GHSA-3QPV-XF3V-MM45

creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:16+00:00| seen| Telegram/IhrbuMncMOQ2aXKn55DBnsRKZnrdzyQXI4i7tcZ3JysOVtE...

CVE-2026-23432

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:58+00:00| seen| Telegram/EOmUzEDCCjVld0ErnrIDoAMYFcT1xcXC6s4XJmAqdlxQalE...

CVE-2026-6940

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:58+00:00| seen| Telegram/EOmUzEDCCjVld0ErnrIDoAMYFcT1xcXC6s4XJmAqdlxQalE...

CVE-2026-23428

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:48+00:00| published-proof-of-concept| Telegram/pgLuI-koqwnCr7SMtAann9VPLed2GvgsM5ymFLWKqIPrSQ 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-07-02...

CVE-2026-23427

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:48+00:00| published-proof-of-concept| Telegram/pgLuI-koqwnCr7SMtAann9VPLed2GvgsM5ymFLWKqIPrSQ 2026-07-02 05:47:49+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-23327

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:39+00:00| seen| Telegram/FBfF7HTWtEvNL6KEiWN9WeIckJJ5ZXo9Sxte1kUZosh1zOQ 2026-07-09 01:15:54+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-23326

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:39+00:00| seen| Telegram/FBfF7HTWtEvNL6KEiWN9WeIckJJ5ZXo9Sxte1kUZosh1zOQ...

CVE-2026-23322

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:22+00:00| seen| Telegram/ZzhMA4z5eFmRU6sGLZ3zLvNHR4HamvEmBwoEQNGWRwoRM...

CVE-2026-23323

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:22+00:00| seen| Telegram/ZzhMA4z5eFmRU6sGLZ3zLvNHR4HamvEmBwoEQNGWRwoRM...

CVE-2026-23325

creationtimestamp| type| source ---|---|--- 2026-04-23 23:26:22+00:00| seen| Telegram/ZzhMA4z5eFmRU6sGLZ3zLvNHR4HamvEmBwoEQNGWRwoRM 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-41359

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41359

OpenClaw prior to version 2026.3.28 contains a privilege escalation vulnerability. Authenticated operators with write permissions can access admin-class Telegram configuration and cron persistence settings via the send endpoint due to insufficient access controls. The CVE entry notes a CVSS v3.1/...

CVE-2026-41359

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41359 OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41359 OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41359 OpenClaw < 2026.3.28 - Privilege Escalation via operator.write to Admin-Class Telegram Config and Cron Persistence

OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configuration and cron persistence settings via the send endpoint. Attackers with operator.write credentials can exploit insufficient acce...

CVE-2026-41340

OpenClaw is affected; versions before 2026.3.31 expose an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly propagates default-account trust to all named accounts, allowing attackers to bypass authentication and gain unauthorized access to named accounts....

CVE-2026-41340 OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration

OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts. Attackers can exploit this trust propagation to bypass authentication controls and gain unauthorized access to name...

CVE-2026-41340 OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration

OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts. Attackers can exploit this trust propagation to bypass authentication controls and gain unauthorized access to name...

CVE-2026-41340 OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration

OpenClaw before 2026.3.31 contains an authentication boundary vulnerability where Telegram legacy allowFrom migration incorrectly fans default-account trust into all named accounts. Attackers can exploit this trust propagation to bypass authentication controls and gain unauthorized access to name...