CVE-2026-22561

CVE-2026-22561 concerns Anthropic Claude for Windows installer (Claude Setup.exe). The vulnerability arises from Uncontrolled search path elements, where the installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling local privilege escalation via DLL search-ord...

CVE-2026-34954

creationtimestamp| type| source ---|---|--- 2026-03-31 15:25:42+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-44c2-3rw4-5gvh 2026-03-31 15:25:42+00:00| published-proof-of-concept|...

CVE-2026-33578

creationtimestamp| type| source ---|---|--- 2026-03-31 15:11:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miehlfktak27 2026-03-31 17:24:40+00:00| published-proof-of-concept| Telegram/Ig1ee0N1HBlXVPi52hAEKt2Zoza8gFtrDIgi8zasU7Bxz8 2026-03-31 17:24:58+00:00| seen|...

CVE-2026-3139

creationtimestamp| type| source ---|---|--- 2026-03-31 13:33:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miec4236ft2d 2026-04-01 18:45:04+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mihdxqcpqd2e...

CVE-2026-4399

creationtimestamp| type| source ---|---|--- 2026-03-31 13:18:57+00:00| seen| Telegram/JITBwt8Dx-6YeOa4-kB3D3uVT5le84WfrafpIhKwvPhvSA 2026-03-31 14:45:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mieg467si52j...

EUVD-2026-17365

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppbsaveavatarvalue function due to missing validation on a user controlled key...

CVE-2026-32916

creationtimestamp| type| source ---|---|--- 2026-03-31 12:29:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mie6ige7hm2p 2026-03-31 13:19:01+00:00| seen| Telegram/jSTFa01DEWFRhQKHtf4fP3tqxxyDE1Jfuh4yALHVDvczs38 2026-03-31 13:37:29+00:00| seen|...

CVE-2026-3139

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppbsaveavatarvalue function due to missing validation on a user controlled key...

CVE-2026-33672

creationtimestamp| type| source ---|---|--- 2026-03-31 12:00:57+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mie4w6kz7j2a...

CVE-2026-3139 User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppbsaveavatarvalue function due to missing validation on a user controlled key...

CVE-2026-3139 User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.15.5 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Post Author Reassignment via Avatar Field

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppbsaveavatarvalue function due to missing validation on a user controlled key...

CVE-2026-3139

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.15.5 via the wppbsaveavatarvalue function due to missing validation on a user controlled key...

CVE-2026-4317

creationtimestamp| type| source ---|---|--- 2026-03-31 10:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3midxuhnjb42i 2026-03-31 10:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midzgvh7s62o 2026-03-31 11:17:48+00:00| seen|...

CVE-2026-3881

creationtimestamp| type| source ---|---|--- 2026-03-31 09:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midvvg7m372j...

CVE-2026-5178

creationtimestamp| type| source ---|---|--- 2026-03-31 07:20:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midnaenxax27...

CVE-2026-5182

creationtimestamp| type| source ---|---|--- 2026-03-31 07:15:33+00:00| published-proof-of-concept| Telegram/1iWaApiUM0jOADSkCxbAhXY3iS1qKmB0s9RsJgnPCTY34SA 2026-03-31 10:27:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midxpf45p327...

CVE-2026-5179

creationtimestamp| type| source ---|---|--- 2026-03-31 07:15:33+00:00| published-proof-of-concept| Telegram/1iWaApiUM0jOADSkCxbAhXY3iS1qKmB0s9RsJgnPCTY34SA 2026-03-31 07:30:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3midnsbjtwx2q...

CVE-2026-34054

creationtimestamp| type| source ---|---|--- 2026-03-31 04:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3midc3x3gyw2p 2026-03-31 05:17:42+00:00| seen| Telegram/62pZ0M7EEU9QzqUpq3hJFXhFPR-ebrkyPJ1cBwC7xQpoTU0...

PT-2026-29383

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow HBO in CIccMpeSpectralMatrix::Describe. The issue is observable under AddressSanitizer as an out-of-bounds heap read when...

PT-2026-29384

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger a segmentation fault SEGV in CIccTagArray::Cleanup. The issue is observable under UBSan/ASan as misaligned member access / misaligned pointer...