EUVD-2026-33953

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attacker-controlled or sensitive values, this behavior can exfiltrate...

CVE-2026-45975

creationtimestamp| type| source ---|---|--- 2026-05-27 15:27:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116647240072146475...

CVE-2026-40820

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:20+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:10+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2026-40825

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:19+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:09+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087 2026-05-27 09:00:29+00:00| seen|...

CVE-2026-40841

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:17+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:08+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2026-40842

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:17+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:08+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2026-40836

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:12:06+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645529147227087...

CVE-2026-40818

creationtimestamp| type| source ---|---|--- 2026-05-27 08:11:14+00:00| seen| https://infosec.exchange/users/certvde/statuses/116645525736344350 2026-05-27 08:11:19+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232 2026-05-27 08:12:05+00:00| seen|...

CVE-2026-48241

creationtimestamp| type| source ---|---|--- 2026-05-21 18:43:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf36gur7i2i 2026-05-21 18:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf3q7edop2o 2026-05-21 19:00:14+00:00| seen|...

CVE-2026-5118

creationtimestamp| type| source ---|---|--- 2026-05-21 11:00:14+00:00| seen| Telegram/srrws2Goqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI 2026-05-21 13:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmejs5dpod2l 2026-05-21 14:00:04+00:00| published-proof-of-concept|...

CVE-2026-20224

creationtimestamp| type| source ---|---|--- 2026-05-14 16:24:10+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116573854073506943 2026-05-15 16:02:46+00:00| seen| https://t.me/GithubRedTeam/84354 2026-05-15 21:00:05+00:00| published-proof-of-concept|...

CVE-2026-20182

creationtimestamp| type| source ---|---|--- 2026-05-14 11:33:33+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-471 2026-05-14 15:45:20+00:00| seen| https://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.html 2026-05-14 16:24:10+00:00| seen|...

CVE-2026-7525

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

PT-2026-40850

The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers,...

CVE-2026-44547

creationtimestamp| type| source ---|---|--- 2026-05-13 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116564324244482665 2026-05-13 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mloypqjnid2d 2026-05-13 02:00:45+00:00| seen|...

telnet-pocs-2026

All Telnet PoCs — Consolidated All proof-of-concept exploits...

CVE-2026-43330

creationtimestamp| type| source ---|---|--- 2026-05-08 14:53:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116539522176473574 2026-05-08 15:00:14+00:00| seen| https://infosec.exchange/users/adulau/statuses/116539548558362414...

CVE-2026-42512

creationtimestamp| type| source ---|---|--- 2026-04-30 10:50:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116493268554939900...

CVE-2026-7204

creationtimestamp| type| source ---|---|--- 2026-04-28 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116479743048315445 2026-04-28 01:44:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhishfjn2r 2026-04-28 02:00:31+00:00| seen|...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the Connected Workspaces API. An attacker can change the displayed status of local users by connecting a malicious remote server using the Connected Workspaces feature. Remediation Upgrade...