CVE-2025-48651

In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-34841

creationtimestamp| type| source ---|---|--- 2026-04-06 17:22:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitrpk7efk2r 2026-04-06 19:28:28+00:00| published-proof-of-concept| Telegram/nNz4AuVWmZsX2vjW9IzWDm0wIi6EKHH8QFJ1lll9JUSWJdI 2026-06-02 08:07:07+00:00| seen|...

CVE-2026-39376

creationtimestamp| type| source ---|---|--- 2026-04-06 15:20:43+00:00| published-proof-of-concept| https://github.com/kagisearch/fastfeedparser/security/advisories/GHSA-4gx2-pc4f-wq37 2026-04-07 21:22:30+00:00| published-proof-of-concept| Telegram/PsCoAl2rNCHfpa-IE94yjZNK4tjM6zifbqO0UkQOdEj8yI...

CVE-2026-35172

creationtimestamp| type| source ---|---|--- 2026-04-06 13:59:30+00:00| published-proof-of-concept| https://github.com/distribution/distribution/security/advisories/GHSA-f2g3-hh2r-cwgc 2026-04-06 21:21:11+00:00| published-proof-of-concept| Telegram/2EnXoILGVbego74Wp-yQgBLadCUgQoVCHSSN8NjOPP4QJIY...

CVE-2026-5638

creationtimestamp| type| source ---|---|--- 2026-04-06 10:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2l73xjh2o...

CVE-2026-31408

creationtimestamp| type| source ---|---|--- 2026-04-06 08:25:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116356802665376324 2026-04-06 10:01:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misz2ohvew2d 2026-05-05 20:00:00+00:00| seen|...

CVE-2026-5605

creationtimestamp| type| source ---|---|--- 2026-04-06 00:00:38+00:00| seen| https://infosec.exchange/users/offseq/statuses/116354818818250445 2026-04-06 00:00:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mirxhp6vtu2f 2026-04-06 01:15:46+00:00| published-proof-of-concept|...

CVE-2026-5574

creationtimestamp| type| source ---|---|--- 2026-04-05 16:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4vbrh3322...

CVE-2026-39305

creationtimestamp| type| source ---|---|--- 2026-04-05 04:59:44+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-jfxc-v5g9-38xr 2026-04-07 19:34:12+00:00| seen| Telegram/RceOsMbVCcV6wQMI9eJfY-7gRIWU138I3ZVebAFZlOd7ZE 2026-04-16 03:07:07+00:00|...

CVE-2026-5532

creationtimestamp| type| source ---|---|--- 2026-04-05 04:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipv3zjfcs2g...

CVE-2026-34588

creationtimestamp| type| source ---|---|--- 2026-04-05 02:01:10+00:00| seen| https://bsky.app/profile/slackers.it/post/3mipnqc75xj2n 2026-04-06 17:32:59+00:00| seen| Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4...

BELL-CVE-2026-34979

Bulletin has no description...

CVE-2026-22663

creationtimestamp| type| source ---|---|--- 2026-04-03 22:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mimsdyfjmg2g 2026-04-03 23:20:47+00:00| seen| Telegram/AcNtumNwDk55YBKt0PcSVxzETqOULILyzC0BNrIIoAU4I 2026-04-04 04:01:01+00:00| seen|...

Do not get high(jacked) off your own supply (chain)

In the span of just a few weeks, we have observed a dizzying array of major supply chain attacks. Prominent examples include the malicious modification of Axios, a popular HTTP client library for JavaScript, as well as cascading compromises from TeamPCP, a "chaos-as-a-service" group that injected...

CVE-2026-35507

creationtimestamp| type| source ---|---|--- 2026-04-03 04:10:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miktznighg2q...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, ts-patch, gitlab-rails-ce, librechat, kubeflow-pipelines, tensorflow-cpu-jupyter, langfuse, kubeflow-centraldashboard, json-server, gitlab-rails-ce-fips, py3-captum, sqlpad, kubeflow-katib, py3-jupyterlab, saf, kibana, redisinsight, drupal,...

CVE-2026-34833

creationtimestamp| type| source ---|---|--- 2026-04-02 20:58:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mik3uzxlow23 2026-04-02 22:22:55+00:00| seen| Telegram/EKU3EO0GNZYVnupMzIC7jT0Kx1d9wsZeA8MakquUKITh-r8...

CVE-2026-34877

An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or session structures allows an attacker who can modify the serialized structures to induce memory corruption, leading to arbitrary code execution. This is cause...

CVE-2025-68753

creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...

CVE-2026-5333

creationtimestamp| type| source ---|---|--- 2026-04-02 14:04:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mijeqgfei427 2026-04-02 15:21:36+00:00| seen| Telegram/c85hrsWNyFYwFes4s7T57trjOQm7U5y5MEbFlOtoT8A7NA 2026-04-08 05:40:09+00:00| seen|...