CVE-2026-27243

Adobe Connect (versions 2025.3, 12.10 and earlier) contains a reflected Cross-Site Scripting (XSS) vulnerability. An attacker can lure a user to a crafted URL referencing a vulnerable page, enabling arbitrary JavaScript execution in the user’s browser with high impact to confidentiality and integ...

CVE-2026-4344

creationtimestamp| type| source ---|---|--- 2026-04-14 17:28:08+00:00| seen| Telegram/Vdpd7lT308fxiW1s76LVsqR9F6P793RnQqd0qJzf2KghFE 2026-04-14 17:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhxhiljcp2x...

CVE-2026-4345

creationtimestamp| type| source ---|---|--- 2026-04-14 17:28:08+00:00| seen| Telegram/Vdpd7lT308fxiW1s76LVsqR9F6P793RnQqd0qJzf2KghFE 2026-04-14 18:32:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhzcoitrz2z...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to incorrect parse function values in net/url (CVE-2025-47912)

Summary IBM Watson Speech Services Cartridge is vulnerable to a condition in net/url that allows incorrect parse function values other than IPv6 addresses to be included in square brackets within the host component of a URL CVE-2025-47912, Net/url is used in our speech-utilities. This...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to improper allocation of resources in net/url [CVE-2025-61726]

Summary IBM Watson Speech Services Cartridge is vulnerable to improper allocation of resources due to a failure of the net/url package to set a limit on the number of query parameters in a queryCVE-2025-61726. Net/url is used in our speech utilities. This vulnerabilitiy has been addressed. Please...

CVE-2026-22828

creationtimestamp| type| source ---|---|--- 2026-04-14 16:51:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjhtoef7zj2m 2026-04-14 17:28:08+00:00| seen| Telegram/Vdpd7lT308fxiW1s76LVsqR9F6P793RnQqd0qJzf2KghFE 2026-04-14 17:28:30+00:00| seen|...

OPENSUSE-SU-2026:20537-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 bsc1255111, jscSLE-18320: - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints bsc1259266. - CVE-2026-27138:...

CVE-2025-8095

creationtimestamp| type| source ---|---|--- 2026-04-14 15:16:42+00:00| seen| Telegram/r8zsFd86IdjBnjQsnpVbmSTohShaGtmjBjBqVT1IiFRWlNI 2026-04-14 17:22:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhvgj2yqp2g...

CVE-2026-4832

creationtimestamp| type| source ---|---|--- 2026-04-14 13:10:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhczv3ac2r 2026-07-09 16:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-03...

CVE-2026-27456

creationtimestamp| type| source ---|---|--- 2026-04-14 13:10:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhcqfm6j26 2026-06-03 23:46:41+00:00| seen| https://gist.github.com/C4sh3R/1f99346b1086e7d358ff1be8f5be7a42 2026-08-21 13:45:12+00:00| seen|...

CVE-2025-40745

creationtimestamp| type| source ---|---|--- 2026-04-14 11:57:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhdba3hcc2z 2026-04-21 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-04...

CVE-2026-40176

creationtimestamp| type| source ---|---|--- 2026-04-14 10:06:19+00:00| seen| https://bsky.app/profile/packagist.com/post/3mjh4zxgvfk2v 2026-04-14 13:57:00+00:00| seen| https://thehackernews.com/2026/04/new-php-composer-flaws-enable-arbitrary.html 2026-04-14 16:04:53+00:00| seen|...

CVE-2026-40261

creationtimestamp| type| source ---|---|--- 2026-04-14 10:06:19+00:00| seen| https://bsky.app/profile/packagist.com/post/3mjh4zxgvfk2v 2026-04-14 16:04:53+00:00| seen| https://t.me/thehackernews/8803 2026-04-15 00:48:18+00:00| seen|...

CVE-2026-41146

creationtimestamp| type| source ---|---|--- 2026-04-14 06:49:12+00:00| published-proof-of-concept| https://github.com/boazsegev/facil.io/security/advisories/GHSA-2x79-gwq3-vxxm 2026-04-22 03:15:49+00:00| published-proof-of-concept| Telegram/NIz4Hq2d69t6fRYm4ZcrXWZIskbJKFNbLYHbUSSyCcR9Mzg 2026-04-...

CVE-2026-4388

creationtimestamp| type| source ---|---|--- 2026-04-14 04:44:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgl2haur22z 2026-04-14 05:17:21+00:00| seen| Telegram/VN5qpdZvC1XQa0kocwrxs34zDP5KgO9HhvqtOghSHVfgqA...

CVE-2026-39424

creationtimestamp| type| source ---|---|--- 2026-04-14 04:17:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgjk6wkzi2g...

CVE-2026-34257

creationtimestamp| type| source ---|---|--- 2026-04-14 04:11:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgj7fbeej2k...

GHSA-F5H9-5Q52-QRX7

creationtimestamp| type| source ---|---|--- 2026-04-14 02:48:17+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mjgeksrnu42l...

CVE-2026-6203

creationtimestamp| type| source ---|---|--- 2026-04-14 01:37:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgam3hz7s2o 2026-04-14 06:22:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6203.yaml 2026-04-15...

CVE-2026-40242

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.17.3, the /api/templates/fetch endpoint accepts a caller-supplied url parameter and performs a server-side HTTP GET request to that URL without authentication and without URL scheme or host validation...