Lucene search
K

10 matches found

NVD
NVD
added 2026/04/28 7:37 p.m.0 views

CVE-2026-41381

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS0.00034EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/28 6:9 p.m.26 views

CVE-2026-41381 OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS0.00034EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/28 6:9 p.m.0 views

EUVD-2026-26090

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS5.2AI score0.00034EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/28 6:9 p.m.0 views

CVE-2026-41381

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS5.2AI score0.00034EPSS
Exploits0References4
CVE
CVE
added 2026/04/28 6:9 p.m.3 views

CVE-2026-41381

OpenClaw =2026.3.31 (as per GHSA-CQGW-44WG-44RF), and the CVSS data shows a CVSSv3.1 base score around 5.4 (MEDIUM) with network attack vector and low confidentiality/integrity impact. No exploitation details beyond the advisory are provided in the documents. Remediation: upgrade openclaw to the ...

5.4CVSS5.3AI score0.00034EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/28 6:9 p.m.2 views

CVE-2026-41381 OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS5.2AI score0.00034EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/28 12:0 a.m.4 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.31 contained security vulnerabilities. These vulnerabilities were caused by an access control bypass in the Discord voice manager, allowing attackers to circumvent channel-level...

5.4CVSS5.8AI score0.00034EPSS
Exploits0References1
OSV
OSV
added 2026/04/03 3:17 a.m.0 views

GHSA-CQGW-44WG-44RF OpenClaw: Discord voice manager bypasses channel-level member access allowlist

Summary Discord voice manager bypasses channel-level member access allowlist Current Maintainer Triage - Status: open - Normalized severity: medium - Assessment: v2026.3.28 still accepts Discord voice ingress before channel allowlist authorization, and main-only gating means this remains a real...

5.3CVSS5.9AI score0.00034EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/04/03 3:17 a.m.3 views

OpenClaw: Discord voice manager bypasses channel-level member access allowlist

Summary Discord voice manager bypasses channel-level member access allowlist Current Maintainer Triage - Status: open - Normalized severity: medium - Assessment: v2026.3.28 still accepts Discord voice ingress before channel allowlist authorization, and main-only gating means this remains a real...

5.4CVSS5.9AI score0.00034EPSS
Exploits0References4Affected Software1
securityvulns
securityvulns
added 2009/05/21 12:0 a.m.102 views

Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...

10CVSS1AI score0.01439EPSS
Exploits1
Rows per page
Query Builder