Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)

Overview On May 6, 2026, Palo Alto Networks published a security advisory for CVE-2026-0300, a critical unauthenticated buffer overflow vulnerability affecting PAN-OS PA-Series and VM-Series firewall appliances. Prisma Access, Cloud NGFW, and Panorama appliances are not affected by this...

Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild

Detect and mitigate CVE-2026-0300, a critical vulnerability in Palo Alto Networks PAN-OS User-ID Authentication Portal that allows unauthenticated attackers to achieve remote code execution RCE with root privileges...

CVE-2026-43216

In the Linux kernel, the following vulnerability has been resolved: net: Drop the lock in skbmaytxtimestamp skbmaytxtimestamp may acquire sock::skcallbacklock. The lock must not be taken in IRQ context, only softirq is okay. A few drivers receive the timestamp via a dedicated interrupt and comple...

CVE-2026-43184

In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it Before using the data buffer to send back the response message, zero it completely. This prevents any stray bytes to be picked up by the client side when there the message is exchange...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the atomicization of the PHY FSM conversion in the DRM and display mechanisms. This vulnerability...

Improper Validation Of Certificate

Apache Thrift is vulnerable to Improper Validation of Certificate. The vulnerability is due to improper validation of certificates against the host name, which allows an attacker to perform man-in-the-middle attacks by presenting a mismatched or malicious certificate...

CVE-2026-42221

creationtimestamp| type| source ---|---|--- 2026-05-04 21:35:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2mueqssi2e 2026-05-04 22:32:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml2q2ndiwr2i 2026-05-06 18:07:08+00:00| seen|...

CVE-2026-24120

creationtimestamp| type| source ---|---|--- 2026-05-04 18:30:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckkquyt2l 2026-05-05 16:40:29+00:00| seen| https://gist.github.com/alon710/f3beac366d11264132c16ea4f9f1b920 2026-05-10 08:07:08+00:00| seen|...

CVE-2026-29004

creationtimestamp| type| source ---|---|--- 2026-05-04 18:28:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cflgtyh2n 2026-05-04 18:28:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2cgiszak2l 2026-05-04 19:11:30+00:00| seen|...

CVE-2026-44028

creationtimestamp| type| source ---|---|--- 2026-05-04 16:16:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-44028 2026-05-05 01:34:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml327eqzfz2k 2026-05-05 02:37:49+00:00| seen|...

CVE-2026-7482

creationtimestamp| type| source ---|---|--- 2026-05-04 14:15:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzuc7suqr2k 2026-05-04 14:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzwkpa3ak2k 2026-05-04 21:09:36+00:00| seen|...

CVE-2026-40974

A flaw was found in Spring Boot's Cassandra auto-configuration. This vulnerability allows an adjacent attacker to bypass hostname verification during SSL Secure Sockets Layer connection establishment to Cassandra. This could enable a man-in-the-middle attack, potentially leading to unauthorized...

CVE-2026-42365

creationtimestamp| type| source ---|---|--- 2026-05-04 01:19:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyiwq46vt2w 2026-05-04 01:33:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkyjq3vlbn2w 2026-05-04 03:00:30+00:00| seen|...

VulnCheck KEV: CVE-2025-9807

The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all versions up to, and including, 6.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

MAL-2026-3252 Malicious code in gauth-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aea1fab5eb3b9422c65232e53e79eb71ba3436355601cd61e7a7b0177779df4e Package impersonates Google and attempts to exfiltrate various credential files. It also setups PTH file for automated start during Python initialization. In t...

gnutls: gnutls: Security bypass due to incorrect name constraint handling

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities CAs only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate...

Linux Distros Unpatched Vulnerability : CVE-2026-31773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smprandom currently labels the stored STK as authenticat...

CGA-J3M9-M34X-7QXP

Bulletin has no description...

CVE-2026-7402

creationtimestamp| type| source ---|---|--- 2026-04-30 15:18:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkpvxf2wup2g 2026-04-30 16:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkq26wa6wo2e 2026-04-30 16:48:48+00:00| seen|...

CVE-2025-50328

A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web MotW protections. When an archive is downloaded from the internet and extracted using B1 Free Archiver, the software fails to propagate the 'Zone.Identifier' alternate dat...