CVE-2025-65122

creationtimestamp| type| source ---|---|--- 2026-05-06 19:39:33+00:00| seen| https://gist.github.com/6en6ar/66ef99397068c0a5e0d963bc47d7172c 2026-05-06 19:46:52+00:00| seen| https://gist.github.com/6en6ar/bdc8e0d472406ab98431f10273cbdbf3 2026-05-07 17:06:16+00:00| seen|...

CVE-2026-20185

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ngnlrb2r 2026-05-06 17:22:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77osaodu2t 2026-05-07 00:53:19+00:00| seen|...

RLSA-2026:11881 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key...

RLSA-2026:11514 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root...

CVE-2026-6787

creationtimestamp| type| source ---|---|--- 2026-05-06 10:24:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-428 2026-05-06 17:45:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7axfgqdy2v 2026-05-06 17:55:14+00:00| seen|...

CVE-2025-71253

creationtimestamp| type| source ---|---|--- 2026-05-06 05:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5ydnqr3a2p 2026-05-06 05:55:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5zc4mn572o 2026-05-06 18:59:57+00:00| seen|...

CVE-2025-71251

creationtimestamp| type| source ---|---|--- 2026-05-06 05:14:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5wxzav3o2k 2026-05-06 05:52:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5z5cy5xw2v 2026-05-06 19:02:57+00:00| seen|...

CVE-Intelligence

VulnForge Local-only, single-user CVE alert & patch-priority...

CVE-2026-7855

creationtimestamp| type| source ---|---|--- 2026-05-05 19:17:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vn5y2oe2r 2026-05-05 21:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml544oeqka2p 2026-05-06 20:07:07+00:00| seen|...

CVE-2026-43500

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260506 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

CVE-2026-43284

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260506 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

CVE-2026-43059

creationtimestamp| type| source ---|---|--- 2026-05-05 16:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4n2yl25y2v 2026-05-05 17:07:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116523063998425204 2026-07-09 01:17:26+00:00| seen|...

CVE-2026-43531

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-43531 OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-43531

OpenClaw is vulnerable prior to version 2026.4.9 due to an environment variable injection flaw that allows malicious workspace .env files to set runtime-control variables. This can alter update sources, gateway URLs, ClawHub resolution, and browser executable paths, potentially changing applicati...

EUVD-2026-27273

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-43531

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-43531 OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-43531 OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-41680

A flaw was found in marked, a markdown parser and compiler. An unauthenticated attacker can exploit this Denial of Service DoS vulnerability by providing a specific 3-byte input sequence a tab, a vertical tab, and a newline. This input triggers an infinite recursion loop during parsing, leading t...