CVE-2026-42431 OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypass

OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invokebrowser.proxy that allows mutation of persistent browser profiles. Attackers can exploit this path to circumvent the browser.request persistent profile-mutation guard and modify browser configurations...

CVE-2026-42431

OpenClaw contains a vulnerability where node.invoke(browser.proxy) bypasses the browser.request persistent profile‑mutation guard, enabling mutation of persistent browser profiles. Affected software: OpenClaw npm package, prior to 2026.4.8. Root cause: a security bypass path in node.invoke(browse...

CVE-2026-7324

creationtimestamp| type| source ---|---|--- 2026-04-28 17:29:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl4dvvv432v 2026-04-29 05:55:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4 2026-04-29 12:50:21+00:00| seen|...

CVE-2026-41873

creationtimestamp| type| source ---|---|--- 2026-04-28 17:09:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl3a4a57i2q 2026-04-28 17:18:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkl3ppnk6p2b 2026-05-26 15:13:18+00:00| seen|...

CVE-2026-7288

creationtimestamp| type| source ---|---|--- 2026-04-28 16:47:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzyjfb672r 2026-04-28 16:56:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl2irbp352e 2026-05-28 10:07:15+00:00| seen|...

CVE-2026-7322

creationtimestamp| type| source ---|---|--- 2026-04-28 16:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkztxjzyk2i 2026-04-29 05:55:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4 2026-04-29 12:50:21+00:00| seen|...

CVE-2026-5942

creationtimestamp| type| source ---|---|--- 2026-04-28 16:41:59+00:00| seen| https://bsky.app/profile/netsecio.bsky.social/post/3mkkzoiqhsq2q...

CVE-2026-7323

creationtimestamp| type| source ---|---|--- 2026-04-28 16:40:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzly6cl42k 2026-04-29 05:55:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4 2026-04-29 12:50:21+00:00| seen|...

CVE-2026-27760

creationtimestamp| type| source ---|---|--- 2026-04-28 16:34:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkzbukgyd2p 2026-06-17 09:12:42+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-27760.yaml 2026-09-08...

CVE-2026-5779

An insecure direct object reference IDOR vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the information of other registered users. Successful exploitation of this vulnerability allows an...

CVE-2026-7240

creationtimestamp| type| source ---|---|--- 2026-04-28 08:54:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkk7k4w43m2c...

CVE-2026-31633

creationtimestamp| type| source ---|---|--- 2026-04-28 07:00:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjz5smv2v2n...

CVE-2026-40556

creationtimestamp| type| source ---|---|--- 2026-04-28 06:20:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-40556 2026-04-28 16:50:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl25fsldf2o...

CVE-2026-31663

creationtimestamp| type| source ---|---|--- 2026-04-28 03:10:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjm7lzm2m2n 2026-07-01 02:35:25+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630...

CVE-2026-7202

creationtimestamp| type| source ---|---|--- 2026-04-28 01:43:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhicp2472z 2026-04-28 02:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjijf2sb72s 2026-04-28 05:00:31+00:00| seen|...

CVE-2026-41605

creationtimestamp| type| source ---|---|--- 2026-04-28 01:42:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjhgmbnzi2m 2026-04-28 15:10:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkulfbutb2h...

CVE-2026-41602

creationtimestamp| type| source ---|---|--- 2026-04-28 01:32:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjgupglju25 2026-04-28 15:16:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkuudpgnt2t 2026-08-27 11:48:03+00:00| seen|...

CVE-2026-41371

creationtimestamp| type| source ---|---|--- 2026-04-28 01:00:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjf2ju4mr26 2026-09-07 13:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muwl7sn4nq24...

CVE-2026-41607

creationtimestamp| type| source ---|---|--- 2026-04-28 00:57:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkjew3nner25 2026-04-28 15:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkkv5c57dx2t...

PT-2026-35809

OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invokebrowser.proxy that allows mutation of persistent browser profiles. Attackers can exploit this path to circumvent the browser.request persistent profile-mutation guard and modify browser configurations...