CVE-2026-5027

creationtimestamp| type| source ---|---|--- 2026-03-27 17:23:12+00:00| published-proof-of-concept| Telegram/kHfLfkapUcGKUVgufiQubAbscQMrKjcom26lkyfAO4Fyc 2026-03-27 18:20:00+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116302518672297608 2026-03-27 23:00:43+00:00| seen|...

CVE-2026-5026

creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:52+00:00| published-proof-of-concept| Telegram/pyEIr0Ko2hoCavwas1rlZ1K5Q5ZdrBNaOpK3idLXyAytNFs 2026-03-27 17:23:12+00:00| published-proof-of-concept| Telegram/kHfLfkapUcGKUVgufiQubAbscQMrKjcom26lkyfAO4Fyc 2026-03-27 18:20:00+00:00| seen...

CVE-2026-25334

creationtimestamp| type| source ---|---|--- 2026-03-27 17:22:05+00:00| seen| Telegram/0TkjLsQfxXDhGLxRci6Ro2HiEhTKYRR1p268AcWiw3KWvWE 2026-04-07 04:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3miuwyhv7db2w...

CVE-2026-5046

creationtimestamp| type| source ---|---|--- 2026-03-27 16:52:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116302173508994263 2026-03-28 09:58:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306207828256273 2026-03-29 17:15:27+00:00| published-proof-of-concept|...

CVE-2026-5036

creationtimestamp| type| source ---|---|--- 2026-03-27 16:25:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116302066909306765 2026-03-28 16:16:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116307694173463292 2026-03-29 09:00:30+00:00| seen|...

CVE-2026-1496

creationtimestamp| type| source ---|---|--- 2026-03-27 15:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi2i7xzklv2s 2026-03-27 17:22:21+00:00| seen| Telegram/YkFovyOp1l89l2HrsHhU-e8kv9HXA0gCdui6VpSIt8SuiME...

CVE-2026-5024

creationtimestamp| type| source ---|---|--- 2026-03-27 15:04:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116301748482237182 2026-03-28 12:13:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116306738692445946 2026-03-29 03:55:28+00:00| seen|...

CVE-2026-5021

creationtimestamp| type| source ---|---|--- 2026-03-27 14:36:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116301640210905220 2026-03-29 02:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mi64wy5frl2g 2026-03-29 03:00:28+00:00| seen|...

BIT-DISCOURSE-2026-31805 Discourse has a poll authorization bypass via post_id array parameter

Discourse is an open-source discussion platform. Prior to versions 2026.3.0, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing postid as an...

BIT-NGINX-GATEWAY-2026-28755 NGINX ngx_stream_ssl_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxstreamsslmodule module due to the improper handling of revoked certificates when configured with the sslverifyclient on and sslocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the...

BIT-NGINX-2026-28755 NGINX ngx_stream_ssl_module vulnerability

NGINX Plus and NGINX Open Source have a vulnerability in the ngxstreamsslmodule module due to the improper handling of revoked certificates when configured with the sslverifyclient on and sslocsp on directives, allowing the TLS handshake to succeed even after an OCSP check identifies the...

GHSA-6HRP-7FQ9-3QV2

creationtimestamp| type| source ---|---|--- 2026-03-27 03:18:12+00:00| seen| Telegram/wovzpCQvp7hlTQxwTsDEYFJDESQHFA6mVe176dFHuk85of0...

GHSA-VFGG-MVXX-MGG7

creationtimestamp| type| source ---|---|--- 2026-03-27 01:18:53+00:00| seen| Telegram/67MCm8uvWkL1PFFVLqu-Ae9nhYuAfQmsKMFjCSOu4hiA4mc...

EUVD-2026-16424

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to williamgoodfellow for reporting this vulnerability...

GHSA-FFQX-Q65F-36JF Grafana Tempo has Inadequate Encryption Strength

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...

Grafana Tempo has Inadequate Encryption Strength

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...

Linux Distros Unpatched Vulnerability : CVE-2026-28377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users t...

GHSA-34XJ-66V3-6J83

creationtimestamp| type| source ---|---|--- 2026-03-26 23:20:15+00:00| seen| Telegram/KBYE9xcSrVJP8YR7PFbodeWC5j3Vs7cAXceOWA5Jtu74trY...

CVE-2026-28377

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to williamgoodfellow for reporting this vulnerability...

CVE-2026-28377

A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3. Thanks to williamgoodfellow for reporting this vulnerability...