CVE-2026-5174

creationtimestamp| type| source ---|---|--- 2026-04-30 12:52:32+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/progress-security-advisory-av26-410 2026-04-30 17:30:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq5dxnf622p 2026-04-30 17:43:25+00:00| seen|...

CVE-2026-7470

creationtimestamp| type| source ---|---|--- 2026-04-30 04:19:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116491731051009332 2026-04-30 04:31:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkorrp2www2i 2026-04-30 04:41:17+00:00| seen|...

CVE-2026-26015

creationtimestamp| type| source ---|---|--- 2026-04-30 00:00:41+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkocntlqeg2o 2026-04-30 00:00:45+00:00| seen| https://infosec.exchange/users/offseq/statuses/116490714356877205...

CVE MCP Server 0.1.0

CVE MCP Server is a production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs across NVD, EPSS, CISA KEV, Shodan, VirusTotal, and GreyNoise, ask Claude one question and get correlated intelligence in seconds...

CVE-2026-36957

creationtimestamp| type| source ---|---|--- 2026-04-29 23:00:12+00:00| seen| Telegram/KspXoTAZwNnyoY0fEBjlny6gTq9EiPaKDTUOSCE94iY-U 2026-04-30 16:51:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq35fnbit2e 2026-04-30 18:00:52+00:00| seen|...

CVE-2026-36958

creationtimestamp| type| source ---|---|--- 2026-04-29 23:00:12+00:00| seen| Telegram/KspXoTAZwNnyoY0fEBjlny6gTq9EiPaKDTUOSCE94iY-U 2026-04-30 17:01:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq3pi2a7l2i 2026-04-30 18:01:00+00:00| seen|...

CVE-2026-34965

creationtimestamp| type| source ---|---|--- 2026-04-29 20:45:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxrf2bsf2v 2026-04-29 21:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknzoer7es2k 2026-04-29 23:01:55+00:00| seen|...

CVE-2026-0204

creationtimestamp| type| source ---|---|--- 2026-04-29 19:01:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mknrwybg7h2w 2026-04-29 19:18:21+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mknsuzqutq2t 2026-04-30 06:01:26+00:00| seen|...

Weak Random Value Generation For Secrets (weak PRNG)

Spring Boot is vulnerable to the use of a weak pseudo-random number generator PRNG. The vulnerability is due to the use of predictable random value sources e.g., $random.value, $random.int, $random.long, which allows an attacker to guess or brute-force generated secrets and compromise application...

CVE-2026-42515

creationtimestamp| type| source ---|---|--- 2026-04-29 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkmqeawgw52p 2026-04-29 09:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116487174849007678 2026-04-29 10:43:29+00:00| seen|...

CVE-2026-23773

creationtimestamp| type| source ---|---|--- 2026-04-29 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkmgcc7efl2f 2026-04-29 06:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116486466851650653 2026-04-29 06:31:11+00:00| seen|...

CVE-2026-7320

creationtimestamp| type| source ---|---|--- 2026-04-29 05:55:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-mozilla-4 2026-04-29 12:50:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn577kg6v2w 2026-05-04 15:30:07+00:00| seen|...

CVE-2026-42615

creationtimestamp| type| source ---|---|--- 2026-04-29 04:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116486112913156870 2026-04-29 04:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkmbbdun6a2o 2026-04-29 04:41:25+00:00| seen|...

CVE-2026-7344

creationtimestamp| type| source ---|---|--- 2026-04-28 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260429 2026-04-29 00:51:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkluz3q2ea2c 2026-04-29 01:30:27+00:00| seen|...

CVE-2026-41391 OpenClaw < 2026.3.31 - Environment Variable Bypass in Package Index URL Handling

OpenClaw before 2026.3.31 fails to properly sanitize PIPINDEXURL and UVINDEXURL environment variables in host execution contexts, allowing attackers to redirect Python package-index traffic. Attackers can exploit this bypass to intercept or manipulate package management operations by injecting...

CVE-2026-42167

creationtimestamp| type| source ---|---|--- 2026-04-28 15:00:17+00:00| seen| Telegram/H01iEvXyQvFt3BKrUWEkrM93zs5xMaOZIzFsw2eb4Vo29b0 2026-04-28 21:00:04+00:00| published-proof-of-concept| Telegram/eS6PVxYAnM0JrA3WVLfUd-acXUZbhqPWuOh5cENwecmTOw 2026-04-29 00:02:19+00:00| seen|...

CVE-2026-7243

creationtimestamp| type| source ---|---|--- 2026-04-28 12:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116482338362194303 2026-04-28 12:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkklmuu4fh26...

Why Unofficial Download Sources Are Still a Security Risk in 2026

Security Risk in 2026: why unofficial download sources still put users at risk, and how to verify safe, official install paths before installing software...

CVE-2026-7244

creationtimestamp| type| source ---|---|--- 2026-04-28 11:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116481984920066984 2026-04-28 11:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkkgm5kchn2j...

The Role of Aggregated Liquidity in Modern Crypto Markets

Aggregated liquidity improves crypto trading by combining multiple sources, offering better rates, deeper markets, and more reliable execution across assets...