CVE-2026-5035

creationtimestamp| type| source ---|---|--- 2026-03-29 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116311289174971513 2026-03-29 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi6mupgw222y 2026-03-29 09:15:18+00:00| seen|...

CVE-2026-5018

creationtimestamp| type| source ---|---|--- 2026-03-29 00:34:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5vn3bhid2s 2026-03-29 01:15:46+00:00| published-proof-of-concept| Telegram/2ZCZ0X-UsuKs7wtR6ZGpeXrnXUtKYHoBRWUbFIBTrMUhlY 2026-03-29 01:53:25+00:00| seen|...

CVE-2026-5019

creationtimestamp| type| source ---|---|--- 2026-03-29 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mi5tqe2i6u2s 2026-03-29 00:05:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5tyngws42s 2026-03-29 01:15:46+00:00| published-proof-of-concept|...

CVE-2026-5016

creationtimestamp| type| source ---|---|--- 2026-03-28 23:15:16+00:00| published-proof-of-concept| Telegram/OEmB6HaBO0fT2xWNNxRYZpXvzEjDJ8zEr2b6XyKSAW6N8RA 2026-03-29 00:09:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi5uacyx2q2i 2026-03-29 01:51:50+00:00| seen|...

SUSE CVE-2026-33062

free5GC is an open source 5G core network. free5GC NRF prior to version 1.4.2 has an Improper Input Validation vulnerability leading to Denial of Service. All deployments of free5GC using the NRF discovery service are affected. The EncodeGroupId function attempts to access array indices 0, 1, 2...

NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2026-0036)

The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities: - ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. CVE-2025-61985 - ssh ...

Linux Distros Unpatched Vulnerability : CVE-2026-27877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxi...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the jwk2key process. An attacker can cause unexpected behavior or application crashes by providing a specially crafted JWK file containing integers where JSON string values are expected. Workaround This...

CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

DEBIAN-CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-27309

creationtimestamp| type| source ---|---|--- 2026-03-27 22:28:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi364lvtux2r 2026-03-27 22:49:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi37cgjnrz2i 2026-03-28 01:30:48+00:00| seen|...

EUVD-2026-16899

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-33996 LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-33996 LibJWT has NULL/bounds validation in JWK octet and RSA PSS parsing

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-33996

LibJWT is a C JSON Web Token Library. Starting in version 3.0.0 and prior to version 3.3.0, the JWK parsing for RSA-PSS did not protect against a NULL value when expecting to parse JSON string values. A specially crafted JWK file could exploit this behavior by using integers in places where the...

CVE-2026-32241

creationtimestamp| type| source ---|---|--- 2026-03-27 21:01:21+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mi2zas2jg72m 2026-03-27 21:05:34+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mi2ziec22r25 2026-03-27 21:22:55+00:00| seen|...

CVE-2026-27877

A flaw was found in Grafana. When public dashboards are used with direct data-sources, sensitive credentials, specifically passwords for all direct data-sources, are exposed. This information disclosure occurs even when these data-sources are not actively utilized in the dashboards. A remote...

CVE-2025-15381

creationtimestamp| type| source ---|---|--- 2026-03-27 19:18:40+00:00| published-proof-of-concept| Telegram/1bFqVBg1WZRYib4qCiBn36zcLriGuSpWJXWdU6ZWtzYtM 2026-03-27 19:18:53+00:00| seen| Telegram/aqievDs9oCICHmk4C8wabuGpxUWUtlG5g0Gk9aIz6TfeTOo 2026-03-27 22:15:31+00:00| seen|...