CVE-2026-9208

creationtimestamp| type| source ---|---|--- 2026-05-27 23:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumeouq6o26 2026-05-27 23:28:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmunvwkxrk2p 2026-06-02 20:07:07+00:00| seen|...

CVE-2026-46414

creationtimestamp| type| source ---|---|--- 2026-05-27 22:55:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmum2wangr2c 2026-05-28 00:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupprp6ak2c 2026-05-28 02:34:54+00:00| seen|...

CVE-2026-9739

creationtimestamp| type| source ---|---|--- 2026-05-27 22:53:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmulxqu6w32p 2026-05-28 00:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116649259043709670 2026-06-02 17:46:03+00:00| seen|...

CVE-2026-44720

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

CVE-2026-44713

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj257hxw2r 2026-05-27 23:03:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmumjuesms2q...

CVE-2026-44712

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuizvc4qx2e 2026-05-27 23:01:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmumfptprr2q...

CVE-2026-44711

creationtimestamp| type| source ---|---|--- 2026-05-27 22:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuizndlat2n 2026-05-27 23:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuo6uzrkl2i...

GHSA-G794-3FMP-753H AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username

Summary AsyncSSH 2.22.0 expands the OpenSSH-compatible AuthorizedKeysFile %u token with the raw SSH username during pre-authentication server config reload. A server configured with a documented per-user key pattern such as AuthorizedKeysFile authorizedkeys/%u can be made to read an authorized-ke...

CVE-2026-44720

OpenLearnX (pre-2.0.4) has a critical authentication vulnerability where JWT signature verification is disabled, enabling an attacker to bypass authentication and take over user accounts. Impact is unauthorized access under specific conditions; the issue is fixed in 2.0.4. Remediation: upgrade to...

CVE-2026-44720 OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover

OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to 2.0.4, a critical authentication vulnerability was identified in OpenLearnX that could allow unauthorized access to user accounts under specific conditions. This vulnerability is fixed in 2.0.4...

CVE-2026-9533

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performing a manipulation of the argument fwUrl/magicid results in os command injection. It is possible to initiate...

CVE-2026-46620

e107 is a content management system CMS. Prior to 2.3.5, e107 CMS does not properly enforce CSRF token validation on comment moderation actions. The problem comes down to how sessionhandler::check handles CSRF tokens. Instead of requiring a token on every state-changing request, it only validates...

CVE-2026-45321

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/ packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself...

CVE-2026-46059

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine nSVM module. This vulnerability occurs when running nested virtual machines L2 guests with NRIPS Next Instruction Pointer Suppression disabled. After an L2 guest's initial run, the NextRIP value in vmcb02 may not be correctly...

CVE-2026-46425

creationtimestamp| type| source ---|---|--- 2026-05-27 19:02:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zs6d5j2n 2026-05-27 19:22:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmua6mzti42i...

CVE-2026-48152

creationtimestamp| type| source ---|---|--- 2026-05-27 19:01:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zccumf2t 2026-05-27 20:06:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmucmavj2g2i...

CVE-2026-48149

creationtimestamp| type| source ---|---|--- 2026-05-27 19:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6x6poof2n 2026-05-27 19:26:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmuafe64q72n...

CVE-2026-46076

A flaw was found in the Kernel-based Virtual Machine KVM nSVM module of the Linux kernel. This vulnerability occurs when an unhandled VMMCALL is not properly intercepted by the Level 1 L1 hypervisor. A malicious Level 2 L2 guest operating system could exploit this by making specific hypercalls,...

CVE-2026-45090

Dalfox (CVE-2026-45090) suffers a channel lifecycle bug in ParameterAnalysis.go: two sequential worker stages share a single results channel, which is closed after the first stage and then reused by the second stage for POST-body parameters. When a parameter is reflected, the second-stage writer ...

CVE-2026-44329

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network attacker who can reach SMF on the SBI can hit UPI endpoints with no Authorization header at all, and...