CVE-2026-35639

creationtimestamp| type| source ---|---|--- 2026-04-09 22:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3tqrmla32o 2026-04-09 23:30:34+00:00| seen| Telegram/G3Fi-nNLRGY8ZLcJORLcPgOLisPY2kSgZDawKJf-COsCMo 2026-04-10 07:11:26+00:00| seen|...

CVE-2026-29146

creationtimestamp| type| source ---|---|--- 2026-04-09 21:01:14+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mj3pckzmjc2j 2026-04-09 22:48:44+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj3vcs73fa25 2026-04-09 23:23:44+00:00| seen|...

CVE-2026-39942

creationtimestamp| type| source ---|---|--- 2026-04-09 19:22:33+00:00| seen| Telegram/HFSRmPQIuJm0mhlgKTjgnUZc9IKWtHrGIbUWbiDZawdQwcQ 2026-04-09 20:04:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3m5nlceo2i 2026-04-12 11:00:16+00:00| seen|...

OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard

Impact OpenClaw node.invokebrowser.proxy bypasses browser.request persistent profile-mutation guard. node.invokebrowser.proxy could mutate persistent browser profiles through a path that bypassed the browser.request guard. OpenClaw is a user-controlled local assistant. This advisory is scoped to...

GHSA-CMFR-9M2R-XWHQ OpenClaw `node.invoke(browser.proxy)` bypasses `browser.request` persistent profile-mutation guard

Impact OpenClaw node.invokebrowser.proxy bypasses browser.request persistent profile-mutation guard. node.invokebrowser.proxy could mutate persistent browser profiles through a path that bypassed the browser.request guard. OpenClaw is a user-controlled local assistant. This advisory is scoped to...

Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the node.invoke process. An attacker can alter persistent browser profiles by invoking browser.proxy to bypass the intended profile-mutation guard. Remediation...

CVE-2026-5850

creationtimestamp| type| source ---|---|--- 2026-04-09 06:38:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj273dzwsg27 2026-04-09 07:02:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj2agpebym2s 2026-04-09 07:17:34+00:00| published-proof-of-concept|...

CVE-2026-1830

creationtimestamp| type| source ---|---|--- 2026-04-08 20:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1830 2026-04-09 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mizxwyinu42y 2026-04-09 04:30:30+00:00| seen|...

OpenClaw has an unspecified vulnerability (CNVD-2026-16694)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to cause an authenticated operator with only operator.write privileges to access the administrator-specific browser profile management rout...

CVE-2026-25776

creationtimestamp| type| source ---|---|--- 2026-04-07 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN66473735/ 2026-04-08 10:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mixzvm5wfr2x 2026-04-08 10:00:29+00:00| seen|...

CVE-2026-5373

creationtimestamp| type| source ---|---|--- 2026-04-07 15:21:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miw3fhd5xt24 2026-04-07 15:26:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miw3nygswh2w 2026-04-07 17:29:14+00:00| published-proof-of-concept|...

CVE-2026-34896

creationtimestamp| type| source ---|---|--- 2026-04-07 10:10:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mivjymbw6f2s 2026-04-07 10:30:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mivl4qvjwe2n 2026-04-07 13:55:24+00:00| seen|...

CVE-2025-65115

creationtimestamp| type| source ---|---|--- 2026-04-07 06:17:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv4ydiw5t2w 2026-04-07 06:25:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miv5gbsvfj27 2026-04-07 07:09:46+00:00| seen|...

PT-2026-30942

ChurchCRM is an open-source church management system. Prior to 7.0.0, a stored cross-site scripting XSS vulnerability exists in ChurchCRM within the Person Property Management subsystem. This issue persists in versions patched for CVE-2023-38766 and allows an authenticated user to inject arbitrar...

CVE-2026-35171

creationtimestamp| type| source ---|---|--- 2026-04-06 18:24:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv4ynlvh2d 2026-04-06 18:24:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv5qkfjp2d 2026-04-06 19:29:44+00:00| seen|...

CVE-2026-35209

creationtimestamp| type| source ---|---|--- 2026-04-06 18:09:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitud4tgjt2o 2026-04-06 18:23:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitv4jr7ms2t 2026-04-06 18:24:21+00:00| seen|...

CVE-2026-34783

Ferret is a declarative system for working with web data. Prior to 2.0.0-alpha.4, a path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows a malicious website to write arbitrary files to the filesystem of the machine running Ferret. When an operator scrapes a...

CVE-2026-30078

creationtimestamp| type| source ---|---|--- 2026-04-06 15:42:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitm3hpfvn27 2026-04-06 15:43:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitm4smwze27 2026-04-06 15:44:42+00:00| seen|...

CVE-2026-25197

A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call...

CVE-2026-5613

creationtimestamp| type| source ---|---|--- 2026-04-06 04:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3misevyk2yb2d 2026-04-06 04:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3misewmkiiw2r 2026-04-06 05:16:26+00:00|...