Fleet's Apple MDM profile delivery has second-order SQL Injection that can compromise the database

Summary A critical second-order SQL Injection vulnerability in Fleet's Apple MDM profile delivery pipeline could allow an attacker with a valid MDM enrollment certificate to exfiltrate or modify the contents of the Fleet database, including user credentials, API tokens, and device enrollment...

GHSA-XP9R-PRPG-373R OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface

Fixed in OpenClaw 2026.3.24, the current shipping release. Title browser.request still allows POST /reset-profile through the operator.write surface in OpenClaw v2026.3.22 after GHSA-vmhq-cqm9-6p7q Severity Assessment High CWE: - CWE-863: Incorrect Authorization Proposed CVSS v3.1: - 8.1...

OpenClaw: `browser.request` still allows `POST /reset-profile` through the `operator.write` surface

Fixed in OpenClaw 2026.3.24, the current shipping release. Title browser.request still allows POST /reset-profile through the operator.write surface in OpenClaw v2026.3.22 after GHSA-vmhq-cqm9-6p7q Severity Assessment High CWE: - CWE-863: Incorrect Authorization Proposed CVSS v3.1: - 8.1...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser.request function on the operator.write surface. An attacker can disrupt browser operations, terminate active browser sessions, and move the local...

CVE-2026-35653

creationtimestamp| type| source ---|---|--- 2026-03-30 19:05:11+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xp9r-prpg-373r 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-10 19:31:00+00:00|...

CVE-2026-32287

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mic563sy6k2h 2026-03-30 17:22:57+00:00| seen| Telegram/hICGoMiiTAfNGiGPS6kLuEIjx0Cnqs2qprpkS-tW4S4edfo...

CVE-2025-67030

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0381/ 2026-03-31 14:45:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3xyw3g26...

CVE-2026-3991

creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0378/ 2026-03-30 19:18:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3micevqbsxx27 2026-03-30 20:50:07+00:00| seen|...

CVE-2026-28526

creationtimestamp| type| source ---|---|--- 2026-03-30 16:58:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic52zm2uf25...

CVE-2026-30565

creationtimestamp| type| source ---|---|--- 2026-03-30 16:29:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic3glnady2i...

CVE-2026-33373

creationtimestamp| type| source ---|---|--- 2026-03-30 16:11:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2gzibtu2j...

CVE-2026-30563

creationtimestamp| type| source ---|---|--- 2026-03-30 16:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic2d6kslw2s...

CVE-2026-4315

creationtimestamp| type| source ---|---|--- 2026-03-30 15:22:38+00:00| seen| Telegram/rgowYjXIbIqHAY83QR77NdcMiEs7Q8IlbaGHk6-omsHWj8 2026-03-30 16:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mic37ups7t2i...

CVE-2026-28528 BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Browsing Target GETFOLDERITEMS handler that fails to validate packet boundaries and attribute count data. An attacker with a paired Bluetooth Classic connection can exploit insufficient bounds...

CVE-2026-34737

creationtimestamp| type| source ---|---|--- 2026-03-30 13:45:12+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-38rh-4v39-vfxv 2026-03-31 22:28:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mif7ywarnq2d...

CVE-2018-25233

creationtimestamp| type| source ---|---|--- 2026-03-30 12:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibp4a6e4b2j...

CVE-2018-25234

creationtimestamp| type| source ---|---|--- 2026-03-30 12:42:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miborhjida2i...

CVE-2018-25228

creationtimestamp| type| source ---|---|--- 2026-03-30 12:37:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miboij2qfb2o...

CVE-2019-25655

creationtimestamp| type| source ---|---|--- 2026-03-30 12:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibn4vc22e2z...

CVE-2026-5121

creationtimestamp| type| source ---|---|--- 2026-03-30 12:00:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mibmfwrwoo22 2026-03-31 17:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mienofpx762r 2026-03-31 17:24:25+00:00| published-proof-of-concept|...