CVE-2023-46945

QD 20230821 is vulnerable to Server-side request forgery SSRF via a crafted request...

CVE-2026-40077

creationtimestamp| type| source ---|---|--- 2026-04-09 17:40:19+00:00| published-proof-of-concept| https://github.com/henrygd/beszel/security/advisories/GHSA-5f5r-95pg-xrpm...

CVE-2026-5443

creationtimestamp| type| source ---|---|--- 2026-04-09 16:34:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3afshbpu27 2026-04-14 20:03:31+00:00| seen| Telegram/BoOqWaO3KXSkNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ...

From the field to the report and back again: How incident responders can use the Year in Review

Every year, Cisco Talos publishes Year in Review, a comprehensive look at the previous year's threat landscape. It's drawn from an enormous volume of telemetry, such as endpoint detections, network traffic, email data, and boots-on-the-ground Cisco Talos Incident Response Talos IR engagements. As...

CVE-2026-39863

creationtimestamp| type| source ---|---|--- 2026-04-09 01:27:07+00:00| seen| Telegram/CihYo3BrEf6YGxiGwCEATnWAB3StjZgrXU02lSezsa6vAg 2026-04-09 07:00:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj2acu2yva2x 2026-04-09 07:00:56+00:00| seen|...

CVE-2026-33461

creationtimestamp| type| source ---|---|--- 2026-04-08 18:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miywwtrvw623 2026-04-08 23:32:47+00:00| seen| Telegram/ZztUGlJiiCH0mZAuu7v3RF9KN1NNH1hWH4kt4dDN5ep1QI 2026-04-09 09:08:48+00:00| seen|...

CVE-2026-4341

creationtimestamp| type| source ---|---|--- 2026-04-08 08:06:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixtkafgqh2q...

CVE-2026-2988

creationtimestamp| type| source ---|---|--- 2026-04-08 07:29:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixri3fpdc2z 2026-04-21 07:44:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjyieagyql2s...

CVE-2026-39397

creationtimestamp| type| source ---|---|--- 2026-04-07 23:21:06+00:00| seen| Telegram/WwaVaWmCpWfeYuJ8P8IqcUlHCUAeEgjmrCmKGvAa3A2q2J0 2026-04-08 01:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mix5zs73ag2s 2026-04-08 05:04:31+00:00| seen|...

CVE-2026-39391

creationtimestamp| type| source ---|---|--- 2026-04-07 20:07:49+00:00| published-proof-of-concept| https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-7cm9-v848-cfh2 2026-04-08 18:29:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miywep2s6i2s...

CVE-2026-39323

creationtimestamp| type| source ---|---|--- 2026-04-07 19:35:16+00:00| seen| Telegram/yEepCm2Odjvpf0uI90hS1hr8dhkmidpoORZ8hNAmW5Xwfo 2026-04-07 19:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwk4carkf2q 2026-04-08 09:07:35+00:00| seen|...

CVE-2026-40180

creationtimestamp| type| source ---|---|--- 2026-04-07 15:39:13+00:00| published-proof-of-concept| https://github.com/quarkiverse/quarkus-openapi-generator/security/advisories/GHSA-jx2w-vp7f-456q 2026-04-10 21:24:33+00:00| seen| Telegram/EoubZoYE34cwfOKYIK3rDqJUepVUHxboU2AFga2-YHkJtiw 2026-04-10...

AI Agents and Non-Human Identities Creating Critical Security Gaps, Report

New research from Keeper Security, reveals non-human identities and automated system-to-system interactions are becoming the top security risk for businesses in 2026...

Year in Review: Vulnerabilities old and new and something React2

Speed and age shouldn't be allowed to pair up, but that is the theme of the Talos 2025 Year in Review vulnerability findings. Figure 1. React/React2Shell 2025 at the top, with PHPUnit 2017 and Log4j 2021 following up. The year was characterized by an unending beat-down on infrastructure that reli...

CVE-2026-35389

creationtimestamp| type| source ---|---|--- 2026-04-06 23:17:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miufjsa3dx23 2026-04-06 23:22:01+00:00| seen| Telegram/baQtFgKM2b993Xinx1K-rl9rafgMn1ApK9JhHyMaH5eo0M...

CVE-2026-35398

creationtimestamp| type| source ---|---|--- 2026-04-06 22:32:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miucy4wlng2o...

EUVD-2025-209235

N/A...

CVE-2026-35182

creationtimestamp| type| source ---|---|--- 2026-04-06 21:21:11+00:00| published-proof-of-concept| Telegram/2EnXoILGVbego74Wp-yQgBLadCUgQoVCHSSN8NjOPP4QJIY 2026-04-07 05:53:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miv3ntlnjm2m 2026-04-14 17:37:07+00:00| seen|...

CVE-2026-5669

creationtimestamp| type| source ---|---|--- 2026-04-06 19:09:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitxo746jy25 2026-04-06 19:29:09+00:00| seen| Telegram/t1F-Vxaulmn07lvg5ppSTSOssGvqtwkUpkkBVUVRjFPlk...

CVE-2026-5663

A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible...