CVE-2026-35242

creationtimestamp| type| source ---|---|--- 2026-04-21 22:03:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzyf4mwzi2z 2026-04-21 23:30:11+00:00| seen| Telegram/14RDzCjaAGLQIuKBJtHoIYde60oDRnqUnuM1SZUlRS4U4fg 2026-04-22 12:50:28+00:00| seen|...

CVE-2026-35251

creationtimestamp| type| source ---|---|--- 2026-04-21 22:03:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzyevy2gx2g 2026-04-21 23:30:36+00:00| published-proof-of-concept| Telegram/ITN0hTjNGfPMK-REHkV5qJBsGo4t4-tf1bJT5aod5DHh0UQ 2026-04-22 12:50:29+00:00| seen|...

CVE-2026-40906

creationtimestamp| type| source ---|---|--- 2026-04-21 22:02:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzycgjow32e 2026-04-21 22:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjzz2zz5lr2c 2026-04-21 23:30:36+00:00| published-proof-of-concept|...

CVE-2026-6823

creationtimestamp| type| source ---|---|--- 2026-04-21 22:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjzy7l4kg62k 2026-04-21 22:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk23hxdyzw2i 2026-04-21 23:08:52+00:00| seen|...

CVE-2026-6830

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

CVE-2026-6830 Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

CVE-2026-6830

The CVE concerns nesquena Hermes WebUI, where switching profiles fails to clear environment variables from the previous profile, enabling leakage of sensitive credentials (e.g., provider API keys) between profiles. The underlying issue is residual environment variables that persist across profile...

CVE-2026-6830 Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

CVE-2026-6830 Nesquena Hermes WebUI Environment Variable Credential Leakage via Profile Switch

nesquena hermes-webui contains an environment variable leakage vulnerability where profile switching does not clear environment variables from the previously active profile before loading the next profile. Attackers or users can exploit additive dotenv reload behavior to access provider API keys...

EUVD-2026-24358

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Job Profile Manager. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-34280

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Job Profile Manager. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-34280

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Job Profile Manager. The supported version that is affected is 9.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-6769

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-21 23:29:27+00:00| seen| Telegram/da4bvWuFIBZ1xbJCq39UTLrDihlERi1UO8pjihG32T1Z-BM 2026-04-22 02:01:24+00:00| seen|...

CVE-2026-6765

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 02:01:23+00:00| seen| https://bsky.app/profile/slackers.it/post/3mk2focmgie2i 2026-08-18 01:00:04+00:00|...

CVE-2026-6747

creationtimestamp| type| source ---|---|--- 2026-04-21 19:24:58+00:00| seen| Telegram/UoNmOvyrT0xD6ttUxw0GWEmNWGrIstm3XawCByymdxwMbjs 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 02:01:18+00:00| seen|...

CVE-2026-6776

creationtimestamp| type| source ---|---|--- 2026-04-21 17:18:10+00:00| seen| Telegram/GomAqAKioRw5ORwyc6ugTkWhk08fHowYPUM-Q49l2oeUgi0 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 02:01:24+00:00| seen|...

CVE-2026-40589

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by a hidden customer in another mailbox. The server discloses the hidden customer’s name and profile URL in the success...

EUVD-2026-24184

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by a hidden customer in another mailbox. The server discloses the hidden customer’s name and profile URL in the success...

CVE-2026-40589 FreeScout has Customer Edit Cross-Mailbox Email Takeover

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by a hidden customer in another mailbox. The server discloses the hidden customer’s name and profile URL in the success...

CVE-2026-40589

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.214, a low-privileged agent can edit a visible customer and add an email address already owned by a hidden customer in another mailbox. The server discloses the hidden customer’s name and profile URL in the success...