Lucene search
+L

12 matches found

NVD
NVD
•added 2026/04/28 7:37 p.m.•20 views

CVE-2026-41381

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS0.00307EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/28 6:09 p.m.•10 views

CVE-2026-41381

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/28 6:09 p.m.•9 views

CVE-2026-41381 OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/28 6:09 p.m.•14 views

EUVD-2026-26090

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/28 6:09 p.m.•40 views

CVE-2026-41381

OpenClaw =2026.3.31 (as per GHSA-CQGW-44WG-44RF), and the CVSS data shows a CVSSv3.1 base score around 5.4 (MEDIUM) with network attack vector and low confidentiality/integrity impact. No exploitation details beyond the advisory are provided in the documents. Remediation: upgrade openclaw to the ...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/04/28 6:09 p.m.•46 views

CVE-2026-41381 OpenClaw < 2026.3.31 - Access Control Bypass in Discord Voice Manager via Channel Allowlist

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS0.00307EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•4 views

CVE-2026-41381: Incorrect Authorization

OpenClaw before 2026.3.31 contains an access control bypass vulnerability in the Discord voice manager that allows attackers to bypass channel-level member access allowlist restrictions. Attackers can send Discord voice ingress requests before channel allowlist authorization is performed, gaining...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•20 views

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.31 contained security vulnerabilities. These vulnerabilities were caused by an access control bypass in the Discord voice manager, allowing attackers to circumvent channel-level...

5.4CVSS5.9AI score0.00307EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/03 3:17 a.m.•10 views

GHSA-CQGW-44WG-44RF OpenClaw: Discord voice manager bypasses channel-level member access allowlist

Summary Discord voice manager bypasses channel-level member access allowlist Current Maintainer Triage - Status: open - Normalized severity: medium - Assessment: v2026.3.28 still accepts Discord voice ingress before channel allowlist authorization, and main-only gating means this remains a real...

5.3CVSS5.8AI score0.00307EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/04/03 3:17 a.m.•20 views

OpenClaw: Discord voice manager bypasses channel-level member access allowlist

Summary Discord voice manager bypasses channel-level member access allowlist Current Maintainer Triage - Status: open - Normalized severity: medium - Assessment: v2026.3.28 still accepts Discord voice ingress before channel allowlist authorization, and main-only gating means this remains a real...

5.4CVSS5.8AI score0.00307EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/20 12:00 a.m.•8 views

CVE-2011-3310: Improper Control of Generation of Code

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote...

9CVSS6.3AI score0.15163EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2009/05/21 12:00 a.m.•123 views

Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability Advisory ID: cisco-sa-20090520-cw http://www.cisco.com/warp/public/707/cisco-sa-20090520-cw.shtml Revision 1.0 For Public Release 2009 May 20 1600 UTC GMT Summary =======...

10CVSS1AI score0.12546EPSS
SaveExploits1
Rows per page
Query Builder