationtimestamp| type| source ---|---|--- 2026-04-25 12:33:05+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkd2eoas5o2l...

CLSA-2026-1777047310 ImageMagick: Fix of 5 CVEs

CVE-2026-33900: fix integer truncation in viff encoder leading to heap out-of-bounds write on 32-bit builds - CVE-2026-33905: fix out-of-bounds read in -sample operation via sample:offset define - CVE-2026-34238: fix integer overflow in despeckle operation causing heap buffer overflow on 32-bit...