PT-2026-33855

XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...

PT-2026-33840

In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMSIC is cleared, potentially enabling cross-context information leakage or disruption of interrupt handling...

CVE-2026-6577

creationtimestamp| type| source ---|---|--- 2026-04-19 21:15:12+00:00| published-proof-of-concept| Telegram/ufJM6PGgYCZvMYI9YNw2SbGN8uW-GB10f-lGfe46lAW4 2026-04-19 21:29:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjuvjsryko2e 2026-04-19 23:53:28+00:00| seen|...

GHSA-W8J3-QVC3-H56F

creationtimestamp| type| source ---|---|--- 2026-04-19 07:22:56+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mjtgake2o22p...

CVE-2026-2505

creationtimestamp| type| source ---|---|--- 2026-04-19 00:09:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116428462595537812 2026-04-19 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116429136061434312 2026-04-19 03:00:31+00:00| seen|...

PT-2026-33635

Apache Struts CVE-2026-6056 has been rejected, indicating no current security threat. This highlights the importance of verifying CVE statuses before panic. NerdieNews CyberSecurity InfoSec Ransomware Malware https://t.co/uHuPsnGEPa...

CVE-2026-2986

creationtimestamp| type| source ---|---|--- 2026-04-18 22:15:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116428013886069984 2026-04-19 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116428782134450850 2026-04-19 01:30:30+00:00| seen|...

MINI-R98C-H6WV-25XG

Bulletin has no description...

CVE-2006-3873

creationtimestamp| type| source ---|---|--- 2026-04-18 19:11:16+00:00| seen| https://gist.github.com/moyix/7271ab4536b6d8889e5474578f8ce3e0...

MINI-HF39-53PC-J3PR

Bulletin has no description...

MINI-P2WV-96WF-M49R

Bulletin has no description...

MINI-4FCP-V2Q2-G72J

Bulletin has no description...

CVE-2026-40493

creationtimestamp| type| source ---|---|--- 2026-04-18 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423827633920562 2026-04-18 04:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqm5bpu762l 2026-04-18 05:18:34+00:00| published-proof-of-concept|...

GHSA-8M29-FPQ5-89JJ

creationtimestamp| type| source ---|---|--- 2026-04-18 03:45:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjqjn7dvefi2...

CVE-2026-40485 ChurchCRM: Username Enumeration via Differential Response in Public Login API

ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the public API login endpoint /api/public/user/login returns distinguishable HTTP response codes based on whether a username exists: 404 for non-existent users and 401 for valid users with incorrect passwords. An...

SUSE CVE-2026-32203

unknown...

GHSA-89MQ-229G-X47P

creationtimestamp| type| source ---|---|--- 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs...

CVE-2026-32105

creationtimestamp| type| source ---|---|--- 2026-04-17 21:22:46+00:00| seen| Telegram/o-uTgZiWLI4DGr-3Qx2v6r5S9u58WJIjtqdTFR62kB0PIWs 2026-04-17 21:30:12+00:00| seen| https://infosec.exchange/users/offseq/statuses/116422175064751572 2026-04-17 21:30:14+00:00| seen|...

GHSA-6CRX-4G37-7J49

creationtimestamp| type| source ---|---|--- 2026-04-17 21:22:32+00:00| seen| Telegram/1afGr9vW06Zk0J3YeUW4MdlUf8TA53EPyuLeVgpLZqfvxp8...

CVE-2026-32648 Anviz Products Missing Authorization

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details e.g., SSH/RTTY status, assisting attackers in reconnaissance against the device...