CVE-2026-5786

creationtimestamp| type| source ---|---|--- 2026-05-07 07:54:45+00:00| seen| https://ccb.belgium.be/advisories/warning-authenticated-remote-code-execution-vulnerability-ivanti-epmm-exploited-patch 2026-05-07 08:14:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-12...

rust-zserio has Unbounded Memory Allocation

Impact When deserializing arrays, strings or bytes blob types zserio first reads the size of the variable, and then allocates sufficient memory to load data. Since the size is always trusted this can be abused by creating a data file with a large size value, causing the zserio runtime to allocate...

GHSA-FPF5-4JW8-67X8 rust-zserio has Unbounded Memory Allocation

Impact When deserializing arrays, strings or bytes blob types zserio first reads the size of the variable, and then allocates sufficient memory to load data. Since the size is always trusted this can be abused by creating a data file with a large size value, causing the zserio runtime to allocate...

CVE-2026-43578

creationtimestamp| type| source ---|---|--- 2026-05-06 20:45:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kywdjit2r 2026-05-06 21:32:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7nnj45ja2e 2026-05-24 19:37:06+00:00| seen|...

CVE-2025-65122

creationtimestamp| type| source ---|---|--- 2026-05-06 19:39:33+00:00| seen| https://gist.github.com/6en6ar/66ef99397068c0a5e0d963bc47d7172c 2026-05-06 19:46:52+00:00| seen| https://gist.github.com/6en6ar/bdc8e0d472406ab98431f10273cbdbf3 2026-05-07 17:06:16+00:00| seen|...

CVE-2026-20185

creationtimestamp| type| source ---|---|--- 2026-05-06 17:22:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ngnlrb2r 2026-05-06 17:22:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77osaodu2t 2026-05-07 00:53:19+00:00| seen|...

RLSA-2026:11881 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key...

RLSA-2026:11514 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root...

CVE-2026-6787

creationtimestamp| type| source ---|---|--- 2026-05-06 10:24:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-428 2026-05-06 17:45:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7axfgqdy2v 2026-05-06 17:55:14+00:00| seen|...

CVE-2025-71253

creationtimestamp| type| source ---|---|--- 2026-05-06 05:38:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5ydnqr3a2p 2026-05-06 05:55:39+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5zc4mn572o 2026-05-06 18:59:57+00:00| seen|...

CVE-2025-71251

creationtimestamp| type| source ---|---|--- 2026-05-06 05:14:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5wxzav3o2k 2026-05-06 05:52:58+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ml5z5cy5xw2v 2026-05-06 19:02:57+00:00| seen|...

CVE-Intelligence

VulnForge Local-only, single-user CVE alert & patch-priority...

CVE-2026-7855

creationtimestamp| type| source ---|---|--- 2026-05-05 19:17:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4vn5y2oe2r 2026-05-05 21:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml544oeqka2p 2026-05-06 20:07:07+00:00| seen|...

CVE-2026-43500

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260506 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

CVE-2026-43284

creationtimestamp| type| source ---|---|--- 2026-05-05 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260506 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506...

CVE-2026-43059

creationtimestamp| type| source ---|---|--- 2026-05-05 16:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4n2yl25y2v 2026-05-05 17:07:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116523063998425204 2026-07-09 01:17:26+00:00| seen|...

CVE-2026-43531

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-43531 OpenClaw < 2026.4.9 - Environment Variable Injection via Workspace .env File

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...

CVE-2026-43531

OpenClaw is vulnerable prior to version 2026.4.9 due to an environment variable injection flaw that allows malicious workspace .env files to set runtime-control variables. This can alter update sources, gateway URLs, ClawHub resolution, and browser executable paths, potentially changing applicati...

EUVD-2026-27273

OpenClaw before 2026.4.9 contains an environment variable injection vulnerability allowing malicious workspace .env files to set runtime-control variables. Attackers can inject variables affecting update sources, gateway URLs, ClawHub resolution, and browser executable paths to compromise...