CVE-2026-7563

creationtimestamp| type| source ---|---|--- 2026-05-15 12:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlvdnd5alz2s...

CVE-2026-8425

creationtimestamp| type| source ---|---|--- 2026-05-15 11:41:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlvas5mldv2o...

CVE-2026-4683

creationtimestamp| type| source ---|---|--- 2026-05-15 11:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlvabzkyk72a...

CVE-2026-8398

creationtimestamp| type| source ---|---|--- 2026-05-15 10:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlv35uqdzj2k 2026-05-27 18:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/11739434-0930-4569-82cd-80d659d1039f...

GHSA-JGG6-4RPR-WFH7

creationtimestamp| type| source ---|---|--- 2026-05-15 08:34:35+00:00| seen| https://gist.github.com/gabrielstuff/1ec8cb4a351745895c76dfadc789090a 2026-05-18 19:10:51+00:00| seen| https://gist.github.com/alon710/2086198312b306686e313c1e5c4a662e...

GHSA-WF8Q-WVV8-P8JF

creationtimestamp| type| source ---|---|--- 2026-05-15 08:10:29+00:00| seen| https://gist.github.com/alon710/db836de6fdadb3f6233ea8cd7bfaf4c5...

GHSA-GXHX-2686-5H9G

creationtimestamp| type| source ---|---|--- 2026-05-15 07:40:29+00:00| seen| https://gist.github.com/alon710/e4391bc7fc64c5967eebed881d2ad7d3...

CVE-2024-21950

creationtimestamp| type| source ---|---|--- 2026-05-15 06:51:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mluqloreim2p...

CVE-2026-46433

creationtimestamp| type| source ---|---|--- 2026-05-15 06:27:28+00:00| seen| https://bsky.app/profile/vincent.bernat.ch/post/3mlupbaxxvs2n...

CVE-2026-44054

creationtimestamp| type| source ---|---|--- 2026-05-15 04:08:09+00:00| seen| https://bsky.app/profile/slackers.it/post/3mluh44cimk2b...

CVE-2026-44050

creationtimestamp| type| source ---|---|--- 2026-05-15 04:08:09+00:00| seen| https://bsky.app/profile/slackers.it/post/3mluh44cimk2b 2026-05-21 13:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmekztt4ej2p 2026-05-22 09:00:26+00:00| seen|...

CVE-2020-17103

creationtimestamp| type| source ---|---|--- 2026-05-15 03:00:06+00:00| published-proof-of-concept| Telegram/4tIKexrP1B7eYtOW91-QaKQ8EIqNMri3pu2CJIQ1mA899I 2026-05-16 09:09:16+00:00| seen| https://t.me/P0x3k1N73LL1G3NC3/354 2026-05-16 09:41:16+00:00| seen|...

CVE-2026-6811

creationtimestamp| type| source ---|---|--- 2026-05-15 02:16:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlubaimv242n...

CVE-2026-44428

creationtimestamp| type| source ---|---|--- 2026-05-15 01:51:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlu7toomzp2k...

CVE-2026-44673

creationtimestamp| type| source ---|---|--- 2026-05-15 01:40:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlu77cs2dv2v...

CVE-2026-44662

creationtimestamp| type| source ---|---|--- 2026-05-15 01:19:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlu63ckcem2t...

GHSA-5V57-8RXJ-3P2R

creationtimestamp| type| source ---|---|--- 2026-05-14 22:10:29+00:00| seen| https://gist.github.com/alon710/b6fd947590993b5b0ed338c431321ca8...

GHSA-248R-7H7Q-CR24

creationtimestamp| type| source ---|---|--- 2026-05-14 21:40:29+00:00| seen| https://gist.github.com/alon710/8f8ab6f5732ed98c8d3fdb3bd09a3eb7...

Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/

Summary When ENABLEYAMLCONFIGEDITING=true, every haconfigsetyaml call backs up the pre-edit file to /www/yamlbackups/, which Home Assistant serves at /local/ with no authentication. Anyone who can reach the HA web interface can download the most recent pre-edit configuration.yaml or other YAML fi...

GHSA-3RXJ-6CGF-8CFW

creationtimestamp| type| source ---|---|--- 2026-05-14 18:10:29+00:00| seen| https://gist.github.com/alon710/f37dde72118656f1c6b1cac083cc2cb1...