88231 matches found
CVE-2026-34587
creationtimestamp| type| source ---|---|--- 2026-04-24 03:15:39+00:00| published-proof-of-concept| Telegram/dFYuTuT6dlyI0G9HJyYD4PvIziWC5eOoZdg93OWAfIZB0...
CVE-2026-41325
creationtimestamp| type| source ---|---|--- 2026-04-24 03:15:39+00:00| published-proof-of-concept| Telegram/dFYuTuT6dlyI0G9HJyYD4PvIziWC5eOoZdg93OWAfIZB0...
GHSA-6GQR-MX34-WH8R
creationtimestamp| type| source ---|---|--- 2026-04-24 03:15:39+00:00| published-proof-of-concept| Telegram/dFYuTuT6dlyI0G9HJyYD4PvIziWC5eOoZdg93OWAfIZB0...
GHSA-RQ92-F6FV-3629
creationtimestamp| type| source ---|---|--- 2026-04-24 01:17:38+00:00| seen| Telegram/y1cMF7MSs4iKIz6Tjc1sXNbleG9GlRmZjivyp4DyaM6b6bo...
EUVD-2026-25343
OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...
Duplicate Advisory: OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-767m-xrhc-fxm7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write...
GHSA-394X-274P-MQC6 Duplicate Advisory: OpenClaw: Gateway operator.write Can Reach Admin-Class Telegram Config and Cron Persistence via send
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-767m-xrhc-fxm7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write...
EUVD-2026-25324
OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts. Attackers can exploit this trust propagation to bypass authentication controls and gain unauthorized access to name...
GHSA-42MX-VP8M-J7QH
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:29+00:00| seen| Telegram/u2qRHjnv5kQDuTkkxczYUuDfihUUcY0XYmdq7J3tY866RjI...
GHSA-767M-XRHC-FXM7
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:29+00:00| seen| Telegram/u2qRHjnv5kQDuTkkxczYUuDfihUUcY0XYmdq7J3tY866RjI...
GHSA-G86V-F9QV-RH6M
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:29+00:00| seen| Telegram/u2qRHjnv5kQDuTkkxczYUuDfihUUcY0XYmdq7J3tY866RjI...
GHSA-H5HG-H7RR-GPF3
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:29+00:00| seen| Telegram/u2qRHjnv5kQDuTkkxczYUuDfihUUcY0XYmdq7J3tY866RjI...
CVE-2026-41355
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:29+00:00| seen| Telegram/u2qRHjnv5kQDuTkkxczYUuDfihUUcY0XYmdq7J3tY866RjI...
CVE-2026-41359
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:29+00:00| seen| Telegram/u2qRHjnv5kQDuTkkxczYUuDfihUUcY0XYmdq7J3tY866RjI...
CVE-2026-41361
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:29+00:00| seen| Telegram/u2qRHjnv5kQDuTkkxczYUuDfihUUcY0XYmdq7J3tY866RjI...
GHSA-V3QC-WRWX-J3PW
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:23+00:00| seen| Telegram/OgOvWOsYKDsUPw2Tk2S9qGbonIgzDZlRsoTRSBtlTZ01pNI...
GHSA-3CW3-5VXW-G2H3
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:23+00:00| seen| Telegram/OgOvWOsYKDsUPw2Tk2S9qGbonIgzDZlRsoTRSBtlTZ01pNI...
GHSA-MHR7-2XMV-4C4Q
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:23+00:00| seen| Telegram/OgOvWOsYKDsUPw2Tk2S9qGbonIgzDZlRsoTRSBtlTZ01pNI...