SUSE CVE-2026-2049

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

CVE-2025-12518

creationtimestamp| type| source ---|---|--- 2026-03-18 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2025-12518/...

CVE-2025-71258

creationtimestamp| type| source ---|---|--- 2026-03-18 10:43:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-71258.yaml 2026-03-18 10:44:05+00:00| seen| https://swecyb.com/ap/users/116080658609901341/statuses/116249741149530242 2026-03-1...

CVE-2025-71257

creationtimestamp| type| source ---|---|--- 2026-03-18 10:22:23+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-71257.yaml 2026-03-18 10:44:04+00:00| seen| https://swecyb.com/ap/users/116080658609901341/statuses/116249741149530242 2026-03-1...

CVE-2026-22323

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22323 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22322

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:30+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22322 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22321

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22321 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22319

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:28+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22319 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

CVE-2026-22316

creationtimestamp| type| source ---|---|--- 2026-03-18 07:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-22316 2026-03-18 07:36:35+00:00| seen| https://infosec.exchange/users/certvde/statuses/116249027843473696...

PT-2026-26199

Summary The WhatsApp POST webhook handler /notification/whatsapp/webhook processes incoming status update events without verifying the Meta/WhatsApp X-Hub-Signature-256 HMAC signature, allowing any unauthenticated attacker to send forged webhook payloads that manipulate notification delivery stat...

Linux Distros Unpatched Vulnerability : CVE-2026-23245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: actgate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer callback or dump path is walking the schedule list...

CVE-2026-4148

creationtimestamp| type| source ---|---|--- 2026-03-17 15:16:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4148 2026-03-17 18:24:13+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116245912063981591 2026-03-17 21:02:34+00:00| seen|...

CVE-2026-4318

creationtimestamp| type| source ---|---|--- 2026-03-17 10:31:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116244052137878986 2026-03-17 22:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbxxu7hht2s...

CVE-2026-4157

creationtimestamp| type| source ---|---|--- 2026-03-17 06:28:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116243096592688532 2026-04-11 02:32:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6sc23blx2m 2026-04-11 03:21:29+00:00| seen|...

CVE-2026-4252

creationtimestamp| type| source ---|---|--- 2026-03-17 06:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242987588275568 2026-03-20 12:34:05+00:00| published-proof-of-concept| https://t.me/bdufstecru/3024 2026-04-03 21:00:14+00:00| seen|...

CVE-2026-23489

creationtimestamp| type| source ---|---|--- 2026-03-17 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116242633628583910 2026-03-18 15:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhdqurfkas2a 2026-08-05 15:00:07+00:00| published-proof-of-concept|...

CVE-2026-4156

creationtimestamp| type| source ---|---|--- 2026-03-17 02:52:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116242247253222316 2026-04-11 03:21:29+00:00| seen| Telegram/9p2zwy9MZzhVwoc6VK1G-jeZ0lfiSFc0xC5yOTrHz-Zg8Sw 2026-04-11 05:52:01+00:00| seen|...

CVE-2026-4288

A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of the component Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be...

CVE-2026-4288

CVE-2026-4288 affects Tiandy Easy7 Integrated Management Platform 7.17.0. The vulnerability is an SQL injection in an unknown function of the Endpoint component, triggered by manipulating the argument ID in /rest/devStatus/getDevDetailedInfo. Access is remote and exploitation is publicly availabl...

PT-2026-25838

A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of the component Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be...