CVE-2026-45369

creationtimestamp| type| source ---|---|--- 2026-05-10 11:59:32+00:00| published-proof-of-concept| https://github.com/universal-tool-calling-protocol/python-utcp/security/advisories/GHSA-33p6-5jxp-p3x4 2026-05-14 22:10:29+00:00| seen| https://gist.github.com/alon710/b6fd947590993b5b0ed338c431321c...

CVE-2026-42562

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dtx2v42n 2026-05-09 21:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6fd7nxr2k 2026-06-05 14:49:28+00:00| seen|...

CVE-2026-42575

creationtimestamp| type| source ---|---|--- 2026-05-09 21:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5dmifud2f 2026-05-09 21:30:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh6woiu5p2p 2026-05-10 03:00:27+00:00| seen|...

CVE-2026-42569

creationtimestamp| type| source ---|---|--- 2026-05-09 21:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlh5akau6l2l 2026-05-09 21:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlh742ogqh2i 2026-05-11 15:00:07+00:00| seen|...

CVE-2026-42160

creationtimestamp| type| source ---|---|--- 2026-05-09 09:00:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116543798035791646 2026-05-09 09:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlfuzisord2y...

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

Unauthorized File and Knowledge Base Content Access via RAG Vector Search Affected Component RAG source resolution in chat completion pipeline: - backend/openwebui/retrieval/utils.py lines 963-965, 1063-1068, 1126-1131 in getsourcesfromitems Affected Versions Current main branch commit 6fdd19bf1...

CVE-2026-44498

creationtimestamp| type| source ---|---|--- 2026-05-08 19:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleg32ofn226 2026-05-08 19:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleh34z5ru2q...

CVE-2026-44497

creationtimestamp| type| source ---|---|--- 2026-05-08 18:58:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlefxc4vyb2n 2026-05-08 19:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleg2thkp72q...

CVE-2026-41583

creationtimestamp| type| source ---|---|--- 2026-05-08 18:30:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mleef5vlvz2h 2026-05-08 19:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleg3c5no72q...

CVE-2026-6659

creationtimestamp| type| source ---|---|--- 2026-05-08 18:06:26+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mled2prefv22 2026-05-08 19:24:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlehfv5gj62p 2026-05-08 19:52:21+00:00| seen|...

CVE-2026-44334

creationtimestamp| type| source ---|---|--- 2026-05-08 17:22:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlealg3re52q 2026-05-08 18:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlecpdnlsj2z 2026-05-09 00:37:07+00:00| seen|...

CVE-2026-8126

creationtimestamp| type| source ---|---|--- 2026-05-08 05:19:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcy7t5y6s2v 2026-05-08 05:25:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlcyjsabed2f...

CVE-2026-33844

creationtimestamp| type| source ---|---|--- 2026-05-07 23:06:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcdehi5zp2e 2026-05-07 23:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlcfbsrif32i 2026-05-08 07:30:28+00:00| seen|...

CVE-2026-41105

creationtimestamp| type| source ---|---|--- 2026-05-07 22:54:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlccpqjqgl2t 2026-05-07 23:00:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlcczhnpnl2k 2026-05-12 15:53:04+00:00| seen|...

CVE-2026-38360

creationtimestamp| type| source ---|---|--- 2026-05-07 19:00:14+00:00| seen| Telegram/PzhmRpnH0GKl-gQSVtV4RydjOIkDAHQ-MCr1tu85IjwQYE 2026-05-07 23:00:14+00:00| seen| Telegram/oaX1QMYGY6U2VLr3GbuHtJDEm63hpjXfJZtZ3v8CfS2o2Y 2026-05-08 03:00:06+00:00| seen|...

CVE-2025-1978

creationtimestamp| type| source ---|---|--- 2026-05-07 11:09:55+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlb3cyfts22f 2026-05-07 11:25:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlb46drpmy2o 2026-05-07 21:53:41+00:00| seen|...

CVE-2026-5786

creationtimestamp| type| source ---|---|--- 2026-05-07 07:54:45+00:00| seen| https://ccb.belgium.be/advisories/warning-authenticated-remote-code-execution-vulnerability-ivanti-epmm-exploited-patch 2026-05-07 08:14:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-12...

GHSA-FPF5-4JW8-67X8 rust-zserio has Unbounded Memory Allocation

Impact When deserializing arrays, strings or bytes blob types zserio first reads the size of the variable, and then allocates sufficient memory to load data. Since the size is always trusted this can be abused by creating a data file with a large size value, causing the zserio runtime to allocate...

rust-zserio has Unbounded Memory Allocation

Impact When deserializing arrays, strings or bytes blob types zserio first reads the size of the variable, and then allocates sufficient memory to load data. Since the size is always trusted this can be abused by creating a data file with a large size value, causing the zserio runtime to allocate...

CVE-2026-43578

creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kywdjit2r 2026-05-06 21:32:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7nnj45ja2e 2026-05-24 19:37:06+00:00| seen|...