CVE-2026-23413

creationtimestamp| type| source ---|---|--- 2026-04-02 12:47:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116335185440605181 2026-04-24 17:19:06+00:00| seen| Telegram/JJSTAL9Od5belnpNTeT7EllHotzG8ircS1PMboCiKcbiY...

CERTFR-2026-ACT-014

creationtimestamp| type| source ---|---|--- 2026-04-02 12:38:04+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116335147847077250...

CVE-2026-33617

creationtimestamp| type| source ---|---|--- 2026-04-02 09:04:05+00:00| seen| https://infosec.exchange/users/certvde/statuses/116334306568810530 2026-04-02 10:02:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miixawe37b25 2026-04-13 11:32:39+00:00| seen|...

CVE-2026-33613

creationtimestamp| type| source ---|---|--- 2026-04-02 09:04:05+00:00| seen| https://infosec.exchange/users/certvde/statuses/116334306568810530 2026-04-02 11:20:38+00:00| seen| Telegram/gqnqvxcLpfM-QzjKR2b1lJqF9lh4WXmMivWkzQg3SSVoSEI 2026-04-13 11:32:39+00:00| seen|...

CVE-2026-4759

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-3882

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Fixed in Apache Tomcat 10.1.54

Moderate: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled CVE-2026-34500 CLIENTCERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used. This was fixed with commit 29b56a56. This issue was reported to the Tomcat security...

GHSA-4VXV-4XQ4-P84H

creationtimestamp| type| source ---|---|--- 2026-04-01 23:28:03+00:00| seen| Telegram/9GieXm2mvI1hTc72mHyuKx2RXs9Lk1GMse1mK9qILNsF30...

GHSA-G4PP-FHGF-8653

creationtimestamp| type| source ---|---|--- 2026-04-01 23:27:52+00:00| seen| Telegram/coMrEhctUArWfU1Esx58b8AZjuGB2Ws5YwoScTDx0IuKI...

GHSA-R4V5-RWR2-Q7R4

creationtimestamp| type| source ---|---|--- 2026-04-01 23:27:43+00:00| seen| Telegram/9bl7FEfQKeFpZFPlYLUaNlRChLBL7dB3Syrn3BTLiX1da84...

CVE-2026-34738

WWBN AVideo is an open source video platform. In versions 26.0 and prior, AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and dra...

CVE-2026-4101

creationtimestamp| type| source ---|---|--- 2026-04-01 22:35:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihqtgefr223 2026-04-01 23:27:43+00:00| seen| Telegram/9bl7FEfQKeFpZFPlYLUaNlRChLBL7dB3Syrn3BTLiX1da84 2026-04-02 03:21:19+00:00| seen|...

CVE-2023-3630

creationtimestamp| type| source ---|---|--- 2026-04-01 22:32:51+00:00| seen| https://gist.github.com/poespas/fc5f1bc78c4f58d6fc2aea0d777fb594...

GHSA-M577-W9J8-CH7J AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter

Summary AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and draft workflows. The setStatus method validates the status code again...

AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter

Summary AVideo's video processing pipeline accepts an overrideStatus request parameter that allows any uploader to set a video's status to any valid state, including "active" a. This bypasses the admin-controlled moderation and draft workflows. The setStatus method validates the status code again...

Improper Authorization

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Improper Authorization in the overrideStatus request parameter, which is processed by the setStatus function. An attacker can bypass administrative moderation and...

EUVD-2026-17656

AVideo: Video Publishing Workflow Bypass via Unauthorized overrideStatus Request Parameter...

CVE-2026-34603

creationtimestamp| type| source ---|---|--- 2026-04-01 18:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihcrqz64w2i 2026-04-03 17:26:02+00:00| published-proof-of-concept| Telegram/XKiVP0TBNKcSgroBasKUd6A0zwSV-UpgyYoSDTGkjCiQdks 2026-04-08 07:40:08+00:00| seen|...

CVE-2026-5256

creationtimestamp| type| source ---|---|--- 2026-04-01 07:15:40+00:00| published-proof-of-concept| Telegram/PyNQtULQpgHoLf2PKswMvEDbaboZwTfs0uqYxCbwNT3ZRI 2026-04-01 08:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migczx2i6y2i 2026-04-04 05:00:15+00:00| seen|...

CVE-2026-32883

A flaw was found in Botan. A remote attacker could exploit a vulnerability in the X509 path validation process where the signature of Online Certificate Status Protocol OCSP responses was not verified. This omission allows an attacker to provide forged OCSP responses, potentially leading to the...