CVE-2026-40261

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...

CVE-2026-40261

CVE-2026-40261 affects the PHP package manager Composer. Affected are Composer versions 1.0–2.2.26 and 2.3–2.9.5, where Perforce::syncCodeBase() and Perforce::generateP4Command() construct shell commands by unsafe interpolation of input (sourceReference, source URL) into commands. This enables co...

CVE-2026-40261

Composer is a dependency manager for PHP. Versions 1.0 through 2.2.26 and 2.3 through 2.9.5 contain a command injection vulnerability in the Perforce::syncCodeBase method, which appends the $sourceReference parameter to a shell command without proper escaping, and additionally in the...

CVE-2026-33438

creationtimestamp| type| source ---|---|--- 2026-04-15 20:45:47+00:00| seen| https://bsky.app/profile/bearstech.com/post/3mjkragvitl2o...

CVE-2025-60991

creationtimestamp| type| source ---|---|--- 2026-04-15 19:20:49+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mjkmiin6ad26...

CVE-2026-20152

creationtimestamp| type| source ---|---|--- 2026-04-15 19:17:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkmbzpqxh2o 2026-04-16 17:19:57+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116415528739254723 2026-04-16 18:00:00+00:00| seen|...

CVE-2026-40173

creationtimestamp| type| source ---|---|--- 2026-04-15 19:04:22+00:00| published-proof-of-concept| https://github.com/dgraph-io/dgraph/security/advisories/GHSA-95mq-xwj4-r47p 2026-04-15 22:37:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkxiotu4e2g 2026-04-15 23:27:13+00:00|...

CVE-2026-20136

creationtimestamp| type| source ---|---|--- 2026-04-15 18:35:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjwvn37e2t...

CVE-2026-20081

creationtimestamp| type| source ---|---|--- 2026-04-15 18:33:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjt2moz52a 2026-04-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities20260417...

CVE-2026-6310

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 21:12:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjksqevtfj2z 2026-04-15 23:26:54+00:00|...

CVE-2026-6307

creationtimestamp| type| source ---|---|--- 2026-04-15 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260416 2026-04-15 22:00:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvg6qnoi2w 2026-04-15 23:26:54+00:00|...

CVE-2026-1636

creationtimestamp| type| source ---|---|--- 2026-04-15 15:51:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkastkvv52o...

CVE-2026-1852

creationtimestamp| type| source ---|---|--- 2026-04-15 15:46:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjkajv3ytc2r...

CVE-2026-0636

creationtimestamp| type| source ---|---|--- 2026-04-15 13:40:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjzi73hgl2t...

CVE-2026-3505

creationtimestamp| type| source ---|---|--- 2026-04-15 13:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjywbtahg2a 2026-04-15 15:20:23+00:00| published-proof-of-concept| Telegram/uZRx6HZozAc0thMR3KKbNyvZVgKIzeeLzgWMgVKyfbYH8EA 2026-05-04 04:00:43+00:00| seen|...

CVE-2025-40899

creationtimestamp| type| source ---|---|--- 2026-04-15 13:20:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjyeesk4e2o 2026-04-15 17:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjken4pvfd2a 2026-04-17 17:30:59+00:00| published-proof-of-concept|...

CVE-2026-40744

creationtimestamp| type| source ---|---|--- 2026-04-15 12:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjwtdlpfn2k 2026-04-16 17:20:51+00:00| seen| Telegram/s117pb2GT3VwdfXaV13Oi8Gqr-ePRyI5oBJZVU7ek3MbpQ 2026-04-18 18:00:10+00:00| seen|...

CVE-2026-40778

creationtimestamp| type| source ---|---|--- 2026-04-15 12:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjwkf526i2z...

CVE-2026-40786

creationtimestamp| type| source ---|---|--- 2026-04-15 12:33:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjjvqslckj2g...

CVE-2026-40730

creationtimestamp| type| source ---|---|--- 2026-04-15 12:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjju5ggv4w2z...