{"metadata": {"count": 468160, "page": 1, "per_page": 1000}, "data": [{"uuid": "dd4001e6-c1cc-40b9-a54c-f973d24666e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T10:23:32.666604+00:00", "type": "seen", "source": "https://bsky.app/profile/kubonai.bsky.social/post/3mmvsjfsess2s", "content": "Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign\n\nA large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980...\n\n\ud83d\udd17 https://ipsec.live/blog/2026-05-28-ghost-cms-sql-injection-flaw-exploited-in-largescale-clickfi\n\n#infosec #cybersecurity", "vulnerability": "CVE-2026-26980", "author": {"login": "automation"}}, {"uuid": "9986601d-d1d0-42f5-a1dd-828147eac256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T10:07:15.337780+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmvrm25weu2v", "content": "\ud83d\udccc CVE-2026-7288 - A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub_4151FC of the file /boafrm/formVpnConfigSetup. T... https://www.cyberhub.blog/cves/CVE-2026-7288", "vulnerability": "CVE-2026-7288", "author": {"login": "automation"}}, {"uuid": "0d6305b9-24e9-4167-a22a-68f62207c977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:37:42+00:00", "type": "seen", "source": "https://gist.github.com/FR-Flo/8caa7d57952830f649a4c7191c8a8550", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Marques Av - Affichage du centre (tag) sur les Exp\u00e9ditions en cas de multi-shipping \u2013 Marketplace / OMS](https://trello.com/c/f65hfaci/2336-marques-av-affichage-du-centre-tag-sur-les-exp%C3%A9ditions-en-cas-de-multi-shipping-marketplace-oms) **\u2600\ufe0fIn review**\n        - *feat(picking): shipment inventory address name* [\\#7369](https://github.com/Wishibam/Marketplace-api/pull/7369)\n    - [MP - Afficher le coupon utilis\u00e9 sur les commandes](https://trello.com/c/w1kVe5oZ/2328-mp-afficher-le-coupon-utilis%C3%A9-sur-les-commandes) **\ud83e\udd73Testing**\n        - *feat(order): store, expose and search promotion coupon code from Sylius* [\\#7404](https://github.com/Wishibam/Marketplace-api/pull/7404)\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -&gt; autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)\n    - *:bug: fix(deps): bump twig/twig 3.27.0 (5 sandbox CVEs)* [\\#7498](https://github.com/Wishibam/Marketplace-api/pull/7498)", "vulnerability": "CVE-2026-48736", "author": {"login": "automation"}}, {"uuid": "9531a7e5-a43b-416c-90b5-9fbadcff8033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:17:24.594013+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmvot54h5h2m", "content": "CVE-2025-48977: Apache Ignite: Rest Http default Arbitrary file read vulnerability", "vulnerability": "CVE-2025-48977", "author": {"login": "automation"}}, {"uuid": "44be950e-7b90-41d3-9a81-65d8b5121feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:08:27.095964+00:00", "type": "seen", "source": "https://bsky.app/profile/render87.bsky.social/post/3mmvod4u4tk2s", "content": "Die j\u00fcngsten Warnungen vor Malware durch Supply-Chain-Attacken wie CVE-2026-8398 unterstreichen die Bedeutung einer umfassenden Risikobewertung in der Lieferkette, da laut einer Studie etwa 80 Prozent der Unternehmen von solchen Angriffen betroffen sind.\u2026", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "e730b402-434c-4bc0-abc6-39d292939628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:05:25.161043+00:00", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmvo5oyd322u", "content": "CVE-2026-8398 mit einem CVSS-Risiko von 9,8: Wie sicher sind unsere Lieferketten wirklich?.\n\nCISA warnt vor Malware durch Supply-Chain-Attacken\n\n#Potatosecurity #Geopolitics\n\n\ud83d\udd17 https://www.heise.de/news/CISA-warnt-vor-Malware-durch-Supply-Chain-Attacken-11309253.html?wt_mc=rss.red.ho.ho.atom.be\u2026", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "84688bda-be8d-4c9d-bb5a-4e2008fc4ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:05:24.552204+00:00", "type": "seen", "source": "https://bsky.app/profile/render87.bsky.social/post/3mmvo5ojqy62u", "content": "CVE-2026-8398 mit einem CVSS-Risiko von 9,8: Wie sicher sind unsere Lieferketten wirklich?.\n\nCISA warnt vor Malware durch Supply-Chain-Attacken\n\n#Cybersecurity #Geopolitics\n\n\ud83d\udd17 https://www.heise.de/news/CISA-warnt-vor-Malware-durch-Supply-Chain-Attacken-11309253.html?wt_mc=rss.red.ho.ho.atom.be\u2026", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "f257cb89-bddb-418a-9f7f-61fd160f7162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:03:09.811085+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmvnznhbnr2w", "content": "CVE-2025-26885 - Insecure Deserialization in Beaver Builder WordPress Assistant. Object Injection via untrusted data. CVSS 7.2. Unpatched in versions \u2264 1.5.1. Disable or isolate immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-26885/", "vulnerability": "CVE-2025-26885", "author": {"login": "automation"}}, {"uuid": "a13a348e-c325-4552-9091-559dd674c69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:00:45.419864+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116651381800731106", "content": "\ud83d\udea8 CRITICAL: CVE-2026-4408 in Red Hat Enterprise Linux 10 via Samba misconfig enables remote command execution if \"check password script\" uses %u. Audit your configs now! Details: https://radar.offseq.com/threat/cve-2026-4408-improper-neutralization-of-special-e-ffcecb34 #OffSeq #Linux #Samba #Infosec", "vulnerability": "cve-2026-4408", "author": {"login": "automation"}}, {"uuid": "0db1bf2d-4296-4c9a-81b8-0ef84f15bb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T09:00:31.507884+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvnuwsyqa2c", "content": "CRITICAL: Samba flaw in Red Hat Enterprise Linux 10 (CVE-2026-4408) enables RCE if \"check password script\" uses %u. Audit configs &amp; remove risky settings. https://radar.offseq.com/threat/cve-2026-4408-improper-neutralization-of-special-e-ffcecb34 #OffSeq #Linux #Samba", "vulnerability": "cve-2026-4408", "author": {"login": "automation"}}, {"uuid": "04270e18-7050-4f9e-9071-1d875ce1c7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T08:44:28.244656+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mmvmyalj2k22", "content": "\ud83d\udea8 Luka w Chrome (CVE-2026-9120) pozwala na zdalne wykonanie kodu\n\nKrytyczna luka w Google Chrome umo\u017cliwia przej\u0119cie kontroli nad przegl\u0105dark\u0105 po wej\u015bciu na spreparowan\u0105 stron\u0119. Aktualizacja\n\nhttps://cyberowi.pl/luka-w-chrome-cve-2026-9120-pozwala-na-zdalne-wykonanie-kodu/\n\n#cyberbezpieczenstwo", "vulnerability": "cve-2026-9120", "author": {"login": "automation"}}, {"uuid": "58573a8f-e473-4b1d-ac56-6533a99806c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T08:08:06+00:00", "type": "seen", "source": "https://gist.github.com/FR-Flo/6011c64220f6bdf2627caa157ca8c89a", "content": "\ud83e\udd84 A-Team\n--------\n\n- **Trello**\n    - [FEAT-0007-01 \u2014 Enrichissement donn\u00e9es vendeur et plateforme](https://trello.com/c/WBruFiCS/2298-feat-0007-01-enrichissement-donn%C3%A9es-vendeur-et-plateforme) **\ud83e\udd73Testing**\n        - *Add complete toggleable invoice generation* [\\#7405](https://github.com/Wishibam/Marketplace-api/pull/7405)\n \n\ud83d\udcaa Les Muscl\u00e9.e.s\n----------------\n\n- **Trello**\n    - [Suivi des dates d\u2019ajout produits \u2013 Corner](https://trello.com/c/rMSaEYBw/2370-suivi-des-dates-dajout-produits-corner) **\ud83e\udd73Testing**\n        - *feat(corner): add created\\_at to products\\_by\\_corner* [\\#7425](https://github.com/Wishibam/Marketplace-api/pull/7425)\n    - [Mapping corner - Mode expert -&gt; autoriser le null](https://trello.com/c/mPnnplUd/2368-mapping-corner-mode-expert-autoriser-le-null) **\ud83e\udd73Testing**\n        - *fix(mapping): treat null return in expert mode as unmapped column* [\\#7427](https://github.com/Wishibam/Marketplace-api/pull/7427)\n \n- **Misc**\n    - *:bug: fix(deps): bump symfony 6.4.41 (CVE-2026-48736, -48784, -48489)* [\\#7493](https://github.com/Wishibam/Marketplace-api/pull/7493)\n    - *fix(migration): created\\_at before setting NOT NULL on products\\_by\\_corner* [\\#7495](https://github.com/Wishibam/Marketplace-api/pull/7495)", "vulnerability": "CVE-2026-48736", "author": {"login": "automation"}}, {"uuid": "6fed7e7b-af93-4d27-9d58-b670865e67e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T08:07:08.006067+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmvkvhxob72p", "content": "\ud83d\udccc CVE-2026-6136 - A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function frmL7ImForm of the file /goform/L7Im. The manipu... https://www.cyberhub.blog/cves/CVE-2026-6136", "vulnerability": "CVE-2026-6136", "author": {"login": "automation"}}, {"uuid": "2d5f3eb3-596a-4ec4-99b7-9cdb80ba6656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T08:03:18.897472+00:00", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mmvkontdqn2j", "content": "BREAKING: Major vulnerability CVE-2026-26980 exploited in Ghost CMS, enabling malicious JavaScript injection. Patch ASAP. #CyberSecurity #InfoSec", "vulnerability": "CVE-2026-26980", "author": {"login": "automation"}}, {"uuid": "d850bdaf-de3b-41cc-a76a-f2c371237316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:53:54.189306+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvk5sxddj2t", "content": "CVE-2026-9803 - Keycloak: keycloak: denial of service via malformed authorization header\nCVE ID : CVE-2026-9803\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated at...", "vulnerability": "CVE-2026-9803", "author": {"login": "automation"}}, {"uuid": "f7d05b8d-7260-482c-aa84-4b1231da9950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:49:51.857177+00:00", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mmvjwll2642x", "content": "2\u672c\u306e\u6bba\u3057\u65b9\u3002\n\nPython\uff08CVE-2026-26030\uff09\uff1a\u30d9\u30af\u30c8\u30eb\u691c\u7d22\u306e\u30d5\u30a3\u30eb\u30bf\u30fc\u5024\u304c eval() \u306b\u6e21\u3063\u3066\u305f\u3002\u30d7\u30ed\u30f3\u30d7\u30c81\u672c\u3067 calc.exe \u8d77\u52d5\u30022026\u5e74\u306b eval() injection\u2014\u2014\u5197\u8ac7\u304b\u3088\u3002\ud83d\udc8e\n\n.NET\uff08CVE-2026-25592\uff09\uff1a\u30d5\u30a1\u30a4\u30ebDL\u95a2\u6570\u306b [KernelFunction] \u5c5e\u6027\u304c\u3064\u3044\u3066\u3066 LLM \u304b\u3089\u76f4\u63a5\u547c\u3079\u305f\u3002\u30d1\u30b9\u691c\u8a3c\u30bc\u30ed\u3002Startup \u30d5\u30a9\u30eb\u30c0\u306b payload \u66f8\u304d\u8fbc\u307f \u2192 \u6b21\u306e\u30ed\u30b0\u30a4\u30f3\u3067 RCE \u5b8c\u8d70\u3002\ud83d\udd4a\ufe0f\n\n\u5c5e\u6027\u30bf\u30b01\u500b\u306e\u4ed8\u3051\u9593\u9055\u3044\u3067\u3001\u30db\u30b9\u30c8\u307e\u3067\u8cab\u901a\u3057\u3066\u305f\u3002", "vulnerability": "CVE-2026-25592", "author": {"login": "automation"}}, {"uuid": "74fe9059-d09f-42d7-9340-26a312e3e275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:49:51.704385+00:00", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mmvjwll2642x", "content": "2\u672c\u306e\u6bba\u3057\u65b9\u3002\n\nPython\uff08CVE-2026-26030\uff09\uff1a\u30d9\u30af\u30c8\u30eb\u691c\u7d22\u306e\u30d5\u30a3\u30eb\u30bf\u30fc\u5024\u304c eval() \u306b\u6e21\u3063\u3066\u305f\u3002\u30d7\u30ed\u30f3\u30d7\u30c81\u672c\u3067 calc.exe \u8d77\u52d5\u30022026\u5e74\u306b eval() injection\u2014\u2014\u5197\u8ac7\u304b\u3088\u3002\ud83d\udc8e\n\n.NET\uff08CVE-2026-25592\uff09\uff1a\u30d5\u30a1\u30a4\u30ebDL\u95a2\u6570\u306b [KernelFunction] \u5c5e\u6027\u304c\u3064\u3044\u3066\u3066 LLM \u304b\u3089\u76f4\u63a5\u547c\u3079\u305f\u3002\u30d1\u30b9\u691c\u8a3c\u30bc\u30ed\u3002Startup \u30d5\u30a9\u30eb\u30c0\u306b payload \u66f8\u304d\u8fbc\u307f \u2192 \u6b21\u306e\u30ed\u30b0\u30a4\u30f3\u3067 RCE \u5b8c\u8d70\u3002\ud83d\udd4a\ufe0f\n\n\u5c5e\u6027\u30bf\u30b01\u500b\u306e\u4ed8\u3051\u9593\u9055\u3044\u3067\u3001\u30db\u30b9\u30c8\u307e\u3067\u8cab\u901a\u3057\u3066\u305f\u3002", "vulnerability": "CVE-2026-26030", "author": {"login": "automation"}}, {"uuid": "b42d48b3-c109-40c1-a6a9-1babe0768ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:49:51.162527+00:00", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mmvjwkyd662s", "content": "Microsoft \u304c\u81ea\u5206\u3067\u66f8\u3044\u305f\u2014\u2014\u300cWhen prompts become shells\u300d\u3002\n\nSemantic Kernel \u306b prompt injection \u2192 RCE \u304c2\u672c\u3002CVE-2026-25592(.NET)\u3001CVE-2026-26030(Python)\u3002Copilot \u306e\u88cf\u3067\u52d5\u304fAI\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3060\u3002\u26a0\ufe0f\n\nhttps://www.microsoft.com/en-us/security/blog/2026/05/07/prompts-become-shells-rce-vulnerabilities-ai-agent-frameworks/", "vulnerability": "CVE-2026-26030", "author": {"login": "automation"}}, {"uuid": "6ad49244-b58d-48d2-ba1f-c5263ba059cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:49:51.016230+00:00", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mmvjwkyd662s", "content": "Microsoft \u304c\u81ea\u5206\u3067\u66f8\u3044\u305f\u2014\u2014\u300cWhen prompts become shells\u300d\u3002\n\nSemantic Kernel \u306b prompt injection \u2192 RCE \u304c2\u672c\u3002CVE-2026-25592(.NET)\u3001CVE-2026-26030(Python)\u3002Copilot \u306e\u88cf\u3067\u52d5\u304fAI\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3060\u3002\u26a0\ufe0f\n\nhttps://www.microsoft.com/en-us/security/blog/2026/05/07/prompts-become-shells-rce-vulnerabilities-ai-agent-frameworks/", "vulnerability": "CVE-2026-25592", "author": {"login": "automation"}}, {"uuid": "6d645584-5d21-4a96-95ab-9718a06f0456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:48:53.808522+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvjuuir7f2p", "content": "CVE-2026-9802 - Keycloak: keycloak: unauthorized account access via replayed refresh tokens after cluster restart\nCVE ID : CVE-2026-9802\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. When revokeRefreshToken=true is enabl...", "vulnerability": "CVE-2026-9802", "author": {"login": "automation"}}, {"uuid": "ebafc0f7-2b4d-439f-8485-fcdbf5f77ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:46:35.133967+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116651091197554066", "content": "Our CTI team identified a lot of activities targeting Keycloak (CVE-2026-9704) https://vuldb.com/vuln/366455/cti", "vulnerability": "CVE-2026-9704", "author": {"login": "automation"}}, {"uuid": "de4cec31-2c3a-4e91-aca7-ccf2ad426e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:43:53.175043+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvjlvvqlf2q", "content": "CVE-2026-9673 - Json-2-Csv CSV Injection\nCVE ID : CVE-2026-9673\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjection option which ca...", "vulnerability": "CVE-2026-9673", "author": {"login": "automation"}}, {"uuid": "e422f3c6-36ff-4c64-8919-9848f7f1b571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:38:52.734346+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvjcxd2on2t", "content": "CVE-2026-9792 - Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisition\nCVE ID : CVE-2026-9792\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak's Client Policies, specifically withi...", "vulnerability": "CVE-2026-9792", "author": {"login": "automation"}}, {"uuid": "687d8366-42a8-43bf-9295-9397cccb88fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:38:45.815005+00:00", "type": "seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mmvj65tvwwk2", "content": "NGINX Under Active Attack: CVE-2026-42945 and CVE-2026-9256 Put Your Infrastructure at Risk Two critical NGINX heap buffer overflows are under active exploitation. Learn what's at risk, affecte...\n\n#Security #Bulletin #CVE-2026-42945 #CVE-2026-9256 #NGINX [\u2026] \n\n[Original post on indusface.com]", "vulnerability": "CVE-2026-9256", "author": {"login": "automation"}}, {"uuid": "33cbef4f-3c28-405d-92af-911a768e3fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:38:45.661595+00:00", "type": "seen", "source": "https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3mmvj65tvwwk2", "content": "NGINX Under Active Attack: CVE-2026-42945 and CVE-2026-9256 Put Your Infrastructure at Risk Two critical NGINX heap buffer overflows are under active exploitation. Learn what's at risk, affecte...\n\n#Security #Bulletin #CVE-2026-42945 #CVE-2026-9256 #NGINX [\u2026] \n\n[Original post on indusface.com]", "vulnerability": "CVE-2026-42945", "author": {"login": "automation"}}, {"uuid": "5011e0dc-ebf0-416e-b3e0-ec1569d8ce24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:37:06.530066+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmvj7r6uqr2w", "content": "\ud83d\udccc CVE-2026-42426 - OpenClaw before 2026.4.8 contains an improper authorization vulnerability where the node.pair.approve method accepts operator.write scope instead of t... https://www.cyberhub.blog/cves/CVE-2026-42426", "vulnerability": "CVE-2026-42426", "author": {"login": "automation"}}, {"uuid": "68dd15f8-6477-4e0b-bd49-e5b88997d0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:33:52.218496+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvizyjvor2p", "content": "CVE-2026-7533 - Easy Digital Downloads\nCVE ID : CVE-2026-7533\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7. This ...", "vulnerability": "CVE-2026-7533", "author": {"login": "automation"}}, {"uuid": "e0d2fd4f-eed6-41c0-b5f8-f6accba15021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:30:30.299322+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvitxc4jk26", "content": "\ud83d\udea8 HIGH severity: CVE-2026-9009 in Crawlomatic Multipage Scraper Post Generator lets author-level users execute arbitrary PHP code. Restrict access &amp; disable plugin until patched. https://radar.offseq.com/threat/cve-2026-9009-cwe-434-unrestricted-upload-of-file--9027f144 #OffSeq #WordPress #Security", "vulnerability": "cve-2026-9009", "author": {"login": "automation"}}, {"uuid": "22443f3e-9710-4093-873e-0fc7030b2ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:30:29.502822+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116651027793121168", "content": "\u26a0\ufe0f CVE-2026-9009 (HIGH): Crawlomatic Multipage Scraper Post Generator for WordPress lets author+ users trigger arbitrary PHP code via unsafe shortcodes. No patch yet \u2014 restrict author access &amp; consider disabling plugin. Details: https://radar.offseq.com/threat/cve-2026-9009-cwe-434-unrestricted-upload-of-file--9027f144 #OffSeq #WordPress #Vuln", "vulnerability": "cve-2026-9009", "author": {"login": "automation"}}, {"uuid": "3eebe0cd-4433-48a1-9105-c171e8102fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:28:51.700144+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmviqzybpt2v", "content": "CVE-2026-3173 - Meta Field Block\nCVE ID : CVE-2026-3173\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : The Meta Field Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.5.1. This is due...", "vulnerability": "CVE-2026-3173", "author": {"login": "automation"}}, {"uuid": "0ef5d7f3-9d25-4f1a-8d8e-01a5d4cc9b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:24:33.942778+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvijedyoo2q", "content": "CVE-2026-9796 - Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability\nCVE ID : CVE-2026-9796\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. An authenticated administrator...", "vulnerability": "CVE-2026-9796", "author": {"login": "automation"}}, {"uuid": "9b119b69-3603-4565-84b3-b4a2efcf69d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:20:48.648788+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvicngffi2e", "content": "CVE-2026-9009 - Crawlomatic Multipage Scraper Post Generator\nCVE ID : CVE-2026-9009\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all vers...", "vulnerability": "CVE-2026-9009", "author": {"login": "automation"}}, {"uuid": "a7a2ea39-7e6a-4846-b2d4-fd88edf86093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:17:28.188153+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvi4od46s2h", "content": "CVE-2026-9798 - Keycloak: keycloak: brute-force protection bypass in ciba flow\nCVE ID : CVE-2026-9798\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak, an open-source identity and access management solution. When a user acco...", "vulnerability": "CVE-2026-9798", "author": {"login": "automation"}}, {"uuid": "be513d38-a5ce-4351-bb49-cb50ad971c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:14:27.598888+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhxby6g72v", "content": "CVE-2026-9795 - Keycloak: keycloak: privilege escalation via improper scope mapping enforcement\nCVE ID : CVE-2026-9795\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) featur...", "vulnerability": "CVE-2026-9795", "author": {"login": "automation"}}, {"uuid": "120bc551-0cc6-498d-9c09-a757d6b593c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:11:43.293132+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhsficy22n", "content": "CVE-2026-9644 - LiveSmart Video Chat\nCVE ID : CVE-2026-9644\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : The LiveSmart Video Chat Live Video Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'livesmart_widget' s...", "vulnerability": "CVE-2026-9644", "author": {"login": "automation"}}, {"uuid": "9b4fbd09-21a0-40b9-b097-6fc935a55bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:09:13.056144+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhnw2thj2t", "content": "CVE-2026-9241 - FOX \u2013 Currency Switcher Professional for WooCommerce\nCVE ID : CVE-2026-9241\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : The FOX \u2013 Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authoriza...", "vulnerability": "CVE-2026-9241", "author": {"login": "automation"}}, {"uuid": "ff95854c-0f73-486b-b29e-3fa75b46b6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:06:54.010349+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhjrk23y2v", "content": "CVE-2026-9801 - Keycloak: keycloak: denial of service via malformed ldap password policy response\nCVE ID : CVE-2026-9801\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. A remote attacker with high privileges, such as a rea...", "vulnerability": "CVE-2026-9801", "author": {"login": "automation"}}, {"uuid": "0a8d5bce-71b7-4aa9-9f0b-056981379010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:04:44.845280+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhfwk2vu2e", "content": "CVE-2026-9794 - Keycloak: keycloak: information disclosure via saml ecp endpoint\nCVE ID : CVE-2026-9794\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerabil...", "vulnerability": "CVE-2026-9794", "author": {"login": "automation"}}, {"uuid": "1b1cb471-0159-48c7-a4b4-70ff3aab9591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:02:44.693858+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvhcdq5r42p", "content": "CVE-2026-7802 - Frontend Admin by DynamiApps\nCVE ID : CVE-2026-7802\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including...", "vulnerability": "CVE-2026-7802", "author": {"login": "automation"}}, {"uuid": "5c7b7936-4ce5-4adc-8edb-fdad8d334f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:00:51.626519+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvh6y3gfb2k", "content": "CVE-2026-9791 - Keycloak-rhel9: organization data leak after feature disabled in keycloak\nCVE ID : CVE-2026-9791\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. An authenticated user with existing organization memb...", "vulnerability": "CVE-2026-9791", "author": {"login": "automation"}}, {"uuid": "9cd9ff6f-ef08-45f6-b4fc-18308226043f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:00:40.319322+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvh6mbxne2l", "content": "\ud83d\udfe0 CVE-2026-7802 - High (8.8)\n\nThe Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7802/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-7802", "author": {"login": "automation"}}, {"uuid": "aacc7c57-bac9-42cf-b7e1-39f55f6f2e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T07:00:32.306128+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvh6e6h3x2n", "content": "\ud83d\udfe0 CVE-2026-9009 - High (8.8)\n\nThe Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Cod...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9009/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9009", "author": {"login": "automation"}}, {"uuid": "1a266f1f-e53d-481b-85e8-ae7cc1d252f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:59:05.675081+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvh3s4ceh2p", "content": "CVE-2026-9228 - Timetable and Event Schedule by MotoPress\nCVE ID : CVE-2026-9228\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to Insecure Direct Object Referenc...", "vulnerability": "CVE-2026-9228", "author": {"login": "automation"}}, {"uuid": "7933daaa-c9f4-4d76-a682-41566efba7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:57:24.373807+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgysdyzn2n", "content": "CVE-2026-9793 - Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing\nCVE ID : CVE-2026-9793\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. When a JSON Web Encryption (JWE) encrypte...", "vulnerability": "CVE-2026-9793", "author": {"login": "automation"}}, {"uuid": "c7ce1b7e-6d7d-463c-944b-0a529f328006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:55:49.405771+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgvxmtnm2c", "content": "CVE-2026-32999 - Comet Backup Code Execution Vulnerability\nCVE ID : CVE-2026-32999\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenan...", "vulnerability": "CVE-2026-32999", "author": {"login": "automation"}}, {"uuid": "65849b74-9f18-40dc-9c95-af82af299741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:54:19.107705+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvgtbfpf62h", "content": "CVE-2026-5737 - Independent Analytics\nCVE ID : CVE-2026-5737\n \n Published : May 28, 2026, 5:16 a.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14....", "vulnerability": "CVE-2026-5737", "author": {"login": "automation"}}, {"uuid": "d5272d5d-782a-4223-982c-9d71c1cd10d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:48:41.501273+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmvgj7lhwp25", "content": "Rocket.Chat &lt;8.5.0\u7b49\u3067\u3001\u8a8d\u8a3c\u6e08\u307fDDP\u30e6\u30fc\u30b6\u30fc\u304c\u30e1\u30c3\u30bb\u30fc\u30b8ID\u3092\u6307\u5b9a\u3057\u3066\u3001\u3069\u306e\u90e8\u5c4b\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u5185\u5bb9\u3082\u8aad\u307f\u53d6\u308c\u308b\u8106\u5f31\u6027\u3002\nCVE-2026-32995 CVSS 7.5 | HIGH", "vulnerability": "CVE-2026-32995", "author": {"login": "automation"}}, {"uuid": "38bc7308-88ac-4db0-b258-63fcd679eddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:48:02.696826+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmvgi2bzcs2k", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cLogin No Captcha reCAPTCHA\u300dver1.8.0\u4ee5\u524d\u306fStored XSS\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u7ba1\u7406\u8005\u304c\u30c0\u30c3\u30b7\u30e5\u30dc\u30fc\u30c9\u95b2\u89a7\u6642\u3001\u653b\u6483\u8005\u306f\u30b9\u30af\u30ea\u30d7\u30c8\u5b9f\u884c\u304c\u2026\nCVE-2026-2374 CVSS 7.2 | HIGH", "vulnerability": "CVE-2026-2374", "author": {"login": "automation"}}, {"uuid": "8de21b1c-5c8d-43ce-8bdd-bbe6a3af5cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:47:37.689341+00:00", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mmvghcls5a2r", "content": "[RSS] Security Bulletin: IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator (CVE-2026-7770)\n\n\n www.ibm.com -&gt; \n\n\nOriginal-&gt;", "vulnerability": "CVE-2026-7770", "author": {"login": "automation"}}, {"uuid": "edba9a30-cbaf-45c4-8d9b-9c96cbd196ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:29:57.119670+00:00", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmp3dd2k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "e2e6c796-918b-444d-bd29-1f4a6956067c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:29:56.268314+00:00", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmozet2k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "42888755-3b01-43b1-9ba3-514be6ae9ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:29:55.589484+00:00", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmoxgd2k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "4bc4ad35-9c59-49ee-aa4f-eae68acd57cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:29:55.050778+00:00", "type": "seen", "source": "https://bsky.app/profile/lalgorisme.bsky.social/post/3mmvfhmokq32k", "content": "\ud83e\uddf5Durant uns 4 anys, qualsevol ha pogut descarregar imatges \"privades\" de Gitea sense compte ni contrasenya. Hi ha m\u00e9s de 30.000 inst\u00e0ncies afectades en 30 pa\u00efsos. L'etiqueta \"privat\" senzillament no funcionava com s'esperava al registre de contenidors.\nCVE-2026-27771", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "0461b522-eb0c-405a-a288-90a00e6fce25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:07:07.510424+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmve6uvzr325", "content": "\ud83d\udccc CVE-2021-21735: ZTE H168N Router Vulnerability Exposes PPPoE and WLAN Secrets https://www.cyberhub.blog/article/26416-cve-2021-21735-zte-h168n-router-vulnerability-exposes-pppoe-and-wlan-secrets", "vulnerability": "cve-2021-21735", "author": {"login": "automation"}}, {"uuid": "42eab82b-0471-4295-8f67-e16f039aa432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:00:30.480810+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmvdsz2lzi2p", "content": "Microsoft UFO 3.0.1-4-ge2626659: HIGH severity path traversal lets authenticated users create files beyond logs/. No patch \u2014 restrict access &amp; monitor inputs. https://radar.offseq.com/threat/cve-2026-46402-cwe-22-improper-limitation-of-a-pat-6437f7ab #OffSeq #Microsoft #Vulnerability", "vulnerability": "cve-2026-46402", "author": {"login": "automation"}}, {"uuid": "d20c1810-af2c-44f4-9e49-8ddf69abf79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T06:00:29.290083+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116650673866596517", "content": "\u26a0\ufe0f HIGH severity: Microsoft UFO 3.0.1-4-ge2626659 has a path traversal vuln (CVE-2026-46402). Authenticated users can write files outside logs/. No patch yet \u2014 restrict access &amp; monitor input. https://radar.offseq.com/threat/cve-2026-46402-cwe-22-improper-limitation-of-a-pat-6437f7ab #OffSeq #Microsoft #PathTraversal #CVE202646402", "vulnerability": "cve-2026-46402", "author": {"login": "automation"}}, {"uuid": "e710a858-11e8-4df8-82f1-9f1b51c1a0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:56:43.294518+00:00", "type": "seen", "source": "https://bsky.app/profile/metasplot.bsky.social/post/3mmvdnnanv22p", "content": "CVE-2026-31431\u3001\u6050\u308d\u3057\u3044", "vulnerability": "CVE-2026-31431", "author": {"login": "automation"}}, {"uuid": "1b88eee1-52bf-45d7-97e5-a8cb05d8e219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:55:15.412977+00:00", "type": "seen", "source": "https://bsky.app/profile/metasplot.bsky.social/post/3mmvdlkzobc2p", "content": "CVE-2026-31431\u3001\u6050\u308d\u3057\u3044", "vulnerability": "CVE-2026-31431", "author": {"login": "automation"}}, {"uuid": "88db9cb5-bedb-4a3a-a5af-405997b58d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:42:43.216373+00:00", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmvct7g2d426", "content": "Microsoft has confirmed attackers are actively exploiting CVE-2026-42897, a XSS flaw in on-premises Exchange Server's Outlook Web Access. A crafted email can run arbitrary JavaScript when opened in OWA. No permanent patch; CISA added the bug to KEV with a May 29 deadline for federal agencies.", "vulnerability": "CVE-2026-42897", "author": {"login": "automation"}}, {"uuid": "caf756bf-e2c3-43ef-8e72-c8769dad0510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:05:50.654950+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmvarcess42u", "content": "CVE-2024-13787 - Critical Insecure Deserialization in Veda WordPress theme. CVSS 9.8. Authenticated attackers can inject PHP objects. Unpatched. Disable theme or use firewall. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2024-13787/", "vulnerability": "CVE-2024-13787", "author": {"login": "automation"}}, {"uuid": "01227044-914f-4fd5-9843-c94f3af691b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:01:13.741558+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvaizrzqz26", "content": "\ud83d\udfe0 CVE-2026-44724 - High (7.8)\n\nsysteminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on L...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44724/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44724", "author": {"login": "automation"}}, {"uuid": "4859cc88-f884-4ae0-995e-c3b01807ff70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:01:06.465456+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvaisizsf2g", "content": "\ud83d\udd34 CVE-2026-44590 - Critical (9.3)\n\nSherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44590/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44590", "author": {"login": "automation"}}, {"uuid": "6c928f32-2381-49fc-a1fd-a58659b69761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:00:58.431341+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmvaikrtmk2s", "content": "\ud83d\udfe0 CVE-2026-45108 - High (8.4)\n\nHimmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 2.0.0 to be...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45108/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45108", "author": {"login": "automation"}}, {"uuid": "c91e3dd0-c21a-4cc1-a543-10bd249af774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T05:00:04.988037+00:00", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mmvagyksh22s", "content": "\ud83d\udfe2 BadHost vulnerability in the Starlette framework poses a threat to AI agents\n\n\ud83d\udde8\ufe0f Researchers are warning about a critical vulnerability, CVE-2026-48710, discovered in the open-source Starlette framewor\u2026\n\n#news", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "d9533387-13a8-4f9b-b26b-f2a5b2c10e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:55:35.601051+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116650418837390666", "content": "A lot of offensive activities were identified targeting nrwl nx-console (CVE-2026-48027) https://vuldb.com/vuln/366456/cti", "vulnerability": "CVE-2026-48027", "author": {"login": "automation"}}, {"uuid": "b45ca9e4-03d9-4fca-9923-bbeea1085e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:55:35.313261+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116650418820662829", "content": "Attention, elevated activities detected targeting D\u00edgitro NGC Explorer (CVE-2025-4528) https://vuldb.com/vuln/308273/cti", "vulnerability": "CVE-2025-4528", "author": {"login": "automation"}}, {"uuid": "f6e7f14e-5e8d-4d22-ac7d-b321431b4baf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:55:00+00:00", "type": "seen", "source": "https://cert.pl/en/posts/2026/05/CVE-2026-4377", "content": "", "vulnerability": "CVE-2026-4377", "author": {"login": "syspect"}}, {"uuid": "cb6e6e25-6928-440f-90f3-5765821b0178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:53:10.242034+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmva2n3yyv2z", "content": "CVE-2026-48172 \u2014 LiteSpeed User-End cPanel Plugin Privilege Escalation", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "696dec73-2526-4976-9415-d386545788cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:49:55+00:00", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0168", "content": "GitLab heeft meerdere kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition, specifiek in versies 12.7 tot voor 18.10.7, 18.11 tot voor 18.11.4, en 19.0 tot voor 19.0.1. De kwetsbaarheden betreffen verschillende aspecten van authenticatie, autorisatie en validatie binnen GitLab. Een denial of service kan worden veroorzaakt door onvoldoende validatie, waarbij een geauthenticeerde gebruiker de beschikbaarheid van de dienst kan verstoren. Daarnaast kunnen gebruikers met developer-permissies ongeautoriseerd toegang krijgen tot gevoelige deploymentdata door onjuiste autorisatiecontroles. Verder is er een probleem met onjuiste gebruikersidentiteitsresolutie, waardoor een geauthenticeerde gebruiker Duo AI-workflows kan activeren alsof hij een andere gebruiker is, wat leidt tot identiteitsvervalsing binnen deze workflows. Ook kunnen developer-rollen flowbeperkingen omzeilen die op groepsniveau zijn ingesteld, wat de toegangscontrole en workflow governance be\u00efnvloedt. Een andere kwetsbaarheid maakt het mogelijk voor onbevoegde gebruikers om private projecten te enumereren, wat kan leiden tot blootstelling van gevoelige projectinformatie. Ten slotte kunnen geauthenticeerde gebruikers toegang krijgen tot continuous integration (CI) data die niet voor hen bedoeld is, door een fout in de toegangscontrole voor CI-data.\n\nDe kwetsbaarheid met kenmerk CVE-2026-2710 wordt wel genoemd in de releasenotes van GitLab, maar is ingetrokken en heeft geen verdere impact.", "vulnerability": "CVE-2026-2710", "author": {"login": "automation"}}, {"uuid": "940ab068-0f9c-440d-abb4-4bb8d28e6d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:30:29.303180+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmv6s36qac22", "content": "Acer NitroSense V3 (\u22643.01.3001) has a HIGH severity vuln: local users can delete system files via PSAdminAgent. No patch yet \u2014 restrict access &amp; monitor closely. https://radar.offseq.com/threat/cve-2026-9789-cwe-22-improper-limitation-of-a-path-0de6487d #OffSeq #Vulnerability #Acer", "vulnerability": "cve-2026-9789", "author": {"login": "automation"}}, {"uuid": "027d573a-599e-45cd-94d7-6a5853f62e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:30:27.478651+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116650319974507739", "content": "\ud83d\udee1\ufe0f CVE-2026-9789 (HIGH, CVSS 8.5): Acer NitroSense V3 (\u22643.01.3001) local users can delete arbitrary files via PSAdminAgent's weak pipe ACL. No patch yet \u2014 restrict access, monitor activity. More: https://radar.offseq.com/threat/cve-2026-9789-cwe-22-improper-limitation-of-a-path-0de6487d #OffSeq #Vuln #Acer #PrivilegeEscalation", "vulnerability": "cve-2026-9789", "author": {"login": "automation"}}, {"uuid": "66c64564-ea96-4a4e-9c9e-58f35c5338cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:26:27.500699+00:00", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mmv6kqysopn2", "content": "Dirty Frag: a kernel zero-day vs. container and microVM sandboxes On May 7, Hyunwoo Kim (V4bel) disclosed Dirty Frag \u2014 two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500) that gi...\n\n\nOrigin | Interest | Match", "vulnerability": "CVE-2026-43500", "author": {"login": "automation"}}, {"uuid": "4830b5e9-f641-4494-bff1-5caf0dfd407e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:26:27.217161+00:00", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mmv6kqysopn2", "content": "Dirty Frag: a kernel zero-day vs. container and microVM sandboxes On May 7, Hyunwoo Kim (V4bel) disclosed Dirty Frag \u2014 two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500) that gi...\n\n\nOrigin | Interest | Match", "vulnerability": "CVE-2026-43284", "author": {"login": "automation"}}, {"uuid": "f334882c-1518-4467-b0e3-d390ff95dc09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:18:09.082641+00:00", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mmv63zgjbr2g", "content": "The latest update for #ArcticWolf includes \"FortiClient EMS Exploited via CVE-2026-35616 to Deliver EKZ Infostealer Disguised as a Fortinet Patch\" and \"How AI Is Transforming Detection Engineering\".\n \n#cybersecurity #infosec #networks https://opsmtrs.com/2ZFbaTl", "vulnerability": "CVE-2026-35616", "author": {"login": "automation"}}, {"uuid": "839bcdb9-4b4e-4318-bf4e-9c1608f67368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:01:08.054219+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmv55liidj2y", "content": "PowerDNS Authoritative Server \u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u682a\u5f0f\u4f1a\u793e\u65e5\u672c\u30ec\u30b8\u30b9\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\uff08JPRS\uff09\u306f5\u670825\u65e5\u3001PowerDNS Authoritative Server\u306e5\u4ef6\u306e\u8106\u5f31\u6027\uff08CVE-2026-42002\u3001CVE-2026-42001\u3001CVE-2026-42000\u3001CVE-2026-41999\u3001CVE-2026-42396\uff09\u304c\u516c\u958b\u3055\u308c\u305f\u3068\u767a\u8868\u3057\u305f\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "vulnerability": "CVE-2026-42396", "author": {"login": "automation"}}, {"uuid": "4450a018-d4b7-4f8f-9c07-26ef8f37d94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:01:07.909924+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmv55liidj2y", "content": "PowerDNS Authoritative Server \u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u682a\u5f0f\u4f1a\u793e\u65e5\u672c\u30ec\u30b8\u30b9\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\uff08JPRS\uff09\u306f5\u670825\u65e5\u3001PowerDNS Authoritative Server\u306e5\u4ef6\u306e\u8106\u5f31\u6027\uff08CVE-2026-42002\u3001CVE-2026-42001\u3001CVE-2026-42000\u3001CVE-2026-41999\u3001CVE-2026-42396\uff09\u304c\u516c\u958b\u3055\u308c\u305f\u3068\u767a\u8868\u3057\u305f\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "vulnerability": "CVE-2026-41999", "author": {"login": "automation"}}, {"uuid": "c013f551-52a4-4f4b-bf6b-8a58aecdd120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:01:07.738528+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmv55liidj2y", "content": "PowerDNS Authoritative Server \u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u682a\u5f0f\u4f1a\u793e\u65e5\u672c\u30ec\u30b8\u30b9\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\uff08JPRS\uff09\u306f5\u670825\u65e5\u3001PowerDNS Authoritative Server\u306e5\u4ef6\u306e\u8106\u5f31\u6027\uff08CVE-2026-42002\u3001CVE-2026-42001\u3001CVE-2026-42000\u3001CVE-2026-41999\u3001CVE-2026-42396\uff09\u304c\u516c\u958b\u3055\u308c\u305f\u3068\u767a\u8868\u3057\u305f\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "vulnerability": "CVE-2026-42000", "author": {"login": "automation"}}, {"uuid": "caa8fb10-5e1d-4bb2-946d-9bb1de0e4927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:01:07.597798+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmv55liidj2y", "content": "PowerDNS Authoritative Server \u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u682a\u5f0f\u4f1a\u793e\u65e5\u672c\u30ec\u30b8\u30b9\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\uff08JPRS\uff09\u306f5\u670825\u65e5\u3001PowerDNS Authoritative Server\u306e5\u4ef6\u306e\u8106\u5f31\u6027\uff08CVE-2026-42002\u3001CVE-2026-42001\u3001CVE-2026-42000\u3001CVE-2026-41999\u3001CVE-2026-42396\uff09\u304c\u516c\u958b\u3055\u308c\u305f\u3068\u767a\u8868\u3057\u305f\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "vulnerability": "CVE-2026-42001", "author": {"login": "automation"}}, {"uuid": "d291feea-c8c1-47e4-a1d4-d89a8bdfa096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T04:01:07.453036+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmv55liidj2y", "content": "PowerDNS Authoritative Server \u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u682a\u5f0f\u4f1a\u793e\u65e5\u672c\u30ec\u30b8\u30b9\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\uff08JPRS\uff09\u306f5\u670825\u65e5\u3001PowerDNS Authoritative Server\u306e5\u4ef6\u306e\u8106\u5f31\u6027\uff08CVE-2026-42002\u3001CVE-2026-42001\u3001CVE-2026-42000\u3001CVE-2026-41999\u3001CVE-2026-42396\uff09\u304c\u516c\u958b\u3055\u308c\u305f\u3068\u767a\u8868\u3057\u305f\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "vulnerability": "CVE-2026-42002", "author": {"login": "automation"}}, {"uuid": "4ffeca87-e3af-4048-8da5-7630cbce0e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:50:17.710705+00:00", "type": "seen", "source": "https://bsky.app/profile/barredspirals.comint.su/post/3mmv4k56npckp", "content": "snake cultists just can't stop winning https://www.cyberkendra.com/2026/05/badhost-cve-2026-48710-one-rogue-header.html", "vulnerability": "cve-2026-48710", "author": {"login": "automation"}}, {"uuid": "13df8eb0-4257-47a5-b957-ebb1003d734d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:02:20.789283+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuzuhgahs2c", "content": "\ud83d\udfe0 CVE-2026-45104 - High (7.5)\n\nMapServer is a system for developing web-based GIS applications. From 6.4.0 to before 8.6.3, msSL...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45104", "author": {"login": "automation"}}, {"uuid": "210a92aa-bfae-4f0f-85ef-03bb6b9a8bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:02:13.526238+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuzuamewz2r", "content": "\ud83d\udd34 CVE-2026-45102 - Critical (9.9)\n\nOneUptime is an open-source monitoring and observability platform. Prior to 10.0.98, OneUptime us...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45102/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45102", "author": {"login": "automation"}}, {"uuid": "ca7c8b68-4333-4a5c-aad1-c3124fdc0a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:02:06.094905+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuztz22cl2n", "content": "\ud83d\udd34 CVE-2026-44888 - Critical (9.8)\n\nPi.Alert is a WIFI / LAN intruder detector with web service monitoring. Prior to 2026-05-07, Pi.A...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44888/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44888", "author": {"login": "automation"}}, {"uuid": "894d5cf1-1452-48cb-bd1b-8572f59e319b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:01:35.391444+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116649970563347942", "content": "Some increased actor activities are shown targeting ellanetworks core (CVE-2026-44475) https://vuldb.com/vuln/366459/cti", "vulnerability": "CVE-2026-44475", "author": {"login": "automation"}}, {"uuid": "afc8686d-deab-42ad-b701-e5618f6feff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:01:35.130707+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116649970541941297", "content": "Some increased actor activities are shown targeting AMD Ryzen 4000 Mobile Processors with Radeon Graphics and other products (CVE-2025-48516) https://vuldb.com/vuln/364139/cti", "vulnerability": "CVE-2025-48516", "author": {"login": "automation"}}, {"uuid": "c3244bfa-7715-46f8-9fad-e2b7a3b04ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:00:52.444726+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuzrta6nz2r", "content": "\ud83d\udfe0 CVE-2026-8915 - High (8.8)\n\nOut-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.\n\nThis ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8915/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8915", "author": {"login": "automation"}}, {"uuid": "64c7bf97-182d-42d4-a827-04ece8a62030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:00:32.524517+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116649966169277719", "content": "\ud83d\udee1\ufe0f CVE-2026-46414 (HIGH): Auth bypass in Microsoft UFO 3.0.1-4-ge2626659. Attackers can spoof roles &amp; hijack device tasks via WebSocket. No patch yet \u2014 restrict server token &amp; trusted client access. More: https://radar.offseq.com/threat/cve-2026-46414-cwe-290-authentication-bypass-by-sp-c8a9e703 #OffSeq #CVE202646414 #MicrosoftUFO #Vuln", "vulnerability": "cve-2026-46414", "author": {"login": "automation"}}, {"uuid": "f14b3285-7a28-456b-a6a1-46d1b49a591e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:00:31.026182+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmuzr6quda26", "content": "HIGH severity: Microsoft UFO 3.0.1-4-ge2626659 lets attackers spoof roles &amp; hijack tasks via WebSocket. No patch \u2014 restrict token &amp; client access now. Details: https://radar.offseq.com/threat/cve-2026-46414-cwe-290-authentication-bypass-by-sp-c8a9e703 #OffSeq #MicrosoftUFO #Security", "vulnerability": "cve-2026-46414", "author": {"login": "automation"}}, {"uuid": "393a1e3b-b0e2-407a-aca8-596f9b319b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:00:06+00:00", "type": "seen", "source": "Telegram/bHi0C_1X3UQY4vSzaBxEvNEoHfcfml9twdWPYQW312YrRTo", "content": "", "vulnerability": "CVE-2024-38063", "author": {"login": "automation"}}, {"uuid": "f104324b-ca11-4e78-b9c4-a97cb9791151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:00:06+00:00", "type": "seen", "source": "Telegram/bHi0C_1X3UQY4vSzaBxEvNEoHfcfml9twdWPYQW312YrRTo", "content": "", "vulnerability": "CVE-2017-11610", "author": {"login": "automation"}}, {"uuid": "afcb5d72-b3d1-4d58-a34d-2a96c7166906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:00:06+00:00", "type": "seen", "source": "Telegram/bHi0C_1X3UQY4vSzaBxEvNEoHfcfml9twdWPYQW312YrRTo", "content": "", "vulnerability": "CVE-2024-6387", "author": {"login": "automation"}}, {"uuid": "eff964ba-7bf4-4f61-b570-7cf0ae2e4f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T03:00:06+00:00", "type": "seen", "source": "Telegram/bHi0C_1X3UQY4vSzaBxEvNEoHfcfml9twdWPYQW312YrRTo", "content": "", "vulnerability": "CVE-2021-3156", "author": {"login": "automation"}}, {"uuid": "26f60a96-1ea1-4444-860a-2bdc3e0789a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:54:40.114648+00:00", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mmuzgqmz262l", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-9256) NGINX Heap Buffer Overflow via Rewrite Module\" and \"Emerging Threat: (CVE-2026-48172) LiteSpeed cPanel Plugin Privilege Escalation to Root\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "cfe17f51-7354-4ea0-90a9-618a979fe454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:54:39.834940+00:00", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mmuzgqmz262l", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-9256) NGINX Heap Buffer Overflow via Rewrite Module\" and \"Emerging Threat: (CVE-2026-48172) LiteSpeed cPanel Plugin Privilege Escalation to Root\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "vulnerability": "CVE-2026-9256", "author": {"login": "automation"}}, {"uuid": "2ef659d8-930a-4006-bbd8-aa880cd3ab26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:54:06.301570+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuzfqf5ty2p", "content": "CVE-2026-8915 - Samsung Escargot Out-of-Bounds Write Buffer Overflow\nCVE ID : CVE-2026-8915\n \n Published : May 28, 2026, 12:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.\n\nThis issue...", "vulnerability": "CVE-2026-8915", "author": {"login": "automation"}}, {"uuid": "57e92ef0-8147-4d05-93a5-4af06e65a665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:49:06.813232+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuz4qomi52p", "content": "CVE-2026-4888 - Everest Forms \u2013 Contact Form, Payment Form, Quiz, Survey &amp; Custom Form Builder\nCVE ID : CVE-2026-4888\n \n Published : May 28, 2026, 12:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : The Everest Forms \u2013 Contact Form, Payment Form, Quiz, Survey &amp; Custom Fo...", "vulnerability": "CVE-2026-4888", "author": {"login": "automation"}}, {"uuid": "7254c6d4-3d96-44a3-be4b-95f9f314c012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:34:54.910800+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmuydgdxyu2e", "content": "Microsoft UFO 3.0.1-4-ge2626659\u306b\u304a\u3044\u3066\u3001\u8a8d\u8a3c\u3055\u308c\u305fWebSocket\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u507d\u306e\u5f79\u8077\u3092\u9001\u4fe1\u3057\u3001\u4ed6\u306e\u30c7\u30d0\u30a4\u30b9\u306b\u4e0d\u6b63\u306a\u30bf\u30b9\u30af\u3092\u9001\u4fe1\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-46414 CVSS 8.8 | HIGH", "vulnerability": "CVE-2026-46414", "author": {"login": "automation"}}, {"uuid": "7e89e59f-b716-4139-8fdb-93a66c92e173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:33:22.415960+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmuyanmsf327", "content": "Microsoft UFO 3.0.1-4-ge2626659\u3067\u306f\u3001\u8a8d\u8a3c\u6e08\u307f\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304ctask_name\u306b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u30fb\u30b7\u30fc\u30b1\u30f3\u30b9\u3092\u4ed5\u8fbc\u307f\u3001\u610f\u56f3\u3057\u306a\u3044\u5834\u6240\u3078\u306e\u30ed\u30b0\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30fb\u30d5\u30a1\u30a4\u30eb\u4f5c\u6210\u2026\nCVE-2026-46402 CVSS 8.1 | HIGH", "vulnerability": "CVE-2026-46402", "author": {"login": "automation"}}, {"uuid": "d1d8c2bf-e37d-4ac6-aee8-90ce071fa51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:32:33.825163+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmuy77l42d2v", "content": "Microsoft UFO v3.0.0\u4ee5\u524d\u306eOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306fJSON\u30d5\u30a1\u30a4\u30eb\u6539\u3056\u3093\u306b\u3088\u308a\u3001UFO\u30d7\u30ed\u30bb\u30b9\u30e6\u30fc\u30b6\u30fc\u6a29\u9650\u3067\u306e\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3002\nCVE-2026-45322 CVSS 7.8 | HIGH", "vulnerability": "CVE-2026-45322", "author": {"login": "automation"}}, {"uuid": "4fa9296b-2625-4dc6-b5a0-2df055fc0a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:30:33.167587+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "vulnerability": "CVE-2026-1933", "author": {"login": "automation"}}, {"uuid": "500b4652-6a54-4b25-b563-d498b0abecfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:30:33.020696+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "d86b910a-a2ff-4708-8dc5-818585f52eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:30:32.871546+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "a84496ba-4848-4152-939b-7a162423e56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:30:32.722137+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "vulnerability": "CVE-2026-46333", "author": {"login": "automation"}}, {"uuid": "c695ea5b-5b1b-46fc-b91e-3587a6ca633d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:30:32.574929+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmuy3mednn24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-46333: 18 interactions\nCVE-2026-69: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48095: 11 interactions\nCVE-2026-48710: 4 interactions\nCVE-2026-1933: 3 interactions\n", "vulnerability": "CVE-2026-45250", "author": {"login": "automation"}}, {"uuid": "658ea5ab-1786-47b2-b3f2-5805a78ecd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:30:07.468075+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmuy2u6gtc2g", "content": "Microsoft SharePoint Has a New RCE Flaw. If You Haven\u2019t Patched Yet, Go Do That.\n\nA critical vulnerability, tracked as CVE-2026-45659, in Microsoft SharePoint can allow attackers to achieve remote code execution with little effort. Microsoft released security updates to\u2026\n#hackernews #microsoft #news", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "2a6e8f37-7f3b-4b6d-a5c7-22ded4d8d5f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:07:07.303278+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuwrpmrwn2u", "content": "\ud83d\udccc CVE-2026-45361 - Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker... https://www.cyberhub.blog/cves/CVE-2026-45361", "vulnerability": "CVE-2026-45361", "author": {"login": "automation"}}, {"uuid": "411ed968-4922-4c49-ab5b-6e85cfcaaf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:04:22.648044+00:00", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mmuwmpbe5w2k", "content": "CISA Exchange CVE-2026-42897 federal deadline tomorrow. Three more crews hit this week: Marquis (400K), Brightspeed via Crimson Collective (1M+), Silent Ransom Group on law firms. All four in our STIX feed: https://analytics.dugganusa.com/stix/register", "vulnerability": "CVE-2026-42897", "author": {"login": "automation"}}, {"uuid": "84d815f5-adbf-40ff-9d65-db4d6f3a68b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T02:02:41.884332+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmuwjslqyp2g", "content": "CVE-2025-1515 - Critical authentication bypass in WP Real Estate Manager plugin. CVSS 9.8. Unauthenticated attackers can log in as any user, including admins. No patch available. Disable plugin immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-1515/", "vulnerability": "CVE-2025-1515", "author": {"login": "automation"}}, {"uuid": "c1740061-8e4e-4fb5-b283-e9b173b3726a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:37:09.155268+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuv42kalp2o", "content": "\ud83d\udccc CVE-2026-44728 - Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was spec... https://www.cyberhub.blog/cves/CVE-2026-44728", "vulnerability": "CVE-2026-44728", "author": {"login": "automation"}}, {"uuid": "cac23008-c042-4b3c-8b17-da8f44a0a71a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:30:29.488412+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmuuq7gg262p", "content": "\u26a0\ufe0f HIGH severity: Out-of-bounds write in Samsung Open Source Escargot (36f5fb58...) could lead to system compromise. No patch \u2014 restrict access, watch for updates. Details: https://radar.offseq.com/threat/cve-2026-8915-cwe-787-out-of-bounds-write-in-samsu-8e102c1a #OffSeq #Vuln #Security", "vulnerability": "cve-2026-8915", "author": {"login": "automation"}}, {"uuid": "3f4bc10b-2c9d-4b13-947f-d66b33b11062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:30:27.910778+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116649612164274667", "content": "\ud83d\udd14 CVE-2026-8915 (HIGH): Out-of-bounds write in Samsung Open Source Escargot (commit 36f5fb58...) enables buffer overflow risks \u2014 system compromise possible. No patch yet; monitor advisories &amp; restrict access. https://radar.offseq.com/threat/cve-2026-8915-cwe-787-out-of-bounds-write-in-samsu-8e102c1a #OffSeq #Vulnerability #Escargot", "vulnerability": "cve-2026-8915", "author": {"login": "automation"}}, {"uuid": "b0324ea1-e203-4583-b2c5-9328af2a5232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:15:23.388934+00:00", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmutv6zlc32d", "content": "CVE-2026-41241 in Pretalx exposed a stored XSS flaw that let registered speakers run JavaScript in organizers&#039; browsers during submission searches. Patched in 2026.1.0. #Pretalx #CVE202641241 #XSS", "vulnerability": "CVE-2026-41241", "author": {"login": "automation"}}, {"uuid": "8c29dd56-96c7-4f96-a0b5-9ea963d9bae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:07:08.595447+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmutghmbwl25", "content": "\ud83d\udccc CVE-2026-4868 - GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under ... https://www.cyberhub.blog/cves/CVE-2026-4868", "vulnerability": "CVE-2026-4868", "author": {"login": "automation"}}, {"uuid": "e7ef10d7-04b7-4a49-9a2f-168006e867c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:01:00+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale", "content": "", "vulnerability": "CVE-2023-27532", "author": {"login": "syspect"}}, {"uuid": "682d5976-30f3-4de8-add5-14bd6b88b397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:01:00+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale", "content": "", "vulnerability": "CVE-2024-55591", "author": {"login": "syspect"}}, {"uuid": "5f363052-e825-41d9-99ca-1d0e4ee399d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:01:00+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale", "content": "", "vulnerability": "CVE-2024-21762", "author": {"login": "syspect"}}, {"uuid": "e044a40d-8bbd-43d1-b4c2-4f8db5cfb011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:01:00+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale", "content": "", "vulnerability": "CVE-2026-1340", "author": {"login": "syspect"}}, {"uuid": "44b1405c-0c43-4da0-9786-e64480f61ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T01:01:00+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale", "content": "", "vulnerability": "CVE-2026-1281", "author": {"login": "syspect"}}, {"uuid": "970b8047-56e6-47b8-b5df-55fe8b7ca3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:37:07.247114+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmurqs2fjc2f", "content": "\ud83d\udccc CVE-2025-10470 - The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to unc... https://www.cyberhub.blog/cves/CVE-2025-10470", "vulnerability": "CVE-2025-10470", "author": {"login": "automation"}}, {"uuid": "4b684b4c-dd61-4bcb-9eb9-dcb45b6af5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:07:07.563526+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuq35vhat2w", "content": "\ud83d\udccc CVE-2026-44729 - Twenty is an open source CRM. In 1.18.0 and earlier, the file serving endpoints in Twenty CRM at /files/* and /file/:fileFolder/:id serve uploaded fil... https://www.cyberhub.blog/cves/CVE-2026-44729", "vulnerability": "CVE-2026-44729", "author": {"login": "automation"}}, {"uuid": "fae5c3ca-6043-42d1-b0a8-e0d9f49a30ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:05:03.000535+00:00", "type": "seen", "source": "https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3mmupxgygio2d", "content": "#524985 rustPlatform.importCargoLock: download crates from static.crates.io\n#524983 evcc: 0.307.1 -&gt; 0.307.2\n#524975 prometheus-pushgateway: 1.11.2 -&gt; 1.11.3\n#524971 pretix: patch CVE-2026-9712\n#524970 beamMinimal27Packages.erlang: fix build failure from ignored DOC_TARGETS\n", "vulnerability": "CVE-2026-9712", "author": {"login": "automation"}}, {"uuid": "e293656c-cce4-48b0-a874-b2d2540d1224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:02:18.545781+00:00", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmupsheol22m", "content": "Apache CXF\u306eXKMS LDAP\u30b5\u30fc\u30d3\u30b9\u306bLDAP\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u304c\u53ef\u80fd\u306b\u306a\u308b\u8106\u5f31\u6027 CVE-2026-44930\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "vulnerability": "CVE-2026-44930", "author": {"login": "automation"}}, {"uuid": "2bff31a9-d7b1-4a64-a1ec-cd0a050cc770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:01:51.588899+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuprfcpqb2n", "content": "\ud83d\udfe0 CVE-2026-48064 - High (8.1)\n\npam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48064/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48064", "author": {"login": "automation"}}, {"uuid": "119aab4a-5ba6-4000-8bd0-7e036be414d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:01:48.515746+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupr5ugvq2w", "content": "\ud83d\udd34 CVE-2026-8362 - Critical (9.8)\n\nA stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8362/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8362", "author": {"login": "automation"}}, {"uuid": "27af5803-a4fc-438b-832a-69d379576802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:01:41+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #POC #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a poc-wondercms-360-xss\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BlessedOn3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 23:39:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC \u2014 WonderCMS 3.6.0 Stored XSS (GHSA-5x7j-xjpx-pmm5)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "GHSA-5X7J-XJPX-PMM5", "author": {"login": "automation"}}, {"uuid": "2b80fe70-9d85-4311-96ff-b0cb842d7bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:01:25.141144+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupqwidc72z", "content": "\ud83d\udfe0 CVE-2026-8361 - High (7.5)\n\nA path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path star...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8361/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8361", "author": {"login": "automation"}}, {"uuid": "b32b3a97-f47c-442d-a948-0f0d93479dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:00:46.358825+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmupprp6ak2c", "content": "\ud83d\udfe0 CVE-2026-46414 - High (8.8)\n\nMicrosoft UFO open-source framework for intelligent automation across devices and platforms. In 3...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46414/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-46414", "author": {"login": "automation"}}, {"uuid": "2660f72c-851d-4ff9-8afd-fddc613ea82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-28T00:00:39.272255+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116649259043709670", "content": "\ud83d\udea8 CRITICAL: CVE-2026-9739 in Google MCP Toolbox for Databases (CVSS 9.4) allows DNS rebinding via a permissive cross-domain policy in SSE. No patch yet \u2014 restrict untrusted domains &amp; monitor advisories. https://radar.offseq.com/threat/cve-2026-9739-cwe-942-permissive-cross-domain-poli-e5d6e88a #OffSeq #CVE #Infosec #Google", "vulnerability": "cve-2026-9739", "author": {"login": "automation"}}, {"uuid": "30a94546-a964-4160-9c0f-c4e63d37e02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:49:55+00:00", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0168", "content": "", "vulnerability": "CVE-2026-2710", "author": {"login": "syspect"}}, {"uuid": "a8cbf5f8-23e3-4803-8bb3-60c43f636176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:48:26.092380+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuozqgbbg2q", "content": "CVE-2026-44720 - OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover\nCVE ID : CVE-2026-44720\n \n Published : May 27, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : OpenLearnX is an open-source, decentralized learnin...", "vulnerability": "CVE-2026-44720", "author": {"login": "automation"}}, {"uuid": "047b3c38-87f0-4215-85d4-0e1e56f76357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:43:25.886677+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuoqrwulj2v", "content": "CVE-2026-44247 - Volcano: Webhook server vulnerable to OOM due to unbounded HTTP request body size\nCVE ID : CVE-2026-44247\n \n Published : May 27, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13....", "vulnerability": "CVE-2026-44247", "author": {"login": "automation"}}, {"uuid": "a82fb1f4-fae4-4976-a0a3-79d246d86914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:38:25.600003+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuohtjb252p", "content": "CVE-2026-45083 - Goobi viewer: Unauthenticated Solr Streaming Expression Proxy\nCVE ID : CVE-2026-45083\n \n Published : May 27, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : The Goobi viewer is a web application that allows digitised material to be displayed in a web browse...", "vulnerability": "CVE-2026-45083", "author": {"login": "automation"}}, {"uuid": "8a5e3846-abf8-44b4-93f1-4f828092377a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:37:06.773783+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuofi4lq22z", "content": "\ud83d\udccc CVE-2026-42843 - Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system manag... https://www.cyberhub.blog/cves/CVE-2026-42843", "vulnerability": "CVE-2026-42843", "author": {"login": "automation"}}, {"uuid": "4b224adf-82e2-44ba-9be3-33c4c889df3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:33:36.948234+00:00", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mmuo7acp4a2e", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nCISA has added&nbsp;three&nbsp;new vulnerabilities&nbsp;to its&nbsp; Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-8398\u2026\n\n\ud83d\udd17 https://hnow.live/a/f7097d69", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "97fe87e2-697c-4835-b45f-de577fdd1bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:33:25.099798+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuo6uzrkl2i", "content": "CVE-2026-44711 - pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption\nCVE ID : CVE-2026-44711\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for ...", "vulnerability": "CVE-2026-44711", "author": {"login": "automation"}}, {"uuid": "0f9afa9c-63e8-44e2-ae6c-466029afbe91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:28:24.674628+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmunvwkxrk2p", "content": "CVE-2026-9208 - Tanium addressed an unauthorized code execution vulnerability in Connect.\nCVE ID : CVE-2026-9208\n \n Published : May 27, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : Tanium addressed an unauthorized code execution vulnerability in Connect.\n \n Severity: 8.8...", "vulnerability": "CVE-2026-9208", "author": {"login": "automation"}}, {"uuid": "b0bc56c4-f6f8-4d31-b8db-058d0b2b8528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:23:24.400363+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmunmy42lr2i", "content": "CVE-2026-45152 - uniget: Command Injection in tool.Check Leading to Arbitrary Code Execution\nCVE ID : CVE-2026-45152\n \n Published : May 27, 2026, 10:16 p.m. | 15\u00a0minutes ago\n \n Description : uniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a ...", "vulnerability": "CVE-2026-45152", "author": {"login": "automation"}}, {"uuid": "f00daef6-a95f-402a-bb7a-23f62f14512f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:19:06.784757+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmunfckcpg2p", "content": "CVE-2026-45136 - claude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh\nCVE ID : CVE-2026-45136\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : claude-code-cache-fix is a cache optimization pr...", "vulnerability": "CVE-2026-45136", "author": {"login": "automation"}}, {"uuid": "1845eaa1-ade0-4af5-941b-389fd76a5961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:15:21.389357+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmun6lncaw2p", "content": "CVE-2026-45137 - Anchor: Program is not properly validated\nCVE ID : CVE-2026-45137\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Anchor is a framework providing several convenient developer tools for writing Solana programs. From 1.0.0 to bef...", "vulnerability": "CVE-2026-45137", "author": {"login": "automation"}}, {"uuid": "3456b185-c74a-4c56-a070-c38960416b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:12:07.752125+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumymhwfo2p", "content": "CVE-2026-47270 - pam_usb: strtok() race condition in multi-threaded PAM hosts can corrupt deny_remote result\nCVE ID : CVE-2026-47270\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for Linux using ordina...", "vulnerability": "CVE-2026-47270", "author": {"login": "automation"}}, {"uuid": "2f358811-099f-4e23-9bc3-c60bb587a9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:09:00.423640+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumta6v4o2v", "content": "CVE-2026-47269 - pam_usb: deny_remote feature incorrectly classifies IPv4-mapped IPv6 remote connections as local\nCVE ID : CVE-2026-47269\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for Linux using o...", "vulnerability": "CVE-2026-47269", "author": {"login": "automation"}}, {"uuid": "58e77471-0513-4389-8399-f0898b530db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:07:07.508968+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmumpujzgr2w", "content": "\ud83d\udccc CVE-2026-35430 - Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges ove... https://www.cyberhub.blog/cves/CVE-2026-35430", "vulnerability": "CVE-2026-35430", "author": {"login": "automation"}}, {"uuid": "cdf1a4ec-c22a-4136-8030-b39a8382edf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:07:01.706589+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmumpp52co26", "content": "CVE-2025-25015 - Prototype pollution in Elastic Kibana leads to arbitrary code execution via crafted file upload. CVSS 9.9. Viewer role exploit in older versions, elevated privileges needed in 8.17.1-8.17.2. Patch now. #CVE #Elastic #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-25015/", "vulnerability": "CVE-2025-25015", "author": {"login": "automation"}}, {"uuid": "e0c4d3dc-4a18-449a-bd56-23d37fecc4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:06:16.309837+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumods67b2r", "content": "CVE-2026-46402 - Microsoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directory\nCVE ID : CVE-2026-46402\n \n Published : May 27, 2026, 9:54 p.m. | 38\u00a0minutes ago\n \n Description : Microsoft UFO open-sour...", "vulnerability": "CVE-2026-46402", "author": {"login": "automation"}}, {"uuid": "fba90240-cc28-4d7e-86ae-031a65409bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:03:45.921106+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumjuesms2q", "content": "CVE-2026-44713 - pam_usb: Command injection via $TMUX environment variable leads to RCE as root\nCVE ID : CVE-2026-44713\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for Linux using ordinary removable ...", "vulnerability": "CVE-2026-44713", "author": {"login": "automation"}}, {"uuid": "35ac2571-6756-4387-88db-a31d88c48a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:02:03.318102+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumgrpokt2e", "content": "\ud83d\udfe0 CVE-2026-8360 - High (7.5)\n\nFunction calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProf...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8360/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8360", "author": {"login": "automation"}}, {"uuid": "e28ed618-46a9-46e7-9bdb-90a48be273b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:01:56.074216+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumgkktd32e", "content": "\ud83d\udfe0 CVE-2026-8359 - High (7.5)\n\nWhen processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8359/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8359", "author": {"login": "automation"}}, {"uuid": "b51e5b10-b2e1-47c3-a48e-c68b24533caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:01:49.134185+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumgdfycu2z", "content": "\ud83d\udd34 CVE-2026-8364 - Critical (9.8)\n\nGladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP po...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8364/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8364", "author": {"login": "automation"}}, {"uuid": "876be128-8a58-49e6-86f8-7e9570ad8b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:01:26.905946+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumfptprr2q", "content": "CVE-2026-44712 - pam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent\nCVE ID : CVE-2026-44712\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for Linux using ordinary rem...", "vulnerability": "CVE-2026-44712", "author": {"login": "automation"}}, {"uuid": "66cda2d6-a516-4db3-95e4-5ef31256a268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:01:08.600160+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumf5pusa2l", "content": "\ud83d\udfe0 CVE-2026-45152 - High (7.8)\n\nuniget is a universal installer and updater for (container) tools. Prior to 0.27.1, a command inj...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45152/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45152", "author": {"login": "automation"}}, {"uuid": "694a52e3-0870-4265-bd72-beb754f9e04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:01:01.848670+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumewrcwo2c", "content": "\ud83d\udd34 CVE-2026-45083 - Critical (9.8)\n\nThe Goobi viewer is a web application that allows digitised material to be displayed in a web bro...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45083/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45083", "author": {"login": "automation"}}, {"uuid": "8c3a40eb-c20e-473c-900c-d3b69148df82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:00:53.220198+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmumeouq6o26", "content": "\ud83d\udfe0 CVE-2026-9208 - High (8.8)\n\nTanium addressed an unauthorized code execution vulnerability in Connect.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9208/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9208", "author": {"login": "automation"}}, {"uuid": "f78b0c60-ed26-4548-8b9a-792fa7b56cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T23:00:17+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86177", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0x00phantom-hat\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 22:55:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2025-54123", "author": {"login": "automation"}}, {"uuid": "e2265d77-e129-46a6-a246-7ed5acfd12df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:59:17.878093+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmumbuqjy72i", "content": "CVE-2026-44710 - pam_usb: NULL pointer dereference from UDisks device fields causes PAM crash and login denial-of-service\nCVE ID : CVE-2026-44710\n \n Published : May 27, 2026, 9:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : pam_usb provides hardware authentication for Linux...", "vulnerability": "CVE-2026-44710", "author": {"login": "automation"}}, {"uuid": "340fa5ce-0516-474a-bbc1-e0c27d36aecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:57:17.593142+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmum6bxg2n2p", "content": "CVE-2026-46544 - Microsoft UFO reuses client-supplied WebSocket session IDs and replays stale task results to new authenticated requesters\nCVE ID : CVE-2026-46544\n \n Published : May 27, 2026, 9:53 p.m. | 39\u00a0minutes ago\n \n Description : Microsoft UFO open-source framework for i...", "vulnerability": "CVE-2026-46544", "author": {"login": "automation"}}, {"uuid": "41115ffe-0ec0-4144-b7c2-4f52c74475b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:55:24.718825+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmum2wangr2c", "content": "CVE-2026-46414 - Microsoft UFO WebSocket role spoofing allows authenticated peer task hijacking\nCVE ID : CVE-2026-46414\n \n Published : May 27, 2026, 9:54 p.m. | 37\u00a0minutes ago\n \n Description : Microsoft UFO open-source framework for intelligent automation across devices and pl...", "vulnerability": "CVE-2026-46414", "author": {"login": "automation"}}, {"uuid": "bf6dbe8c-0d29-4122-a97f-0c4471ab0ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:53:38.303766+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmulxqu6w32p", "content": "CVE-2026-9739 - Google Chrome SSE DNS Rebinding\nCVE ID : CVE-2026-9739\n \n Published : May 27, 2026, 9:38 p.m. | 53\u00a0minutes ago\n \n Description : Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and ...", "vulnerability": "CVE-2026-9739", "author": {"login": "automation"}}, {"uuid": "365d1313-6cba-4249-bfcf-71fb30222c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:52:02.583481+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmulur5st42p", "content": "CVE-2026-46538 - Microsoft UFO accepts cross-device TASK_END messages by session_id only, allowing peer task-result injection\nCVE ID : CVE-2026-46538\n \n Published : May 27, 2026, 9:56 p.m. | 35\u00a0minutes ago\n \n Description : Microsoft UFO open-source framework for intelligent au...", "vulnerability": "CVE-2026-46538", "author": {"login": "automation"}}, {"uuid": "01aa5f31-dc31-4041-a27b-639792ba3709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:50:22.805038+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmulrwi3e22p", "content": "CVE-2026-46416 - Microsoft UFO shared WebSocket handler state causes cross-client response hijacking\nCVE ID : CVE-2026-46416\n \n Published : May 27, 2026, 9:56 p.m. | 36\u00a0minutes ago\n \n Description : Microsoft UFO open-source framework for intelligent automation across devices a...", "vulnerability": "CVE-2026-46416", "author": {"login": "automation"}}, {"uuid": "453403ac-0d6d-44b0-866a-9bace3d33eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:48:52.295004+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmulp7z3no2c", "content": "CVE-2026-45322 - OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON\nCVE ID : CVE-2026-45322\n \n Published : May 27, 2026, 9:32 p.m. | 59\u00a0minutes ago\n \n Description : Microsoft UFO open-source framework for intelligent automation across devices and...", "vulnerability": "CVE-2026-45322", "author": {"login": "automation"}}, {"uuid": "f3b39fe2-3a46-4f93-ba41-86b293e18780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:37:05.948279+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmul26bjea2u", "content": "\ud83d\udccc CVE-2018-25332 - GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting wea... https://www.cyberhub.blog/cves/CVE-2018-25332", "vulnerability": "CVE-2018-25332", "author": {"login": "automation"}}, {"uuid": "3544e2da-435d-447d-a129-281edd9ec146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:28:41.495793+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmukl5eklo2x", "content": "RELATE\u306e\u7279\u5b9a\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u5b66\u751f\u304c\u7ba1\u7406\u8005\u30d6\u30e9\u30a6\u30b6\u3067\u4efb\u610f\u306eJS\u3092\u5b9f\u884c\u53ef\u80fd\u3002\u30d7\u30ed\u30d5\u30a3\u30fc\u30eb\u6b04\u306e\u672a\u30b5\u30cb\u30bf\u30a4\u30ba\u306a\u6c0f\u540d\u304c\u7ba1\u7406\u8005\u8868\u793a\u6642\u306bXSS\u3092\u5f15\u304d\u8d77\u3053\u3059\u3002\nCVE-2026-42197 CVSS 8.7 | HIGH", "vulnerability": "CVE-2026-42197", "author": {"login": "automation"}}, {"uuid": "fe7dd42f-9d81-48e7-a15c-144a38f31d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:07:09.083423+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmujelkwt62r", "content": "\ud83d\udccc CVE-2026-45659 - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-45659", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "4ddcac4c-c15e-41fb-80c7-6dd5c9c52c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:02:25.711624+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj45tjn52z", "content": "\ud83d\udd34 CVE-2026-8363 - Critical (9.8)\n\nA stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8363/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8363", "author": {"login": "automation"}}, {"uuid": "246ac535-3346-4a7d-a706-997aa82b0368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:02:17.510755+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj3vojqv2q", "content": "\ud83d\udfe0 CVE-2026-44709 - High (7.8)\n\npam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44709/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44709", "author": {"login": "automation"}}, {"uuid": "56f3b368-902d-4903-89e5-f4a33129bd70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:02:09.884611+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj3olipx2e", "content": "\ud83d\udfe0 CVE-2026-45137 - High (8.2)\n\nAnchor is a framework providing several convenient developer tools for writing Solana programs. F...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45137/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45137", "author": {"login": "automation"}}, {"uuid": "97a19c12-db17-4c6d-826c-2eaa8fef3052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:01:18.525333+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuj257hxw2r", "content": "\ud83d\udfe0 CVE-2026-44713 - High (8.8)\n\npam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44713/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44713", "author": {"login": "automation"}}, {"uuid": "116f9606-4581-4825-a7e3-00ce6fc0ed8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:01:13.152563+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuizvc4qx2e", "content": "\ud83d\udfe0 CVE-2026-44712 - High (8.2)\n\npam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44712/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44712", "author": {"login": "automation"}}, {"uuid": "f1855a35-2d0b-498b-8a7c-3e03ab892707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T22:01:01.351550+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmuizndlat2n", "content": "\ud83d\udfe0 CVE-2026-44711 - High (7.9)\n\npam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44711/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44711", "author": {"login": "automation"}}, {"uuid": "8516cedb-16aa-438e-9cb5-92acb82b0125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:37:06.836744+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuhovooh625", "content": "\ud83d\udccc CVE-2026-33843 - Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges... https://www.cyberhub.blog/cves/CVE-2026-33843", "vulnerability": "CVE-2026-33843", "author": {"login": "automation"}}, {"uuid": "5a3a9099-362b-4fcd-a8c7-651a2beac968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:12:27+00:00", "type": "seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "content": "", "vulnerability": "CVE-2026-43284", "author": {"login": "automation"}}, {"uuid": "d47dc552-4bdc-4f31-8b24-23e8a1ce21fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:12:27+00:00", "type": "seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "content": "", "vulnerability": "CVE-2026-5426", "author": {"login": "automation"}}, {"uuid": "ca59684b-b952-4ea6-b8e2-7731bd938ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:12:27+00:00", "type": "seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "content": "", "vulnerability": "CVE-2026-45401", "author": {"login": "automation"}}, {"uuid": "85844572-8128-4677-9da5-a85d0d4476f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:12:27+00:00", "type": "seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "content": "", "vulnerability": "CVE-2026-5364", "author": {"login": "automation"}}, {"uuid": "15c19119-aec2-4fad-b232-e1c4fe8290f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:12:27+00:00", "type": "seen", "source": "Telegram/IqAYll4ZzjxpeZQ_8CUvuT_fob3B5lJjEUBfv2EUXY56hck", "content": "", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "99570820-b815-4b7b-99ea-955594c7689f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:11:38+00:00", "type": "seen", "source": "Telegram/_gErohbwTCKTW_lpvhKyjoM_ZM9ytnNcaUIrq9IFwI-Mxv4", "content": "", "vulnerability": "CVE-2026-46275", "author": {"login": "automation"}}, {"uuid": "ad989c41-7732-4f79-af2d-51af0b3f55b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:11:38+00:00", "type": "seen", "source": "Telegram/_gErohbwTCKTW_lpvhKyjoM_ZM9ytnNcaUIrq9IFwI-Mxv4", "content": "", "vulnerability": "CVE-2026-42945", "author": {"login": "automation"}}, {"uuid": "a6bda2a6-77b1-4be0-a04a-2b2009f42789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:10:45+00:00", "type": "seen", "source": "Telegram/GF77XqZ1LHaWDL2kD1JemKeP32DvhHpTDQqckw5Eq33XXvc", "content": "", "vulnerability": "CVE-2026-27384", "author": {"login": "automation"}}, {"uuid": "10807b1c-5b98-4efd-9dda-6a5dd0fd2630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:09:44+00:00", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "vulnerability": "CVE-2024-6783", "author": {"login": "automation"}}, {"uuid": "cde9d5a9-836e-41bd-9a7e-1b353467cb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:09:44+00:00", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "98065a8b-c24a-4f6a-bd62-edfdedf07000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:09:44+00:00", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "vulnerability": "CVE-2026-4893", "author": {"login": "automation"}}, {"uuid": "b4675803-dc19-425c-a39e-53eeee6ca1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:09:44+00:00", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "vulnerability": "CVE-2026-5172", "author": {"login": "automation"}}, {"uuid": "2083d8f3-8862-41f4-b731-f7af9318f4bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:09:44+00:00", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "vulnerability": "CVE-2021-3560", "author": {"login": "automation"}}, {"uuid": "48d9851b-7280-4409-9a93-9b935d908068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:09:44+00:00", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "f6d1b0e9-6061-41a0-ab0e-774ee1d542e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:09:44+00:00", "type": "seen", "source": "Telegram/XPzjER_VXnqDaL0x3el2A57nJCguhK8qowmsl0HK-KFshHo", "content": "", "vulnerability": "CVE-2019-6340", "author": {"login": "automation"}}, {"uuid": "5acbfa16-9a5a-4aa4-9273-3ee5c1a0d6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:07:07.812239+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmufzcao4n2r", "content": "\ud83d\udccc CVE-2026-41090 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform ta... https://www.cyberhub.blog/cves/CVE-2026-41090", "vulnerability": "CVE-2026-41090", "author": {"login": "automation"}}, {"uuid": "348841e5-89e1-42bd-af91-61dddfb34a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:06:35+00:00", "type": "seen", "source": "Telegram/x-gpTIreB2tb5Q-Jw8cVX3Xwo2MhNZ2uzY1qavh-XKqhSxE", "content": "", "vulnerability": "CVE-2026-47668", "author": {"login": "automation"}}, {"uuid": "05341728-d1d6-4fcc-942c-27163f351d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:06:35+00:00", "type": "seen", "source": "Telegram/x-gpTIreB2tb5Q-Jw8cVX3Xwo2MhNZ2uzY1qavh-XKqhSxE", "content": "", "vulnerability": "CVE-2026-5364", "author": {"login": "automation"}}, {"uuid": "61075076-33de-4df3-8c02-be613b7a87e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:06:35+00:00", "type": "seen", "source": "Telegram/x-gpTIreB2tb5Q-Jw8cVX3Xwo2MhNZ2uzY1qavh-XKqhSxE", "content": "", "vulnerability": "CVE-2007-2447", "author": {"login": "automation"}}, {"uuid": "4f372299-4538-4ec4-9a5f-9f8d300ede00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:06:35+00:00", "type": "seen", "source": "Telegram/x-gpTIreB2tb5Q-Jw8cVX3Xwo2MhNZ2uzY1qavh-XKqhSxE", "content": "", "vulnerability": "CVE-2020-25078", "author": {"login": "automation"}}, {"uuid": "6db7f498-8d4c-4662-bc2d-ffb374a5801b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:04:23+00:00", "type": "seen", "source": "Telegram/KrQAHamx7xVYDukJqkieC16E3c7L8LQQ1JmhrJ2q7nBNTJM", "content": "", "vulnerability": "CVE-2021-34527", "author": {"login": "automation"}}, {"uuid": "164534e9-382b-44e2-bbbb-fe128a60b3ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:47+00:00", "type": "seen", "source": "Telegram/ymQhnDFcziGLHK8SJX7axBvcDuNVbRkzysaenktlRf2qI3g", "content": "", "vulnerability": "CVE-2026-999999", "author": {"login": "automation"}}, {"uuid": "37a1e41c-fedc-498c-ae7b-ef0d85952f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:47+00:00", "type": "seen", "source": "Telegram/ymQhnDFcziGLHK8SJX7axBvcDuNVbRkzysaenktlRf2qI3g", "content": "", "vulnerability": "CVE-2022-22965", "author": {"login": "automation"}}, {"uuid": "b99fac13-3249-49d9-8d4a-88e9127861ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:47+00:00", "type": "seen", "source": "Telegram/ymQhnDFcziGLHK8SJX7axBvcDuNVbRkzysaenktlRf2qI3g", "content": "", "vulnerability": "CVE-2026-9082", "author": {"login": "automation"}}, {"uuid": "c5ab8457-6d2a-4290-a5a0-9f9a747f1f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:47+00:00", "type": "seen", "source": "Telegram/ymQhnDFcziGLHK8SJX7axBvcDuNVbRkzysaenktlRf2qI3g", "content": "", "vulnerability": "CVE-2021-34527", "author": {"login": "automation"}}, {"uuid": "626f0873-4ebf-4516-bcc0-d7f74dbac775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:47+00:00", "type": "seen", "source": "Telegram/ymQhnDFcziGLHK8SJX7axBvcDuNVbRkzysaenktlRf2qI3g", "content": "", "vulnerability": "CVE-2026-26980", "author": {"login": "automation"}}, {"uuid": "090bcbbb-205e-4e93-892f-ffff99d42266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:29+00:00", "type": "seen", "source": "Telegram/XzC-KGBCdspPXiEjFuhhLQhveWuSfskWTBPYimD-K-OCFrQ", "content": "", "vulnerability": "CVE-2026-5172", "author": {"login": "automation"}}, {"uuid": "15f9b3b6-cf8b-4e07-a9f6-45bd81f76b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:29+00:00", "type": "seen", "source": "Telegram/XzC-KGBCdspPXiEjFuhhLQhveWuSfskWTBPYimD-K-OCFrQ", "content": "", "vulnerability": "CVE-2026-4893", "author": {"login": "automation"}}, {"uuid": "94f29690-3dd9-4e4d-8f32-964150e466ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:13+00:00", "type": "seen", "source": "Telegram/69mEbVY8q7JTbOxcU8Y8fk5qjG-y8rxPRlbyP8YZTdzYGyY", "content": "", "vulnerability": "CVE-2026-0828", "author": {"login": "automation"}}, {"uuid": "b57d8319-6dbc-45a8-8fc0-287f51b0c329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:02:13+00:00", "type": "seen", "source": "Telegram/69mEbVY8q7JTbOxcU8Y8fk5qjG-y8rxPRlbyP8YZTdzYGyY", "content": "", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "dc8edafc-01a3-45a0-8ad0-e9ba016301a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:00:05+00:00", "type": "seen", "source": "Telegram/PMwLWJ8bCumUt1_njp0TjasQmSGobRcnITTCtVX5oyv1QKE", "content": "", "vulnerability": "CVE-2026-20182", "author": {"login": "automation"}}, {"uuid": "bd78c879-0554-43cb-8382-9d6e17e5af8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:00:05+00:00", "type": "seen", "source": "Telegram/PMwLWJ8bCumUt1_njp0TjasQmSGobRcnITTCtVX5oyv1QKE", "content": "", "vulnerability": "CVE-2021-44228", "author": {"login": "automation"}}, {"uuid": "33d29a80-9929-4ab4-a653-01f373b2ee3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:00:05+00:00", "type": "seen", "source": "Telegram/PMwLWJ8bCumUt1_njp0TjasQmSGobRcnITTCtVX5oyv1QKE", "content": "", "vulnerability": "CVE-2025-50946", "author": {"login": "automation"}}, {"uuid": "a0bbc157-44d2-4791-b8d8-4d85b0de88c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:00:05+00:00", "type": "seen", "source": "Telegram/PMwLWJ8bCumUt1_njp0TjasQmSGobRcnITTCtVX5oyv1QKE", "content": "", "vulnerability": "CVE-2026-47668", "author": {"login": "automation"}}, {"uuid": "6d0e0033-336c-49fc-a57b-6ac715a1edb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:00:04+00:00", "type": "seen", "source": "Telegram/CR33Rmhbqr2sEMDoELtncx05YdfpVXTUFyE7fQfWd38QNhk", "content": "", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "8be2786b-d67a-45e4-b029-4280853a329f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T21:00:04+00:00", "type": "seen", "source": "Telegram/CR33Rmhbqr2sEMDoELtncx05YdfpVXTUFyE7fQfWd38QNhk", "content": "", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "51fb2d46-7be8-4993-aa15-9b1d2c1e4fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:58:50+00:00", "type": "seen", "source": "Telegram/bd_BUedqLLYKbkwD4j1R6ieIKUJq_JqrQvRzY43bHQk-bFE", "content": "", "vulnerability": "CVE-2025-55182", "author": {"login": "automation"}}, {"uuid": "58fff255-a4ce-4a91-bc32-68d16e6fb7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:57:18+00:00", "type": "seen", "source": "Telegram/VQSB94no4PnEU0b5A9vWkdBAbj0M6AltzCL5IMEj_yk3ZDI", "content": "", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "29476606-82cb-4928-8607-383438148841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:40:46.993427+00:00", "type": "seen", "source": "https://bsky.app/profile/koutropoulos.bsky.social/post/3mmuek6i6uz2h", "content": "Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks", "vulnerability": "CVE-2026-26980", "author": {"login": "automation"}}, {"uuid": "712d7ae3-a9ea-4e5a-88f5-ec33dd277b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:37:05.977327+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuedlrtq62z", "content": "\ud83d\udccc CVE-2026-42796 - Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins quer... https://www.cyberhub.blog/cves/CVE-2026-42796", "vulnerability": "CVE-2026-42796", "author": {"login": "automation"}}, {"uuid": "420fe951-bf1b-419b-9acf-3a7ad789f4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:26:10.643828+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmudq2zsso2h", "content": "CVE-2026-5509 - Arbitrary Command Injection via Browser Developer Console in TP-Link Archer BE450 and BE7200\nCVE ID : CVE-2026-5509\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : An authenticated command injection vulnerability exists in the Archer BE...", "vulnerability": "CVE-2026-5509", "author": {"login": "automation"}}, {"uuid": "d8e7c4e5-d0f6-417e-9e69-e721d9263fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:21:10.176340+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmudh4gtow2i", "content": "CVE-2026-4390 - TeamSpeak 3 Server Connection State Management process_resend_queue use after free\nCVE ID : CVE-2026-4390\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : A weakness has been identified in TeamSpeak 3 Server up to 3.13.7. This affects th...", "vulnerability": "CVE-2026-4390", "author": {"login": "automation"}}, {"uuid": "8bcbf64a-32dc-4084-83ba-21d4ed520e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:16:09.532333+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmud65vf7g2q", "content": "CVE-2026-4391 - TeamSpeak 3 Server ECC Key heap-based overflow\nCVE ID : CVE-2026-4391\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : A security vulnerability has been detected in TeamSpeak 3 Server up to 3.13.7. This vulnerability affects unknown code...", "vulnerability": "CVE-2026-4391", "author": {"login": "automation"}}, {"uuid": "6ccce3b7-dee9-4c6c-b0d1-39609c3bd0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:15:46.162739+00:00", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mmud5hme4r2y", "content": "pretix: patch CVE-2026-9712\n\nhttps://github.com/NixOS/nixpkgs/pull/524971\n\n#security", "vulnerability": "CVE-2026-9712", "author": {"login": "automation"}}, {"uuid": "bf263ff0-6300-4615-9241-2ca226bf34de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:11:38.325803+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmucv7e3b52p", "content": "CVE-2026-4392 - TeamSpeak 3 Server clientek Handshake assertion\nCVE ID : CVE-2026-4392\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : A vulnerability was detected in TeamSpeak 3 Server up to 3.13.7. This issue affects some unknown processing of the co...", "vulnerability": "CVE-2026-4392", "author": {"login": "automation"}}, {"uuid": "e506b011-9a76-4e71-8915-5861a06fbf5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:11:37.119855+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmucv5bwcs26", "content": "~Cybergcca~\nCCCS released 8 advisories for major vendors including Microsoft, Google, GitHub, and GitLab.\n-\nIOCs: CVE-2026-45659\n-\n#CyberSecurity #Patching #ThreatIntel", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "cd52f2ee-d5a2-429d-a6b2-87a7bd12ab26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:07:06.820374+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmucnydwf42f", "content": "\ud83d\udccc CVE-2026-8633 - IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Ser... https://www.cyberhub.blog/cves/CVE-2026-8633", "vulnerability": "CVE-2026-8633", "author": {"login": "automation"}}, {"uuid": "e1fb8098-2cc8-4a4d-be3e-5c4533d079e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:06:47.890100+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmucnfq3w323", "content": "~Cisa~\nCISA added three actively exploited vulnerabilities to the KEV catalog.\n-\nIOCs: CVE-2026-8398, CVE-2026-45321, CVE-2026-48027\n-\n#CISA #KEV #threatintel", "vulnerability": "CVE-2026-48027", "author": {"login": "automation"}}, {"uuid": "b12e9c3d-2d1a-4f53-a2b2-24f38c9221db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:06:47.560330+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmucnfq3w323", "content": "~Cisa~\nCISA added three actively exploited vulnerabilities to the KEV catalog.\n-\nIOCs: CVE-2026-8398, CVE-2026-45321, CVE-2026-48027\n-\n#CISA #KEV #threatintel", "vulnerability": "CVE-2026-45321", "author": {"login": "automation"}}, {"uuid": "f0e5960f-7f4b-48c7-8695-3f6561646efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:06:47.282418+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmucnfq3w323", "content": "~Cisa~\nCISA added three actively exploited vulnerabilities to the KEV catalog.\n-\nIOCs: CVE-2026-8398, CVE-2026-45321, CVE-2026-48027\n-\n#CISA #KEV #threatintel", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "5b334811-9c8b-456e-813c-57db8e78b550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:06:08.893382+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmucmavj2g2i", "content": "CVE-2026-48152 - Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL\nCVE ID : CVE-2026-48152\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0...", "vulnerability": "CVE-2026-48152", "author": {"login": "automation"}}, {"uuid": "9a61477e-e3c9-462d-b32f-02d4b9d0220a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:04:20.543730+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmucizawe62q", "content": "~Arcticwolf~\nCVE-2026-35616 is actively exploited to push EKZ Infostealer to managed endpoints via fake patches.\n-\nIOCs: 83. 138. 53. 110, 185. 220. 101. 15, 192. 42. 116. 14\n-\n#CVE202635616 #Malware #ThreatIntel", "vulnerability": "CVE-2026-35616", "author": {"login": "automation"}}, {"uuid": "29f4a1a3-c695-457e-88bb-7463f6065d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:03:07.582931+00:00", "type": "seen", "source": "https://bsky.app/profile/coxxs.moe/post/3mmucgj6mxk27", "content": "7-Zip users, time to upgrade!\n\nCVE-2026-48095\nsecuritylab.github.com/advisories/G...", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "e667063c-d0a1-4530-a52b-3da9980e331f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:01:08.329369+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmucdcb5kf2p", "content": "CVE-2026-48153 - Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata\nCVE ID : CVE-2026-48153\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in...", "vulnerability": "CVE-2026-48153", "author": {"login": "automation"}}, {"uuid": "63a6c04c-cc09-48d2-b958-0a677a61868b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T20:00:00+00:00", "type": "seen", "source": "https://jvn.jp/en/jp/JVN01719116", "content": "", "vulnerability": "CVE-2025-61669", "author": {"login": "syspect"}}, {"uuid": "3bd20d12-e364-42c3-ad99-942306afc2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:56:50.497122+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuc3mlhfr2k", "content": "CVE-2026-46427 - Budibase: Snowflake private key returned unmasked from datasource API to BASIC users\nCVE ID : CVE-2026-46427\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.38.3, removeSecrets a...", "vulnerability": "CVE-2026-46427", "author": {"login": "automation"}}, {"uuid": "900e56a1-88c2-478a-a7e4-c197200ece23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:55:55.546526+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmubzsxsj62o", "content": "CVE-2026-48147 - Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker\nCVE ID : CVE-2026-48147\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to...", "vulnerability": "CVE-2026-48147", "author": {"login": "automation"}}, {"uuid": "296fbb16-97b3-4347-b941-0daed6245721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:50:49.924520+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmubqugvac2o", "content": "CVE-2026-48128 - Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step\nCVE ID : CVE-2026-48128\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, the executeQuery automat...", "vulnerability": "CVE-2026-48128", "author": {"login": "automation"}}, {"uuid": "cd4f5c46-20a2-47e5-a398-95a518972a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:48:15.994136+00:00", "type": "seen", "source": "https://bsky.app/profile/andresbohren.bsky.social/post/3mmubm7gb3s22", "content": "\ud83d\udea8New #JabraDirect Version has been published\n- Addresses several vulnerabilities:\nCVE-2025-22871, CVE-2024-24790, CVE-2023-24531, CVE-2023-29827\ntinyurl.com/5f7mmkvf", "vulnerability": "CVE-2023-29827", "author": {"login": "automation"}}, {"uuid": "e910a939-ac21-48a1-9bf9-a6282d045547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:48:15.840294+00:00", "type": "seen", "source": "https://bsky.app/profile/andresbohren.bsky.social/post/3mmubm7gb3s22", "content": "\ud83d\udea8New #JabraDirect Version has been published\n- Addresses several vulnerabilities:\nCVE-2025-22871, CVE-2024-24790, CVE-2023-24531, CVE-2023-29827\ntinyurl.com/5f7mmkvf", "vulnerability": "CVE-2023-24531", "author": {"login": "automation"}}, {"uuid": "e2e5fb30-4050-42d7-8841-4dcd08d2f27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:48:15.707588+00:00", "type": "seen", "source": "https://bsky.app/profile/andresbohren.bsky.social/post/3mmubm7gb3s22", "content": "\ud83d\udea8New #JabraDirect Version has been published\n- Addresses several vulnerabilities:\nCVE-2025-22871, CVE-2024-24790, CVE-2023-24531, CVE-2023-29827\ntinyurl.com/5f7mmkvf", "vulnerability": "CVE-2024-24790", "author": {"login": "automation"}}, {"uuid": "b8b1a943-7e92-4283-a85a-5811dd03662e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:48:15.579534+00:00", "type": "seen", "source": "https://bsky.app/profile/andresbohren.bsky.social/post/3mmubm7gb3s22", "content": "\ud83d\udea8New #JabraDirect Version has been published\n- Addresses several vulnerabilities:\nCVE-2025-22871, CVE-2024-24790, CVE-2023-24531, CVE-2023-29827\ntinyurl.com/5f7mmkvf", "vulnerability": "CVE-2025-22871", "author": {"login": "automation"}}, {"uuid": "3f897a48-b2a6-481d-98aa-53d668026cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:45:49.346964+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmubhvu6d72c", "content": "CVE-2026-48150 - Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign\nCVE ID : CVE-2026-48150\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, /api/pu...", "vulnerability": "CVE-2026-48150", "author": {"login": "automation"}}, {"uuid": "b8cb8dd7-5637-4193-814d-66eedf7e0940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:40:48.924943+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmub6xesu32c", "content": "CVE-2026-48146 - Budibase: SSRF via OAuth2 Config Validation \u2014 Missing fetchWithBlacklist Protection\nCVE ID : CVE-2026-48146\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.39.0, the OAuth2 token...", "vulnerability": "CVE-2026-48146", "author": {"login": "automation"}}, {"uuid": "4980d757-f93b-4056-bebf-ba4a4f1dd0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:37:05.930559+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmuaycjlbz2y", "content": "\ud83d\udccc CVE-2026-40411 - Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-40411", "vulnerability": "CVE-2026-40411", "author": {"login": "automation"}}, {"uuid": "0643131f-d66f-4604-97ac-c5ca1c0a7882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:35:48.369296+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuavyucc42o", "content": "CVE-2026-48148 - Budibase: Unvalidated VectorDB Host Parameter Enables SSRF\nCVE ID : CVE-2026-48148\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.35.3, the VectorDB configuration endpoint in Bu...", "vulnerability": "CVE-2026-48148", "author": {"login": "automation"}}, {"uuid": "8510e56b-d02b-471c-8983-a4602607416e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:31:14.827644+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuamzumeb2o", "content": "CVE-2026-46424 - Budibase: Missing Cache Invalidation on Public API Role Unassignment Allows Revoked Users to Retain Privileges for Up to 1 Hour\nCVE ID : CVE-2026-46424\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code...", "vulnerability": "CVE-2026-46424", "author": {"login": "automation"}}, {"uuid": "29909c3e-a5b3-4c00-807a-9e1431e46632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:26:29.931522+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmuafe64q72n", "content": "CVE-2026-48149 - Budibase: Stored XSS in Text component: BASIC users execute JS in admin session via MarkdownViewer innerHTML + CDN+srcdoc CSP bypass\nCVE ID : CVE-2026-48149\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low...", "vulnerability": "CVE-2026-48149", "author": {"login": "automation"}}, {"uuid": "33a173c1-0da5-4747-97a8-8c27c55fd20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:22:56.480321+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmua6mzti42i", "content": "CVE-2026-46425 - Budibase: SCIM endpoints lack role-based authorization, BASIC users CRUD tenant users\nCVE ID : CVE-2026-46425\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.38.2, packages/worke...", "vulnerability": "CVE-2026-46425", "author": {"login": "automation"}}, {"uuid": "05d63ec9-d091-47ef-8ced-69ed6434e388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:19:23.687455+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7ynnjzd2q", "content": "CVE-2026-46426 - Budibase: Unrestricted Upload of File with Dangerous Type\nCVE ID : CVE-2026-46426\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.38.2, the file upload endpoint POST /api/attachm...", "vulnerability": "CVE-2026-46426", "author": {"login": "automation"}}, {"uuid": "863de294-d623-49e3-851e-660588a3e24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:16:22.884879+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7tb6enp2i", "content": "CVE-2026-48151 - Budibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schema\nCVE ID : CVE-2026-48151\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platfor...", "vulnerability": "CVE-2026-48151", "author": {"login": "automation"}}, {"uuid": "bd73e4f3-8a64-419b-b964-c9de77fed655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:13:38.140467+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7oefvvl2e", "content": "CVE-2026-45718 - Budibase: Row Action Trigger Bypasses View Row Filter Security Boundary Allowing Action on Out-of-Scope Rows\nCVE ID : CVE-2026-45718\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to...", "vulnerability": "CVE-2026-45718", "author": {"login": "automation"}}, {"uuid": "021f9c9b-f2db-44bb-ba8e-1d26ee24f63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:12:55.396158+00:00", "type": "seen", "source": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mmu7muiluxh2", "content": "\ud83d\udea9 Critical KnowledgeDeliver RCE (CVE-2026-5426) abused via shared ASP.NET machine keys to deliver web shells and Cobalt Strike KnowledgeDeliver exploit (CVE-2026-5426) enables RCE via ViewState ...\n\n#TIGR #malware #vulnerability\n\nOrigin | Interest | Match", "vulnerability": "CVE-2026-5426", "author": {"login": "automation"}}, {"uuid": "b1ab72d0-4143-438b-937e-3dd8d0c621cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:11:06.954359+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7jtzdbq2c", "content": "CVE-2026-45717 - Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL.\nCVE ID : CVE-2026-45717\n \n P...", "vulnerability": "CVE-2026-45717", "author": {"login": "automation"}}, {"uuid": "2d594745-8ea2-4456-85fc-b959da64566c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:09:46.684896+00:00", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6591185", "content": "2026-05-27: [CVE-2026-48027] Nx Console Embedded Malicious Code VulnerabilityNx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.\ncisakev", "vulnerability": "CVE-2026-48027", "author": {"login": "automation"}}, {"uuid": "80d9955a-5970-46de-81f4-fbe887842a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:09:44.103279+00:00", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6591184", "content": "2026-05-27: [CVE-2026-45321] TanStack Unspecified VulnerabilityTanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.\ncisakev", "vulnerability": "CVE-2026-45321", "author": {"login": "automation"}}, {"uuid": "d0cdf8a9-52ac-4b4e-be86-89cebffaab18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:09:41.010220+00:00", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6591183", "content": "2026-05-27: [CVE-2026-8398] Daemon Tools Lite Embedded Malicious Code VulnerabilityDaemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability.\ncisakev", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "a07fa4a0-c0d5-4cdb-b6a4-b801ede35ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:08:48.002568+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmu7fpio442c", "content": "CVE-2026-45719 - Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API\nCVE ID : CVE-2026-45719\n \n Published : May 27, 2026, 6:16 p.m. | 15\u00a0minutes ago\n \n Description : Budibase is an open-source low-code platform. Prior to 3.38.1, the V1 View...", "vulnerability": "CVE-2026-45719", "author": {"login": "automation"}}, {"uuid": "0981e6f8-146e-4b18-a4e2-296b768f349a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:07:07.433387+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmu7cpkhmt26", "content": "\ud83d\udccc CVE-2026-23652 - Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execut... https://www.cyberhub.blog/cves/CVE-2026-23652", "vulnerability": "CVE-2026-23652", "author": {"login": "automation"}}, {"uuid": "ba2d21b6-2c28-42b6-be70-cd096791e7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:03:18.029484+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116648089058386543", "content": "The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-46081) https://vuldb.com/vuln/366344", "vulnerability": "CVE-2026-46081", "author": {"login": "automation"}}, {"uuid": "15c3c707-7950-479b-88f7-9f572dfc2d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:02:09.049567+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zs6d5j2n", "content": "\ud83d\udd34 CVE-2026-46425 - Critical (9.9)\n\nBudibase is an open-source low-code platform. Prior to 3.38.2, packages/worker/src/api/routes/glo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46425/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-46425", "author": {"login": "automation"}}, {"uuid": "6016099d-a5f5-44dd-b98c-4877f6615368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:02:00.807109+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zk2b2p2w", "content": "\ud83d\udfe0 CVE-2026-48153 - High (8.5)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48153/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48153", "author": {"login": "automation"}}, {"uuid": "782797e0-d82b-4bf1-917e-566f3f530a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:01:52.704159+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6zccumf2t", "content": "\ud83d\udfe0 CVE-2026-48152 - High (8.1)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, the single-datasource GET and PUT ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48152/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48152", "author": {"login": "automation"}}, {"uuid": "3edbcd71-7f7f-468f-8f81-2e0c2dd897fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:00:57.853480+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6xo2nd72w", "content": "\ud83d\udfe0 CVE-2026-48151 - High (7.5)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, the webhook schema-building endpoi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48151/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48151", "author": {"login": "automation"}}, {"uuid": "05de6646-216f-440b-8eb5-2df952a80073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:00:49.763812+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6xgnpmn2g", "content": "\ud83d\udd34 CVE-2026-48150 - Critical (9)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, /api/public/v1/roles/assign is gua...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48150/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48150", "author": {"login": "automation"}}, {"uuid": "8d2c611d-65dd-4130-9fa3-6cfdc73a4cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T19:00:41.583517+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu6x6poof2n", "content": "\ud83d\udfe0 CVE-2026-48149 - High (8.1)\n\nBudibase is an open-source low-code platform. Prior to 3.39.0, the Budibase Text component render...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48149/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48149", "author": {"login": "automation"}}, {"uuid": "c294fc82-230f-4d64-8617-1f46ab0b7dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:37:07.969252+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmu5n3fhnp2p", "content": "\ud83d\udccc CVE-2026-40412 - Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-40412", "vulnerability": "CVE-2026-40412", "author": {"login": "automation"}}, {"uuid": "3dbeb53c-2b7a-421c-b6a2-ee4153792a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:10:54.897071+00:00", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmu45v5bcy2s", "content": "\ud83d\uded1 CVE-2026-8398\nDaemon Daemon Tools Lite\nCVSS 9.3 / EPSS 0% / KEV\nTL;DR: A supply chain attack compromised the official installation packages of DAEMON Tools Lit\u2026\nhttps://cvesentinel.com/report/CVE-2026-8398?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "a2c4a233-7346-4610-ab31-03a41d4cf000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:10:43.905534+00:00", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmu45ujto42h", "content": "\ud83d\uded1 CVE-2026-45321\nTanStack TanStack\nCVSS 9.6 / EPSS 0% / KEV\nTL;DR: On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @ta\u2026\nhttps://cvesentinel.com/report/CVE-2026-45321?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "vulnerability": "CVE-2026-45321", "author": {"login": "automation"}}, {"uuid": "1b8c7fe8-d62f-4b80-815a-94a3f2ce4d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:10:41.545491+00:00", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmu45p54pa2c", "content": "\ud83d\uded1 CVE-2026-48027\nNx Nx Console\nCVSS 9.3 / KEV\nTL;DR: Nx Console is the user interface for Nx &amp; Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0\u2026\nhttps://cvesentinel.com/report/CVE-2026-48027?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "vulnerability": "CVE-2026-48027", "author": {"login": "automation"}}, {"uuid": "9dc660f8-5252-4ac7-8599-0604f7b644ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:07:07.530424+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmu3xgipzu2w", "content": "\ud83d\udccc CVE-2018-25357 - Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP... https://www.cyberhub.blog/cves/CVE-2018-25357", "vulnerability": "CVE-2018-25357", "author": {"login": "automation"}}, {"uuid": "2688b113-d35b-40c0-947a-d35c822e84bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:06:24.795298+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmu3w57fjz2m", "content": "CVE-2025-26936 - Critical Code Injection in Freshface Fresh Framework. CVSS 10. Unpatched. Attackers can inject arbitrary code. Disable or remove immediately. #CVE #infosec #cybersecurity\n\nhttps://www.valtersit.com/cve/CVE-2025-26936/", "vulnerability": "CVE-2025-26936", "author": {"login": "automation"}}, {"uuid": "fccaa39a-cc92-4edd-8b7c-b4765a81361e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:01:56.285277+00:00", "type": "seen", "source": "https://bsky.app/profile/hackinghub.bsky.social/post/3mmu3o5rvev2e", "content": "Vaadin treats the request as a framework request, triggers initialization, and creates a session without proper authorization.\n\nThis is CVE-2026-2742: unauthorized session creation via reserved framework path access.", "vulnerability": "CVE-2026-2742", "author": {"login": "automation"}}, {"uuid": "fb3823d5-4239-4cce-843a-871753112b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:01:27.637800+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu3nbo6rk26", "content": "\ud83d\udd34 CVE-2026-44327 - Critical (10)\n\nfree5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44327/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44327", "author": {"login": "automation"}}, {"uuid": "74b597f1-65e0-4e81-8a7b-549bbbc46518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:01:22.767848+00:00", "type": "seen", "source": "https://mastodon.social/ap/users/115755483699003887/statuses/116647845023345610", "content": "\ud83d\udd34 CVE-2026-44327 - Critical (10)\nfree5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization. A network attacker who can reach NEF on the SBI can hit the OAM route...\n\ud83d\udd17 https://www.thehackerwire.com/vulnerability/CVE-2026-44327/\n#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack", "vulnerability": "CVE-2026-44327", "author": {"login": "automation"}}, {"uuid": "731e01e3-bb08-4206-ad36-eff1c95fbad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:01:19.680295+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu3n244p52s", "content": "\ud83d\udd34 CVE-2026-44326 - Critical (9.4)\n\nfree5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44326/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44326", "author": {"login": "automation"}}, {"uuid": "6d8feed0-b808-416a-9d56-d4517a4b39c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T18:01:11.638001+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmu3mrz7jk26", "content": "\ud83d\udfe0 CVE-2026-44483 - High (8.2)\n\nRVF (formerly Remix Validated Form) provides easy form validation and state management for React....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44483/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44483", "author": {"login": "automation"}}, {"uuid": "2fc6031f-5ea6-4548-9172-4711b3bd792f", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "creation_timestamp": "2026-05-27T18:00:02.449510+00:00", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/11739434-0930-4569-82cd-80d659d1039f", "content": "", "vulnerability": "CVE-2026-8398", "author": {"login": "automation"}}, {"uuid": "e09aa07b-11ba-4231-88f3-8d6fc11563f7", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "creation_timestamp": "2026-05-27T18:00:02.338954+00:00", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5eca6dd4-073c-4bd1-b174-250eb902c1bf", "content": "", "vulnerability": "CVE-2026-45321", "author": {"login": "automation"}}, {"uuid": "1fcf8dfe-5d6a-4d79-bfd4-a7e767eea191", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "creation_timestamp": "2026-05-27T18:00:02.229951+00:00", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/23d94b6e-e10b-4ed3-9304-fbf1858a9ac5", "content": "", "vulnerability": "CVE-2026-48027", "author": {"login": "automation"}}, {"uuid": "16850951-99b3-4b79-82e9-9729bd10954e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:43:40.215809+00:00", "type": "seen", "source": "https://bsky.app/profile/alexandreborges.bsky.social/post/3mmu2k2hve22g", "content": "GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095):\n\nsecuritylab.github.com/advisories/G...\n\n#vulnerability #cybersecurity #informationsecurity #exploitation #cve", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "e5f0ed66-8b63-4751-ba36-00557698c929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:43:20.155002+00:00", "type": "seen", "source": "https://infosec.exchange/users/alexandreborges/statuses/116647775241668235", "content": "GHSL-2026-140: Heap Buffer Write Overflow in 7-Zip (CVE-2026-48095):\nhttps://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/\n#vulnerability #cybersecurity #informationsecurity #exploitation #cve", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "0c0d5703-154e-4ee1-8498-4ca2e9aaf2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:37:06.770096+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmu2bqqi4p2f", "content": "\ud83d\udccc CVE-2026-47280 - Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-47280", "vulnerability": "CVE-2026-47280", "author": {"login": "automation"}}, {"uuid": "7ae97e70-2355-4eb8-9493-d933785f8917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:32:33.908232+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmtzzmt3ah2e", "content": "ARTEMIS-5996: CVE-2026-40914: Apache Artemis, Apache ActiveMQ Artemis: Address routing-type can be updated by STOMP protocol user without the createAddress permission", "vulnerability": "CVE-2026-40914", "author": {"login": "automation"}}, {"uuid": "dc583595-aaad-46af-be5b-1758f9414f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:27:32.775252+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmtzqnpwan2b", "content": "[OSSA-2026-014] OpenStack Swift: Swift proxy-server denial of service via truncated s3api chunked upload (CVE-2026-49017)", "vulnerability": "CVE-2026-49017", "author": {"login": "automation"}}, {"uuid": "3ce02e0a-24c8-432f-8df7-a248956f52cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:22:18.619806+00:00", "type": "seen", "source": "https://bsky.app/profile/securitylab.github.com/post/3mmtzhazu7s27", "content": "Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip &lt;= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. securitylab.github.com/advisories/G...", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "3e3d6507-8940-48c2-aa56-7fb71ac27c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:16:21.208910+00:00", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmtz3fj3rtw2", "content": "\ud83d\udfe0 CVE-2026-49046 - High (8.5) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit... https://www.thehackerwire.com/vulnerability/CVE-2026-49...\n\n\nOrigin | Interest | Match", "vulnerability": "CVE-2026-49046", "author": {"login": "automation"}}, {"uuid": "ebadb2a8-c795-4065-abe7-6851505f6e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:14:48.003229+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmtyztwpov2g", "content": "CVE-2025-26645 - Critical path traversal in Microsoft Remote Desktop Client. CVSS 8.8. Unpatched. Exploitation over network. Act now: restrict RDP access. #CVE #Microsoft #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-26645/", "vulnerability": "CVE-2025-26645", "author": {"login": "automation"}}, {"uuid": "04269d98-d8cf-4b91-bf7b-ebe075485230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:10:21.545662+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmtyrvoo7s2g", "content": "Actively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)\n\nA relative directory path traversal vulnerability (CVE-2026-34926) in Trend Micro\u2019s Apex One platform has been exploited in zero-day attacks, the company confirmed. \u201cTrendAI has observed at least one \u2026\n#hackernews #news", "vulnerability": "CVE-2026-34926", "author": {"login": "automation"}}, {"uuid": "14881105-4576-481c-9d5d-3f9a923f23ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:07:07.845443+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmtym4x6z52p", "content": "\ud83d\udccc CVE-2026-40033 - FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap mem... https://www.cyberhub.blog/cves/CVE-2026-40033", "vulnerability": "CVE-2026-40033", "author": {"login": "automation"}}, {"uuid": "b91560b4-5c25-45b8-b084-af291e914d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:02:48.098556+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyefixwt2n", "content": "\ud83d\udfe0 CVE-2026-44971 - High (8.2)\n\nGuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44971/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44971", "author": {"login": "automation"}}, {"uuid": "906ca8c1-faab-485e-921d-1a283f942fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:02:41.704069+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtye5ufzl2t", "content": "\ud83d\udfe0 CVE-2026-44902 - High (7.5)\n\nopentelemetry-js is the OpenTelemetry JavaScript Client. Prior to 0.217.0, a single malformed HTT...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44902/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44902", "author": {"login": "automation"}}, {"uuid": "de0d8e53-9425-4f27-923a-c5e47a02e2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:02:33.579575+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtydxa2kt2w", "content": "\ud83d\udfe0 CVE-2026-48544 - High (7.5)\n\nTaipy 4.1.1, fixed in commit 129fd40, contains a path traversal vulnerability in the ElementLibra...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48544/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48544", "author": {"login": "automation"}}, {"uuid": "6249ff3c-b543-4c7c-9add-ee1548891357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:00:50.472541+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyalfzif2e", "content": "\ud83d\udfe0 CVE-2026-49046 - High (8.5)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49046/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-49046", "author": {"login": "automation"}}, {"uuid": "6226d532-4182-4de1-83e3-c39a52bb8523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:00:47.732487+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtyadw3ka2r", "content": "\ud83d\udfe0 CVE-2026-6957 - High (8)\n\nMattermost Plugins versions &lt;=1.1.5 fail to sanitize filenames received from federated peers b...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6957/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-6957", "author": {"login": "automation"}}, {"uuid": "16405ebc-482f-462b-aff8-df2c2f03b4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T17:00:43.626114+00:00", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mmty7qy5kqh2", "content": "Attackers Can Exploit BadHost to Access Sensitive AI Agent Server Endpoints A newly disclosed critical vulnerability, tracked as CVE-2026-48710 and dubbed \u201cBadHost,\u201d is putting thousands of AI-...\n\n#AI #Cyber #Security #News #Vulnerability #cyber [\u2026] \n\n[Original post on cybersecuritynews.com]", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "0eeabc5c-873f-4dcd-b981-7e5318e1a87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:32.577777+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmko42a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "188d9a9a-e4e1-4e81-a562-2b8cf5f3e0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:32.067121+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmko32a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "305868d5-b412-4745-8f9d-51d25dc7b0cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:31.531008+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmko22a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "8aa16c8f-9cce-4995-b6fd-c5ef0e31416c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:30.990169+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmjos2a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "ef67c197-d274-49d9-b2b7-fc4a1f19bc3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:30.236213+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmipk2a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "91e410b9-c62a-4b8a-89a2-3fa8e3e09b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:29.677514+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmhqc2a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "9c93ab03-6049-42ee-ac4d-41ee48b12aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:29.156182+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmgr22a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "b12bb692-cb6a-4c21-91d8-6df9baab4f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:28.642777+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvmfrs2a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "807ac544-acf5-440a-80c8-5d11a3c19dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:52:28.072875+00:00", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mmtxrvm3zc2a", "content": "4/ \u26a0\ufe0f PATCH NOW: Microsoft SharePoint CVE-2026-45659 (CVSS 8.8). Authenticated attacker. Remote code execution. No user interaction required. On-prem SharePoint servers need this update today.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "e757b9d0-7722-433f-9f12-72805af1e13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:43:33.798226+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtxbyzjvx2t", "content": "CVE-2026-8405 - IBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerability\nCVE ID : CVE-2026-8405\n \n Published : May 27, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : IBM Guardium Data Protection 12.2.1, and 12.2.2 's add-on feature of Guar...", "vulnerability": "CVE-2026-8405", "author": {"login": "automation"}}, {"uuid": "a0badd72-267b-467d-a72e-9c0b940050d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:40:58.920632+00:00", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmtx4n6tus2m", "content": "\ud83d\udea8 Critical SQL injection flaw in dotCMS Core: CVE-2026-8054 (CVSS 10.0)\n\nUnauthenticated attackers can read, modify, or destroy database content through exposed Publish Audit API endpoints.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CVE #dotCMS #CyberSecurity", "vulnerability": "CVE-2026-8054", "author": {"login": "automation"}}, {"uuid": "7558909b-0bf3-4316-8fde-0566224fb15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:40:58.408730+00:00", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmtx4ikisk2m", "content": "\ud83d\udea8 Critical SQL injection flaw in dotCMS Core: CVE-2026-8054 (CVSS 10.0)\n\nUnauthenticated attackers can read, modify, or destroy database content through exposed Publish Audit API endpoints.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CVE #dotCMS #CyberSecurity", "vulnerability": "CVE-2026-8054", "author": {"login": "automation"}}, {"uuid": "8be23085-2388-4152-98e1-1d0a7aae5d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:40:57.876650+00:00", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmtx4dglos2m", "content": "\ud83d\udea8 Critical SQL injection flaw in dotCMS Core: CVE-2026-8054 (CVSS 10.0)\n\nUnauthenticated attackers can read, modify, or destroy database content through exposed Publish Audit API endpoints.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CVE #dotCMS #CyberSecurity", "vulnerability": "CVE-2026-8054", "author": {"login": "automation"}}, {"uuid": "77181d43-ab60-4728-933e-63af05653b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:38:35.559611+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtwz2lusu2v", "content": "CVE-2026-9617 - PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function\nCVE ID : CVE-2026-9617\n \n Published : May 27, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : PostgreSQL Anonymizer contains a vulnerability that allows a user t...", "vulnerability": "CVE-2026-9617", "author": {"login": "automation"}}, {"uuid": "ef32c352-1ca9-4b93-9fdc-478e955ba6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:37:41.423142+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmtwwhceoy2u", "content": "\ud83d\udccc CVE-2026-46624 - Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in Twenty CRM via a chained SQL I... https://www.cyberhub.blog/cves/CVE-2026-46624", "vulnerability": "CVE-2026-46624", "author": {"login": "automation"}}, {"uuid": "e746f63e-7440-443b-9505-6c2a6c513e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:37:29.963547+00:00", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwvyomhc2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba mais -&gt;   tinyurl.com/2s4kftbc #SUSE", "vulnerability": "CVE-2026-29004", "author": {"login": "automation"}}, {"uuid": "6556055d-edb3-4da3-8a2f-3285d9b75d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:37:29.330829+00:00", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwvxe53c2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba mais -&gt;   tinyurl.com/2s4kftbc #SUSE", "vulnerability": "CVE-2026-29004", "author": {"login": "automation"}}, {"uuid": "bdf332f2-a6a6-40b5-95cd-d7272928e6f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:34:41.342646+00:00", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwryu5wc2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba amis -&gt;   tinyurl.com/2s4kftbc #SUSE", "vulnerability": "CVE-2026-29004", "author": {"login": "automation"}}, {"uuid": "94f380b6-0b17-415e-95b9-9c58b91767f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:34:40.826134+00:00", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwrxbsls2o", "content": "Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo.   Saiba amis -&gt;   tinyurl.com/2s4kftbc #SUSE", "vulnerability": "CVE-2026-29004", "author": {"login": "automation"}}, {"uuid": "56b32aad-ce0f-4589-bfb2-a90d8dc54e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:33:33.190191+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtwq45msb2p", "content": "CVE-2026-9035 - Multiple vulnerabilities in Aspera applications.\nCVE ID : CVE-2026-9035\n \n Published : May 27, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7...", "vulnerability": "CVE-2026-9035", "author": {"login": "automation"}}, {"uuid": "722db041-4d43-4dad-9e99-9a9609db942a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:28:32.617887+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtwh5k77q2k", "content": "CVE-2026-8180 - Multiple vulnerabilities in Aspera applications.\nCVE ID : CVE-2026-8180\n \n Published : May 27, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7...", "vulnerability": "CVE-2026-8180", "author": {"login": "automation"}}, {"uuid": "cee677bc-4c1d-45bc-b01e-5904b5dd6999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:28:04.599929+00:00", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mmtwgcjevb24", "content": "Critical #SharePointServer vulnerability (CVE-2026-45659) allows remote code execution. Apply patches immediately to secure your systems. #CyberSecurity #InfoSec #Microsoft Link: thedailytechfeed.com/critical-sha...", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "208bc45b-c436-4c79-bf7d-b9f64f0890ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:27:27.275673+00:00", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwf362rs23", "content": " Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo. Read more -&gt;     tinyurl.com/2s4kftbc #SuSE", "vulnerability": "CVE-2026-29004", "author": {"login": "automation"}}, {"uuid": "d319a3a0-ce5b-44cf-b1e5-ec3f9a0e7794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:27:26.736281+00:00", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mmtwezgekk23", "content": " Vulnerabilidade cr\u00edtica no BusyBox (CVE-2026-29004) exige a\u00e7\u00e3o imediata em servidores SUSE. O problema \u00e9 um heap buffer overflow no cliente DHCPv6 que pode ser explorado remotamente para execu\u00e7\u00e3o de c\u00f3digo. Read more -&gt;     tinyurl.com/2s4kftbc #SuSE", "vulnerability": "CVE-2026-29004", "author": {"login": "automation"}}, {"uuid": "17a2cfdd-6cbe-451d-b1c3-efea0b1c494d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:23:32.367226+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtw673e7s2i", "content": "CVE-2026-9704 - Keycloak: keycloak: privilege escalation due to oversized subject_token jwt\nCVE ID : CVE-2026-9704\n \n Published : May 27, 2026, 2:17 p.m. | 14\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. An authenticated user with low privileges can exploit this ...", "vulnerability": "CVE-2026-9704", "author": {"login": "automation"}}, {"uuid": "7a00e48d-9fd9-4489-badb-3b33a68ab528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:14:56.323540+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtvosxdoy2i", "content": "CVE-2026-7524 - Path Traversal Vulnerability in File Processing Components Allows Unauthorized File System Access and Potential Remote Code Execution\nCVE ID : CVE-2026-7524\n \n Published : May 27, 2026, 2:17 p.m. | 52\u00a0minutes ago\n \n Description : IBM Langflow OSS 1.0.0 through ...", "vulnerability": "CVE-2026-7524", "author": {"login": "automation"}}, {"uuid": "fbce5122-4273-4dd5-9679-c2374d31306a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:09:56.020956+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtvfujfj62t", "content": "CVE-2026-7365 - IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation\nCVE ID : CVE-2026-7365\n \n Published : May 27, 2026, 2:17 p.m. | 52\u00a0minutes ago\n \n Description : IBM Operat...", "vulnerability": "CVE-2026-7365", "author": {"login": "automation"}}, {"uuid": "f3af8651-a051-41c2-86f0-dc6b2aa533d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:07:10.001454+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmtvavp63q2h", "content": "\ud83d\udccc CVE-2026-7097 - A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilte... https://www.cyberhub.blog/cves/CVE-2026-7097", "vulnerability": "CVE-2026-7097", "author": {"login": "automation"}}, {"uuid": "e9fbec2a-d004-4a08-a748-63324eadd9db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:05:12.542805+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmtv5fsqu426", "content": "@talosintelligence.com\nFour heap-based buffer overflow flaws in MediaArea MediaInfoLib allow arbitrary code execution via malicious files.\n-\nIOCs: CVE-2026-25104, CVE-2026-25713, CVE-2026-28764\n-\n#MediaArea #ThreatIntel #Vulnerability", "vulnerability": "CVE-2026-28764", "author": {"login": "automation"}}, {"uuid": "cee88d31-7ad1-46ff-bcc3-3830bb7255e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:05:12.300051+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmtv5fsqu426", "content": "@talosintelligence.com\nFour heap-based buffer overflow flaws in MediaArea MediaInfoLib allow arbitrary code execution via malicious files.\n-\nIOCs: CVE-2026-25104, CVE-2026-25713, CVE-2026-28764\n-\n#MediaArea #ThreatIntel #Vulnerability", "vulnerability": "CVE-2026-25713", "author": {"login": "automation"}}, {"uuid": "737c5a25-58b6-416a-994e-2a8cee65ac03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:05:12.146616+00:00", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmtv5fsqu426", "content": "@talosintelligence.com\nFour heap-based buffer overflow flaws in MediaArea MediaInfoLib allow arbitrary code execution via malicious files.\n-\nIOCs: CVE-2026-25104, CVE-2026-25713, CVE-2026-28764\n-\n#MediaArea #ThreatIntel #Vulnerability", "vulnerability": "CVE-2026-25104", "author": {"login": "automation"}}, {"uuid": "6812f4eb-42cc-4423-aa45-46c682d427a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:04:55.568219+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtv4w342p2i", "content": "CVE-2026-35087 - Authentication Bypass in Slican telephone exchanges\nCVE ID : CVE-2026-35087\n \n Published : May 27, 2026, 2:16 p.m. | 52\u00a0minutes ago\n \n Description : Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need...", "vulnerability": "CVE-2026-35087", "author": {"login": "automation"}}, {"uuid": "b1007ed9-3427-4626-ae5c-22943e3a3e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T16:00:06+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86139", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27771\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 15:56:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27771 - Gitea/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "5c17fd82-96e9-4807-a25c-2c08da7f82db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:59:55.033221+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtutxmoug2i", "content": "CVE-2026-8175 - Multiple vulnerabilities in Aspera applications.\nCVE ID : CVE-2026-8175\n \n Published : May 27, 2026, 2:17 p.m. | 52\u00a0minutes ago\n \n Description : IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7...", "vulnerability": "CVE-2026-8175", "author": {"login": "automation"}}, {"uuid": "8b4876da-70c3-4b13-9221-3120290431ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:54:55.429653+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtukz63ze2h", "content": "CVE-2026-8179 - Multiple vulnerabilities in Aspera applications.\nCVE ID : CVE-2026-8179\n \n Published : May 27, 2026, 2:17 p.m. | 52\u00a0minutes ago\n \n Description : IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7...", "vulnerability": "CVE-2026-8179", "author": {"login": "automation"}}, {"uuid": "3dfd8dc7-92e9-4426-9fa7-cc0da3bd97e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:49:54.236479+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtuc2pe452r", "content": "CVE-2026-5065 - IBM Controller is affected by vulnerabilities\nCVE ID : CVE-2026-5065\n \n Published : May 27, 2026, 2:17 p.m. | 52\u00a0minutes ago\n \n Description : IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic ...", "vulnerability": "CVE-2026-5065", "author": {"login": "automation"}}, {"uuid": "4e59bce4-c5c1-4e55-a844-64729663dc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:45:36.988275+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtu2f5gju2i", "content": "CVE-2026-35090 - Authentication Bypass in Slican telephone exchanges\nCVE ID : CVE-2026-35090\n \n Published : May 27, 2026, 2:16 p.m. | 52\u00a0minutes ago\n \n Description : In Slican telephone exchanges it is possible to manage the control panel remotely. An unauthenticated attacker ...", "vulnerability": "CVE-2026-35090", "author": {"login": "automation"}}, {"uuid": "560fcc39-5e01-4d94-b8aa-39a1c837a841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:42:08.419137+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmttu6f5zq2h", "content": "React2Shell: Remote Code Execution Through React Server Components\nhttps://koadt.github.io/oss-oopssec-store/posts/react2shell-cve-2025-55182/", "vulnerability": "cve-2025-55182", "author": {"login": "automation"}}, {"uuid": "8eaff360-d272-473d-8a43-120406c4f8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:41:51.795011+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtttoank62o", "content": "CVE-2026-36044 - Apex OS Command Injection Vulnerability\nCVE ID : CVE-2026-36044\n \n Published : May 27, 2026, 2:16 p.m. | 52\u00a0minutes ago\n \n Description : @pensar/apex &lt;= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool(...", "vulnerability": "CVE-2026-36044", "author": {"login": "automation"}}, {"uuid": "7449df51-bb16-4888-9048-cc4b18618024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:40:07.471723+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116647290931030330", "content": "There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-46035) https://vuldb.com/vuln/366311", "vulnerability": "CVE-2026-46035", "author": {"login": "automation"}}, {"uuid": "79a37dd0-c20e-4daf-8b63-ec1244fbd29a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:38:31.167985+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmttnp42zq2c", "content": "CVE-2026-35089 - Use of Weak Credentials in Slican telephone exchanges\nCVE ID : CVE-2026-35089\n \n Published : May 27, 2026, 2:16 p.m. | 52\u00a0minutes ago\n \n Description : In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telepho...", "vulnerability": "CVE-2026-35089", "author": {"login": "automation"}}, {"uuid": "d64b5359-3739-4f9b-b96d-826682d62070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:37:09.201648+00:00", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mmttla2wfj2u", "content": "A critical vulnerability, tracked as CVE-2026-48710 and named BadHost, affects Starlette, an open-source framework with 325 million weekly downloads. This flaw allows attackers to exploit servers running AI agents, compromising sensitive data and credentials. Affected versions are prior to 1.0.", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "4a71f00c-b1bc-4377-aebd-63dee38be405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:35:46+00:00", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/19439", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SharePoint\n\n\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint Server (CVE-2026-45659). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 8,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 SharePoint Server Subscription Edition, SharePoint Server 2019 \u0438 SharePoint Enterprise Server 2016. \u0414\u043b\u044f \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\nhttps://xakep.ru/2026/05/27/cve-2026-45659/", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "687129c1-9c09-4e8b-b3a9-5e5ad7d9f243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:30:17.793876+00:00", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mmtt6ymdcz2s", "content": "Spinnaker's dual CVSS 9.9 RCE flaws expose GitOps pipelines: Echo's unrestricted SpEL evaluation and Clouddriver's shell-injection in git\u2026\n\nhttps://dev.to/x4nent/spinnaker-202610-emergency-patch-cve-2026-32613-echo-spel-rce-cve-2026-32604-clouddriver-el7\n\n#DevOps #platform", "vulnerability": "cve-2026-32604", "author": {"login": "automation"}}, {"uuid": "14a311f2-d7c3-44f1-a293-7b6c87c580e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:30:17.648900+00:00", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mmtt6ymdcz2s", "content": "Spinnaker's dual CVSS 9.9 RCE flaws expose GitOps pipelines: Echo's unrestricted SpEL evaluation and Clouddriver's shell-injection in git\u2026\n\nhttps://dev.to/x4nent/spinnaker-202610-emergency-patch-cve-2026-32613-echo-spel-rce-cve-2026-32604-clouddriver-el7\n\n#DevOps #platform", "vulnerability": "cve-2026-32613", "author": {"login": "automation"}}, {"uuid": "d1629686-3e29-4f52-a7b6-be432cf21a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:27:11.428456+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116647240072146475", "content": "The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-45975) https://vuldb.com/vuln/366274", "vulnerability": "CVE-2026-45975", "author": {"login": "automation"}}, {"uuid": "4fb15c2e-0e81-462d-8174-13a84e794f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:21:42.690397+00:00", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3mmtspkuajhn2", "content": "Windows Kernel Vulnerability Allows Attackers to Modify Kernel Memory Counters A critical Windows kernel vulnerability, tracked as CVE-2026-40369, has been disclosed, enabling attackers to achieve ...\n\n#Cyber #Security #News #Vulnerability #News [\u2026] \n\n[Original post on cybersecuritynews.com]", "vulnerability": "CVE-2026-40369", "author": {"login": "automation"}}, {"uuid": "c37fdca4-c3c3-4188-b0e6-f646b189b5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:16:05.994716+00:00", "type": "seen", "source": "https://bsky.app/profile/idenhaus.bsky.social/post/3mmtsfiwuj72v", "content": "A critical command injection vulnerability has been discovered in Universal Robots PolyScope 5, the operating system that powers the company's collaborative robots. The flaw, tracked as CVE-2026-8153, carries a CVSS score of 9.8 and affects all software versions prior to PolyScope 5.25.1.", "vulnerability": "CVE-2026-8153", "author": {"login": "automation"}}, {"uuid": "81028686-5e47-4074-9976-8529256f2a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:13:10.603637+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116647184733986841", "content": "The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-45952) https://vuldb.com/vuln/366189", "vulnerability": "CVE-2026-45952", "author": {"login": "automation"}}, {"uuid": "7ea60b24-11f0-44d3-93d9-4352bcadd4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:07:07.706327+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmtrvkrhw42u", "content": "\ud83d\udccc CVE-2026-7081 - A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component http... https://www.cyberhub.blog/cves/CVE-2026-7081", "vulnerability": "CVE-2026-7081", "author": {"login": "automation"}}, {"uuid": "0d151f2e-b2ae-4802-8688-de20e483489e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:06:12.555997+00:00", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mmtrtvunmz2y", "content": "Microsoft addresses critical SharePoint RCE vulnerability CVE-2026-45659. Ensure your servers are updated to prevent potential exploits. #CyberSecurity #SharePoint #Microsoft #SecurityUpdate Link: thedailytechfeed.com/microsoft-pa...", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "6f5d2984-d051-4c4e-9b6e-c140fb1f1fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:05:04.898492+00:00", "type": "seen", "source": "https://bsky.app/profile/aiweekly.bsky.social/post/3mmtrrtn4r72y", "content": "\ud83d\udea8 2 AI alerts:\n\u2192 BNP Paribas Works With Mistral AI to Build European Cybersecurity Defense\u2026\n\u2192 CVE-2026-48710 'BadHost': Critical Starlette Auth-Bypass Imperils Millions of\u2026\n\nhttps://aiweekly.co/ai-news-today?utm_source=bluesky", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "8ae23c8d-4de5-455e-a07e-5050785864b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:01:58.098943+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrmcxtdz2r", "content": "\ud83d\udfe0 CVE-2026-48972 - High (7.5)\n\nImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48972/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-48972", "author": {"login": "automation"}}, {"uuid": "d0de5995-3777-4b4d-b6d2-e0f1d9ebd5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:01:51.021736+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrm3smoa2w", "content": "\ud83d\udd34 CVE-2026-8175 - Critical (9.8)\n\nIBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8175/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8175", "author": {"login": "automation"}}, {"uuid": "6c0c75f4-1aec-4c54-884c-74d08f7fc1f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:01:42.432328+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrltwuxw2g", "content": "\ud83d\udd34 CVE-2026-7524 - Critical (9.8)\n\nIBM Langflow OSS 1.0.0 through 1.9.1 could allow remote code execution due to improper validation...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7524/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-7524", "author": {"login": "automation"}}, {"uuid": "2a6a5a62-2ff8-4ebc-ab00-6597ead63a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:01:00.996635+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrklzls42s", "content": "\ud83d\udfe0 CVE-2026-7365 - High (8.4)\n\nIBM Operations Analytics - Log Analysis\u00a0 and IBM SmartCloud Analytics - Log Analysis uses defaul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7365/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-7365", "author": {"login": "automation"}}, {"uuid": "3fa779eb-97b5-4625-8548-a8dcc73a22a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:00:52.321381+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrke4tph2w", "content": "\ud83d\udfe0 CVE-2026-8179 - High (8.8)\n\nIBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8179/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8179", "author": {"login": "automation"}}, {"uuid": "828bf23e-80b8-4a49-ad41-136a025bedf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:00:45.414936+00:00", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mmtrk6jds322", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\nhttps://badhost.org/\n\nhttps://news.ycombinator.com/item?id=48277107", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "c26811b9-d8ea-49dc-b8d3-8eb428528a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:00:44.182583+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtrk46pay2w", "content": "\ud83d\udfe0 CVE-2026-8180 - High (7.5)\n\nIBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8180/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8180", "author": {"login": "automation"}}, {"uuid": "6adfe205-bf7f-42ba-bbf2-e37ec7327098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:00:13.028404+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116647133965743789", "content": "A new vulnerability with increased severity was disclosed for Linux Kernel (CVE-2026-45912) https://vuldb.com/vuln/366147", "vulnerability": "CVE-2026-45912", "author": {"login": "automation"}}, {"uuid": "02c8b8c3-a2a5-4d2e-9dcc-06692ef3964c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T15:00:04+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86128", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-45659-SharePoint-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a mistbarbarianspot\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 14:16:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-45659 Microsoft SharePoint Server Deserialization RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "29547811-407b-4368-85e1-f664144b90a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:46:18.089498+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116647078508044131", "content": "There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-45850) https://vuldb.com/vuln/366111", "vulnerability": "CVE-2026-45850", "author": {"login": "automation"}}, {"uuid": "9fa89758-4c10-4195-8ea4-f86a0eed69c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:40:07.989117+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtqfbqgri2a", "content": "\ud83d\udd17 CVE : CVE-2026-28348, CVE-2026-28350", "vulnerability": "CVE-2026-28350", "author": {"login": "automation"}}, {"uuid": "2a182f68-5dba-4ae9-8e47-37e8204b37ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:40:07.814769+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtqfbqgri2a", "content": "\ud83d\udd17 CVE : CVE-2026-28348, CVE-2026-28350", "vulnerability": "CVE-2026-28348", "author": {"login": "automation"}}, {"uuid": "fd5aab4d-8d84-47c8-8847-6bc111953846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:39:25+00:00", "type": "seen", "source": "https://t.me/bdufstecru/3200", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 check password script \u043c\u043e\u0434\u0443\u043b\u044f DCE/RPC SAMR server \u043f\u0430\u043a\u0435\u0442\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Samba \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 %u. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e RPC-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-07316\nCVE-2026-4408\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Samba:\nhttps://www.samba.org/samba/security/CVE-2026-4408.html\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-4408\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 %u \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f (\u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u0438\u043c\u0432\u043e\u043b %u \u0432 \u043e\u0434\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043a\u0430\u0432\u044b\u0447\u043a\u0438);\n- \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u043b\u0443\u0436\u0431\u044b samba-dcerpcd \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u044b (\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 rpc start on demand helpers \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (yes));\n- \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b SAMBA_CPS_ACCOUNT_NAME.", "vulnerability": "CVE-2026-4408", "author": {"login": "automation"}}, {"uuid": "8295eea1-1c8d-40a1-8a4f-7c22150a85de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:37.802197+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48905", "author": {"login": "automation"}}, {"uuid": "70b6fdf9-5483-4814-9e5e-7377c0a92a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:37.380442+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48904", "author": {"login": "automation"}}, {"uuid": "f8c308d3-946f-4a46-91a4-b0e5fa7fc5d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:37.214635+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48903", "author": {"login": "automation"}}, {"uuid": "bc06b77f-efa8-4bb8-8f3e-d887816d054a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:37.054620+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48902", "author": {"login": "automation"}}, {"uuid": "2f0e2d39-9bc1-4976-8a37-5117d8d0900b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:36.916754+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48901", "author": {"login": "automation"}}, {"uuid": "8aa88a6f-25b7-4a2d-9139-4cfac01e8187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:36.791006+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48900", "author": {"login": "automation"}}, {"uuid": "433e339c-c216-4b08-b012-3fa4ecc9c727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:36.428729+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48899", "author": {"login": "automation"}}, {"uuid": "19059e7f-3d8e-4ceb-9f86-c8aa0257099c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:36.151211+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48898", "author": {"login": "automation"}}, {"uuid": "9f49be4c-05ab-48b2-8e88-14f1e7806f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:35.972604+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48897", "author": {"login": "automation"}}, {"uuid": "cd5e6023-938a-44ad-99f5-d3f1263bb1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:35.824498+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq56q4l22q", "content": "\ud83d\udd17 CVE : CVE-2026-48896, CVE-2026-48897, CVE-2026-48898, CVE-2026-48899, CVE-2026-48900, CVE-2026-48901, CVE-2026-48902, CVE-2026-48903, CVE-2026-48904, CVE-2026-48905", "vulnerability": "CVE-2026-48896", "author": {"login": "automation"}}, {"uuid": "e23905fd-e127-46a4-b76b-0a52b416d73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:30.269212+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "vulnerability": "CVE-2026-48136", "author": {"login": "automation"}}, {"uuid": "133cfdfb-5f48-497b-a0fd-210c11024cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:30.117654+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "vulnerability": "CVE-2026-48135", "author": {"login": "automation"}}, {"uuid": "a8c76052-738e-4fd8-87d2-db92bdd8b022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:29.978219+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "vulnerability": "CVE-2026-48134", "author": {"login": "automation"}}, {"uuid": "6a362ec3-a009-4448-8d89-aa27f139ebaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:29.825581+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "vulnerability": "CVE-2026-48133", "author": {"login": "automation"}}, {"uuid": "510f3608-912c-44fa-87d0-71cf78c5c2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:29.643057+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "vulnerability": "CVE-2026-48132", "author": {"login": "automation"}}, {"uuid": "6ae009b9-e11b-40db-ba09-8cb35eeb2e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:29.489041+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m", "content": "\ud83d\udd17 CVE : CVE-2026-48131, CVE-2026-48132, CVE-2026-48133, CVE-2026-48134, CVE-2026-48135, CVE-2026-48136", "vulnerability": "CVE-2026-48131", "author": {"login": "automation"}}, {"uuid": "bbb6c73b-5f4b-40ab-a876-4e28ac44429b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:22.652887+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "vulnerability": "CVE-2026-4480", "author": {"login": "automation"}}, {"uuid": "d6d3e9ce-9785-4370-aa3e-801fc045966c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:22.500167+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "vulnerability": "CVE-2026-4408", "author": {"login": "automation"}}, {"uuid": "2d2a5e04-5722-436e-b85a-c5396949d69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:22.362243+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "vulnerability": "CVE-2026-3238", "author": {"login": "automation"}}, {"uuid": "01de476f-fc1b-48dc-ad31-71e2144821f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:22.212539+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "vulnerability": "CVE-2026-3012", "author": {"login": "automation"}}, {"uuid": "534ae722-8b33-467d-b2e9-8b66315aca23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:22.061810+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "vulnerability": "CVE-2026-2340", "author": {"login": "automation"}}, {"uuid": "6fc61840-c8a0-49c0-8446-76c0c305ba30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:21.915318+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4rm6nz2c", "content": "\ud83d\udd17 CVE : CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480, CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-3238, CVE-2026-4408, CVE-2026-4480", "vulnerability": "CVE-2026-1933", "author": {"login": "automation"}}, {"uuid": "a082260c-ed6b-4350-8a6b-2f4e9fba7a26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:15.070817+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4ktlmj2b", "content": "\ud83d\udd17 CVE : CVE-2026-32996, CVE-2026-32997", "vulnerability": "CVE-2026-32997", "author": {"login": "automation"}}, {"uuid": "af3f20ba-d4da-46c2-90eb-26391c7fb2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:14.916424+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4ktlmj2b", "content": "\ud83d\udd17 CVE : CVE-2026-32996, CVE-2026-32997", "vulnerability": "CVE-2026-32996", "author": {"login": "automation"}}, {"uuid": "85ff01c7-f163-4ef3-8bbc-d2a49b474bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:08.840628+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "vulnerability": "CVE-2026-48784", "author": {"login": "automation"}}, {"uuid": "8e01f960-d638-4e1b-b290-c8d3a48f7005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:08.692575+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "vulnerability": "CVE-2026-48761", "author": {"login": "automation"}}, {"uuid": "55aef5d9-4734-4099-bb4f-53ecdbefaba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:08.533971+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "vulnerability": "CVE-2026-48760", "author": {"login": "automation"}}, {"uuid": "524fba81-8c5a-4340-951b-856ec43dda45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:08.384364+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "vulnerability": "CVE-2026-48747", "author": {"login": "automation"}}, {"uuid": "774d3dfb-41ae-4db1-b68d-078ef878fa6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:08.247810+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "vulnerability": "CVE-2026-48736", "author": {"login": "automation"}}, {"uuid": "4c545453-1826-44a9-ba1a-1124e1457ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:35:08.068108+00:00", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4e3x7q2h", "content": "\ud83d\udd17 CVE : CVE-2026-48489, CVE-2026-48736, CVE-2026-48747, CVE-2026-48760, CVE-2026-48761, CVE-2026-48784", "vulnerability": "CVE-2026-48489", "author": {"login": "automation"}}, {"uuid": "f6b41e19-6b45-4fa1-a7e8-2dc7a7444d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:33:12.230550+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116647027771125615", "content": "We have just added an important vulnerability affecting Linux Kernel (CVE-2026-45910) https://vuldb.com/vuln/366090", "vulnerability": "CVE-2026-45910", "author": {"login": "automation"}}, {"uuid": "26a40bb7-24f1-43eb-9d67-ddce9bfcafd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:29:42+00:00", "type": "seen", "source": "https://t.me/bdufstecru/3199", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CInStream::GetCuSize() \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 NTFS \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0430 7-Zip \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-07292\nCVE-2026-48095\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.01 \u0438 \u0432\u044b\u0448\u0435.", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "a94a60b4-34a5-45a4-ae84-97e5bc41e07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:28:27+00:00", "type": "seen", "source": "https://t.me/bdufstecru/3198", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 REST API \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043c\u0443\u043b\u044c\u0442\u0438\u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Cisco Secure Workload (\u0440\u0430\u043d\u0435\u0435 Tetration) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\nBDU:2026-07274\nCVE-2026-20223\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 3.10.8.3, 4.0.3.17:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy", "vulnerability": "CVE-2026-20223", "author": {"login": "automation"}}, {"uuid": "5995c79c-d6c3-43e9-abba-2a842a13b2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:27:12+00:00", "type": "seen", "source": "https://t.me/bdufstecru/3197", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 process_respfile \u0444\u0430\u0439\u043b\u0430 asm/nasm.c \u0430\u0441\u0441\u0435\u043c\u0431\u043b\u0435\u0440\u0430 Netwide Assembler (NASM) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-07183\nCVE-2026-6068\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442);\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a HTTP \u0438\u043b\u0438 Telnet);\n- \u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 (IDS/IPS) \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN).", "vulnerability": "CVE-2026-6068", "author": {"login": "automation"}}, {"uuid": "419503e7-1bb7-4c3a-9fa4-da28b05592a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:23:09.857233+00:00", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mmtpgqtkjc2q", "content": "\ud83d\udea8 Gu\u00eda de remediaci\u00f3n urgente: #Vulnerabilidad RCE en #SharePoint (CVE-2026-45659) www.newstecnicas.com/2026/05/guia...", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "80d58791-22ec-48c1-9755-62fec4e0df45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:22:43.531029+00:00", "type": "seen", "source": "https://bsky.app/profile/earthnewstech.bsky.social/post/3mmtpg5il7o2k", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root A maximum-severity security vulnerability impact...#news https://thehackernews.com/2026/05/litespeed-cpanel-plugin-cve-2026-48172.html", "vulnerability": "cve-2026-48172", "author": {"login": "automation"}}, {"uuid": "f433b938-87e1-436f-93e9-8d4ed4203832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:19:06.823055+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116646972382119624", "content": "There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-45898) https://vuldb.com/vuln/366061", "vulnerability": "CVE-2026-45898", "author": {"login": "automation"}}, {"uuid": "b27ffb39-f39e-4885-9e58-3ee98e888cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:01:07.436784+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmto7jgoyz2t", "content": "\ud83d\udfe0 CVE-2026-42735 - High (8.2)\n\nAuthentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42735/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42735", "author": {"login": "automation"}}, {"uuid": "60a3950b-6bf5-4e00-b3c1-2e9e3460b789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:00:59.359133+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmto7bln332n", "content": "\ud83d\udd34 CVE-2026-42755 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42755/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42755", "author": {"login": "automation"}}, {"uuid": "177ff926-2832-4a2c-acb6-6116d63abb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T14:00:51.421131+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmto6zknz22w", "content": "\ud83d\udd34 CVE-2026-42748 - Critical (9.9)\n\nUnrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42748/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42748", "author": {"login": "automation"}}, {"uuid": "788b1405-ef5f-42a2-a28a-ea28550652d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:46:59+00:00", "type": "seen", "source": "https://t.me/kasperskyb2b/2196", "content": "\ud83d\ude08 \u041a\u043e\u0448\u043c\u0430\u0440 \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u0442\u043c\u0435\u043d\u0438\u0435\u043c \u0432 \u043e\u0444\u0438\u0441\u0435 Microsoft\n\n\u0421 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c \u0437\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0432 \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f Nightmare Eclipse \u0438 Microsoft, \u0442\u043e\u0447\u043d\u0435\u0435 \u0438\u0445 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, MSRC. \u041f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u043e \u043d\u0451\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b PoC \u0434\u043b\u044f \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows \u0438 Defender, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 (\u043f\u043e \u0435\u0433\u043e \u0441\u043b\u043e\u0432\u0430\u043c), \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u0432\u0438\u0434\u0435\u043e\u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.  \n\n\u041d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0443\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u043b\u043e \u0432 \u043c\u0430\u0435, \u043a\u043e\u0433\u0434\u0430 \u0430\u043a\u043a\u0443\u0440\u0430\u0442 \u043f\u043e\u0441\u043b\u0435 \u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Yellowkey  (CVE-2026-45585), \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 BitLocker \u043d\u0430 Windows 11, Windows Server 2022 \u0438 2025. \u0414\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0430 USB-\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0435\u0433\u043e \u043a \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u0443 \u0441 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0438\u0441\u043a\u043e\u043c \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (Windows Recovery Environment), \u0443\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044f \u043d\u0430\u0436\u0430\u0442\u043e\u0439 CTRL. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u043a\u0430. \u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u044b, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u044b \u0438\u0441\u0447\u0435\u0437\u0430\u044e\u0442 \u0441 \u0444\u043b\u044d\u0448\u043a\u0438, \u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u0442\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 apparent backdoor.\n\nMicrosoft \u0432 \u043e\u0442\u0432\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0438\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0432 WinRE \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0444\u0430\u0439\u043b autofstx.exe. \u0411\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043b\u043e\u0436\u0435\u043d\u044b \u043d\u0430 \u043f\u043e\u0442\u043e\u043c.\n\u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c PIN-\u043a\u043e\u0434 (PIN+TPM), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Microsoft \u044d\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e PoC \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d.\n\n\u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 WinRE, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u00ab\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439\u00bb Windows \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0448\u0442\u0440\u0438\u0445\u043e\u0432 \u043d\u0430 \u0434\u0435\u0441\u0435\u0440\u0442. Microsoft \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0438\u043b\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u043f\u043e\u0440\u0442\u0430\u043b\u0435 MSRC \u0438 \u043d\u0430 GitHub, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u0435\u0449\u0430\u043b \u0432\u0437\u044f\u0442\u044c \u043f\u0430\u0443\u0437\u0443 \u0432 \u0438\u044e\u043d\u0435 \u0438 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u0441 \u043d\u043e\u0432\u044b\u043c\u0438 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f\u043c\u0438 14 \u0438\u044e\u043b\u044f.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Windows @\u041f2\u0422", "vulnerability": "CVE-2026-45585", "author": {"login": "automation"}}, {"uuid": "8a5424c0-663d-4e3a-8dd0-bb6e54e13638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:43:52.627299+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtna4mrm42c", "content": "CVE-2026-48906 - Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework\nCVE ID : CVE-2026-48906\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary fil...", "vulnerability": "CVE-2026-48906", "author": {"login": "automation"}}, {"uuid": "a447295e-c279-4f2f-869c-f46af33aba77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:42:32.795854+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtn6d2uqt2k", "content": "CVE-2026-45844 - netfilter: arp_tables: fix IEEE1394 ARP payload parsing\nCVE ID : CVE-2026-45844\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: arp_tables: fix IEEE1394 A...", "vulnerability": "CVE-2026-45844", "author": {"login": "automation"}}, {"uuid": "9e840a2b-f82f-44c1-b814-9ee58883a4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:37:32.445322+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtmvemvbk2i", "content": "CVE-2026-45840 - openvswitch: cap upcall PID array size and pre-size vport replies\nCVE ID : CVE-2026-45840\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: cap upcall PID...", "vulnerability": "CVE-2026-45840", "author": {"login": "automation"}}, {"uuid": "07c58898-87a6-4dce-a3df-c3ebe3ba466a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:37:06.224673+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmtmulazca2q", "content": "\ud83d\udccc CVE-2026-42901 - Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-42901", "vulnerability": "CVE-2026-42901", "author": {"login": "automation"}}, {"uuid": "f32bc2d4-aa62-45f0-8a50-f38b7d75183f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:33:00.929951+00:00", "type": "seen", "source": "https://bsky.app/profile/Reverse-Engineering.activitypub.awakari.com.ap.brid.gy/post/3mmtmn6qexla2", "content": "Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089) May 2026 Windows Updates brought a patch for CVE-2026-41089 , a remotely exploitable issue on Wind...\n\n\nOrigin | Interest | Match", "vulnerability": "CVE-2026-41089", "author": {"login": "automation"}}, {"uuid": "e25994f4-038e-4a38-b414-48dbd3d0df58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:32:32.149606+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtmmg6kfh2c", "content": "CVE-2026-45841 - netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO\nCVE ID : CVE-2026-45841\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix ...", "vulnerability": "CVE-2026-45841", "author": {"login": "automation"}}, {"uuid": "db73099e-7569-4b54-a6a7-e193b066bd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:30:30.298985+00:00", "type": "seen", "source": "https://bsky.app/profile/lazarusholic.bsky.social/post/3mmtmirnn2c2h", "content": "\"More CVEs, Same Playbook: 2026 Vulnerability Exploitation in the Wild\" published by Proofpoint. #CVE-2026-21510, #LNK, #Phishing, #TA406, #DPRK, #CTI https://www.proofpoint.com/us/blog/threat-insight/more-cves-same-playbook-2026-vulnerability-exploitation-wild", "vulnerability": "CVE-2026-21510", "author": {"login": "automation"}}, {"uuid": "ac1821ca-99d0-43d3-acbc-7c82379cc1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:28:07.051337+00:00", "type": "seen", "source": "https://bsky.app/profile/mathewjschwartz.bsky.social/post/3mmtmee7j4j2s", "content": "Vulnerability alert: Developers using Microsoft's code editor could hand an attacker full control of their machine by clicking a single install link, with nothing in the confirmation screen to warn them. Microsoft patched the flaw (CVE-2026-41613). www.databreachtoday.com/microsoft-co...", "vulnerability": "CVE-2026-41613", "author": {"login": "automation"}}, {"uuid": "38440aef-e960-4805-8c3a-6b0e99cd9701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:27:31.156130+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtmdh7zlk2n", "content": "CVE-2026-45842 - slip: reject VJ receive packets on instances with no rstate array\nCVE ID : CVE-2026-45842\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nslip: reject VJ receive pac...", "vulnerability": "CVE-2026-45842", "author": {"login": "automation"}}, {"uuid": "b371beca-a68e-4fc2-a09e-218f13eb5c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:24:57.826922+00:00", "type": "seen", "source": "https://bsky.app/profile/roxsross.bsky.social/post/3mmtm6uu4km2q", "content": "\ud83d\udc33 \u26a0\ufe0f \u00a1Nuevo CVE en Docker! Mitiga \u201cCopy Fail\u201d actualizando tu Engine\n\nhttps://www.docker.com/blog/mitigating-cve-2026-31431-copy-fail-in-docker-engine/\n\n#Docker #Ciberseguridad #CVE #SysAdmin", "vulnerability": "cve-2026-31431", "author": {"login": "automation"}}, {"uuid": "0282b691-124b-4036-ac8d-07a26e3b05d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:24:06.449710+00:00", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3mmtm5bwv5y2q", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass (badhost.org)\n\nDiscussion | Main Link", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "5aa7a4e9-8c33-474e-a4dc-8362fb6fc5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:22:30.406343+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtm2imnzu2r", "content": "CVE-2026-45846 - bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()\nCVE ID : CVE-2026-45846\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbareudp: fix NULL pointe...", "vulnerability": "CVE-2026-45846", "author": {"login": "automation"}}, {"uuid": "03271ec2-826c-4ac0-b7e4-c42bbdafb568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:22:18.946973+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtm25n47s2y", "content": "\ud83d\udd10 CVE-2026-48808: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48808-sandbox-property-allowlist-bypass-via-the-column-filter-under-sourcepolicyinterface", "vulnerability": "cve-2026-48808", "author": {"login": "automation"}}, {"uuid": "7fd6220c-0bed-4ac2-bdca-c2b927cf1419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:22:07.655175+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtlzsvcyt23", "content": "\ud83d\udd10 CVE-2026-48807: Sandbox `__toString()` policy bypass via `Traversable` in `join`/`replace` and `in`/`not in` operators\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48807-sandbox-tostring-policy-bypass-via-traversable-in-join-replace-and-in-not-in-operators", "vulnerability": "cve-2026-48807", "author": {"login": "automation"}}, {"uuid": "c77025b7-9548-422c-9755-16cdb44d4fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:21:59.809814+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtlzlisnd23", "content": "\ud83d\udd10 CVE-2026-48806: Sandbox `__toString()` policy bypass via dynamic mapping keys\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48806-sandbox-tostring-policy-bypass-via-dynamic-mapping-keys", "vulnerability": "cve-2026-48806", "author": {"login": "automation"}}, {"uuid": "a65bc553-a9c6-4bab-9b67-3f134301bb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:21:55.433012+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtlzgpw6w2h", "content": "\ud83d\udd10 CVE-2026-48805: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48805-sandbox-state-regression-in-deprecated-internal-wrappers-in-src-resources-core-php", "vulnerability": "cve-2026-48805", "author": {"login": "automation"}}, {"uuid": "f27301ad-7d6f-4fee-9e63-ea659100c910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:21:43.071095+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtlz35moz2y", "content": "\ud83d\udd10 CVE-2026-46636: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-46636-sandbox-filter-tag-and-function-allow-list-bypass-when-sandbox-state-changes-between-renders", "vulnerability": "cve-2026-46636", "author": {"login": "automation"}}, {"uuid": "c974504c-043b-4df6-a056-eb0acdc6f15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:17:30.187837+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtlrk5pnb2e", "content": "CVE-2026-42760 - WordPress Backup and Staging by WP Time Capsule plugin\nCVE ID : CVE-2026-42760\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP ...", "vulnerability": "CVE-2026-42760", "author": {"login": "automation"}}, {"uuid": "5626dfeb-85cb-42ab-9834-0f602b1f9d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:15:55.974455+00:00", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mmtloq3ryd2g", "content": "A new critical vulnerability, BadHost (CVE-2026-48710), in the Starlette web framework allows authentication bypass through Host header manipulation. This isn't just a theoretical flaw; it poses a significant risk to AI systems\u2026\n\nhttps://www.tpp.blog/1mchjk7\n\n#cybersecurity #starlette #cve202648710", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "a6d0fdb1-6527-4dc2-9153-9b0309c53fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:13:12.543132+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtljuj43y2t", "content": "CVE-2026-45843 - slip: bound decode() reads against the compressed packet length\nCVE ID : CVE-2026-45843\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nslip: bound decode() reads ag...", "vulnerability": "CVE-2026-45843", "author": {"login": "automation"}}, {"uuid": "ef548bbd-0d15-4e0c-9732-82e62980b899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:10:04.626895+00:00", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mmtlebbjzh2b", "content": "Mitigating CVE-2026-31431 (\u201cCopy Fail\u201d) in Docker Engine/#docker #container - CVE-2026-31431 is a Linux kernel vulnerability that was recently disclosed.This CVE does not compromise Docker infrastructure. That said, Docker Engine\u2019s default... https://tinyurl.com/22kfuyfx", "vulnerability": "CVE-2026-31431", "author": {"login": "automation"}}, {"uuid": "31ee92c5-ce77-46fd-a93c-d32a4365560c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:09:27.293033+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtld5m4im2i", "content": "CVE-2026-45839 - bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()\nCVE ID : CVE-2026-45839\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: reject negative CO-...", "vulnerability": "CVE-2026-45839", "author": {"login": "automation"}}, {"uuid": "858e1fee-0588-4eae-a530-5df929566982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:06:06.691296+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtl56f3bo2c", "content": "CVE-2026-45845 - net/sched: taprio: fix NULL pointer dereference in class dump\nCVE ID : CVE-2026-45845\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: taprio: fix NULL poi...", "vulnerability": "CVE-2026-45845", "author": {"login": "automation"}}, {"uuid": "d26088a0-742a-411f-9c4b-466b78e0ef7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:04:30+00:00", "type": "published-proof-of-concept", "source": "https://github.com/denoland/deno/security/advisories/GHSA-chqv-56wv-7564", "content": "", "vulnerability": "CVE-2026-44726", "author": {"login": "syspect"}}, {"uuid": "c26ddba1-dfdc-4a94-ae9d-07d9defac01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:03:44+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86118", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Spring4Shell #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a PoC-CVE-2022-22965-Spring4Shell\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a march0n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 12:37:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDescription\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2022-22965", "author": {"login": "automation"}}, {"uuid": "00045a06-c9d3-4d16-b941-49218b1496ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:03:06.087861+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtkxs5e2p2q", "content": "CVE-2026-42762 - WordPress VikBooking Hotel Booking Engine &amp; PMS plugin\nCVE ID : CVE-2026-42762\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvi...", "vulnerability": "CVE-2026-42762", "author": {"login": "automation"}}, {"uuid": "20d73728-1ad1-4702-90a1-a04449db4ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T13:00:21.826825+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtksv3pqo2q", "content": "CVE-2026-45838 - bpf: fix end-of-list detection in cgroup_storage_get_next_key()\nCVE ID : CVE-2026-45838\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix end-of-list detectio...", "vulnerability": "CVE-2026-45838", "author": {"login": "automation"}}, {"uuid": "3f65ec19-f251-4cfc-b28b-2cc2c00ade7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:57:53.769718+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtkofkna62q", "content": "CVE-2026-42754 - WordPress Favicon plugin\nCVE ID : CVE-2026-42754\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phbernard Favicon favicon-by-realfa...", "vulnerability": "CVE-2026-42754", "author": {"login": "automation"}}, {"uuid": "c4aa1e86-6127-4c27-a99c-6a322edb13d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:55:33.335150+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtkkb5yzt2r", "content": "CVE-2026-42759 - WordPress Affiliate Super Assistent plugin\nCVE ID : CVE-2026-42759\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timo Affiliate Su...", "vulnerability": "CVE-2026-42759", "author": {"login": "automation"}}, {"uuid": "ecf60605-34c2-469b-afe5-4a67f90657f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:53:23.171922+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtkgg5r3k2h", "content": "CVE-2026-45837 - bpf: Fix use-after-free in arena_vm_close on fork\nCVE ID : CVE-2026-45837\n \n Published : May 27, 2026, 11:16 a.m. | 48\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix use-after-free in arena_vm_close o...", "vulnerability": "CVE-2026-45837", "author": {"login": "automation"}}, {"uuid": "24499374-ccd3-4a70-9e4e-1b02ba7a82fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:48:16.094843+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtk5bbom62i", "content": "CVE-2026-42735 - WordPress KiviCare plugin\nCVE ID : CVE-2026-42735\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system...", "vulnerability": "CVE-2026-42735", "author": {"login": "automation"}}, {"uuid": "7d7ead0d-93f8-4a23-a8c7-9141ae9633f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:43:15.449762+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtjucjr3h2n", "content": "CVE-2025-30028 - QNAP Active Backup for Business File Disclosure Vulnerability\nCVE ID : CVE-2025-30028\n \n Published : 27 May 2026, 9:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arb...", "vulnerability": "CVE-2025-30028", "author": {"login": "automation"}}, {"uuid": "a8187bc4-8721-4990-b8d1-d362be416ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:38:35.201109+00:00", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmtjlxivf52g", "content": "BadHost\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001AI\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u30b5\u30fc\u30d0\u30fc\u306e\u6a5f\u5bc6\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u304c\u653b\u6483\u8005\u306b\u9732\u51fa\n\nStarlette\u30a6\u30a7\u30d6\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306b\u300cBadHost\u300d\uff08CVE-2026-48710\uff09\u3068\u547c\u3070\u308c\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u3001\u6570\u5343\u3082\u306eAI\u642d\u8f09\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304a\u3088\u3073API\u30b5\u30fc\u30d3\u30b9\u304c\u653b\u6483\u3092\u53d7\u3051\u308b\u53ef\u80fd\u6027\u306b\u3055\u3089\u3055\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u6b20\u9665\u306f\u3001OSTIF\u304c\u652f\u63f4\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u76e3\u67fb\u306b\u304a\u3044\u3066X41 D-Sec\u306b\u3088\u3063\u3066\u767a\u898b\u3055\u308c\u305f\u3082\u306e\u3067\u3001", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "a1def674-0de4-44ac-ac15-29754ed38819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:38:15.041464+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtjle3crj2h", "content": "CVE-2026-42731 - WordPress miniorange otp verification plugin\nCVE ID : CVE-2026-42731\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verificat...", "vulnerability": "CVE-2026-42731", "author": {"login": "automation"}}, {"uuid": "5b825b72-3273-4eb0-bacf-1d41ae0ae9ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:37:07.757083+00:00", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmtjjdsmln2l", "content": "\ud83d\udccc CVE-2026-7080 - A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of... https://www.potatohub.blog/cves/CVE-2026-7080", "vulnerability": "CVE-2026-7080", "author": {"login": "automation"}}, {"uuid": "46a626f7-63ec-4258-9dd3-c3d7937e4dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:37:07.077871+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmtjjd47sb25", "content": "\ud83d\udccc CVE-2026-7080 - A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of... https://www.cyberhub.blog/cves/CVE-2026-7080", "vulnerability": "CVE-2026-7080", "author": {"login": "automation"}}, {"uuid": "62922000-207b-4017-93a3-d8eb39a7d075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:33:14.691031+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtjcflqm22c", "content": "CVE-2026-42758 - WordPress WebinarIgnition plugin\nCVE ID : CVE-2026-42758\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Privilege ...", "vulnerability": "CVE-2026-42758", "author": {"login": "automation"}}, {"uuid": "808dba64-f0a7-46a1-95a7-f7b1f376ea0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:30:27.331828+00:00", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmtj5fepax2t", "content": "CISA added CVE-2026-48172 to its exploited list after attacks on the LiteSpeed cPanel plugin. The flaw can let remote attackers gain root access. #CVE2026 #LiteSpeed #cPanel", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "d33903ec-cd43-4050-99d5-c19d2ca0bc08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:28:14.388173+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtizh54dp2p", "content": "CVE-2026-42740 - WordPress Tainacan plugin\nCVE ID : CVE-2026-42740\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tainacan Tainacan tainacan a...", "vulnerability": "CVE-2026-42740", "author": {"login": "automation"}}, {"uuid": "940d01be-0e9d-4188-bd73-b5ca2e9642ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:23:14.152343+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtiqiks7s2r", "content": "CVE-2026-49002 - Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product\nCVE ID : CVE-2026-49002\n \n Published : 27 May 2026, 9:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : Access control failure means that an application does not effectively check user access pe...", "vulnerability": "CVE-2026-49002", "author": {"login": "automation"}}, {"uuid": "8e2986d6-8647-4da9-9086-1bc4b1f5ee6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:18:56.206134+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtiisvxik2n", "content": "CVE-2026-42727 - WordPress Active Products Tables for WooCommerce plugin\nCVE ID : CVE-2026-42727\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i...", "vulnerability": "CVE-2026-42727", "author": {"login": "automation"}}, {"uuid": "c40df4a5-0c94-4cfd-b2f8-93da3cd79b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:15:42.706791+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmticw7cvf2a", "content": "Gitea 1.26.2\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306b\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u304c\u6f0f\u6d29\u3059\u308b\u8106\u5f31\u6027\uff08CVE-2026-27771\uff09\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "2cf29fa0-a6c1-4f85-8a09-7e5a734ada0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:15:10.672868+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtic3qloi2e", "content": "CVE-2026-3012 - Samba: group policy certificate enrollment uses http:// without validation\nCVE ID : CVE-2026-3012\n \n Published : 27 May 2026, 10:02 a.m. | 1\u00a0hour, 7\u00a0minutes ago\n \n Description : A flaw was found in Samba\u2019s certificate auto-enrollment Group Policy handling. When...", "vulnerability": "CVE-2026-3012", "author": {"login": "automation"}}, {"uuid": "6dc2845d-9e6c-49ba-8288-32a57b765729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:11:50.096677+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmti44iy5t2k", "content": "CVE-2026-42756 - WordPress QuickWebP \u2013 Compress / Optimize Images &amp; Convert WebP | SEO Friendly plugin\nCVE ID : CVE-2026-42756\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Tra...", "vulnerability": "CVE-2026-42756", "author": {"login": "automation"}}, {"uuid": "7b9d63a6-f89f-4ea4-9985-fab0c1ec31e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:08:49.629086+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmthwqhajr2p", "content": "CVE-2026-8054 - Unauthenticated SQL Injection in dotCMS Publish Audit API\nCVE ID : CVE-2026-8054\n \n Published : 27 May 2026, 9:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the Publish ...", "vulnerability": "CVE-2026-8054", "author": {"login": "automation"}}, {"uuid": "a5ec9043-5f42-48ce-a225-c07f4dc18229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:07:49.278648+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmthuwuia32e", "content": "CVE-2026-42761 - WordPress Active Products Tables for WooCommerce plugin\nCVE ID : CVE-2026-42761\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i...", "vulnerability": "CVE-2026-42761", "author": {"login": "automation"}}, {"uuid": "4f771be4-f39b-4d6a-a02c-6f32241f2084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:07:08.142906+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmthtpldq22r", "content": "\ud83d\udccc CVE-2026-7078 - A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the com... https://www.cyberhub.blog/cves/CVE-2026-7078", "vulnerability": "CVE-2026-7078", "author": {"login": "automation"}}, {"uuid": "6a442c39-be93-425c-a472-34464bb719b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:06:34.177948+00:00", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mmthsphcj52i", "content": "CVE-2026-8899: XSS en Auto Thumbnail WordPress\n\n\u00bfTu sitio tiene el plugin Auto Thumbnail instalado? CVE-2026-8899 permite inyectar scripts maliciosos con solo rol Contributor. Sin parche disponible \u2014 ...\n\n#cve20268899 #xsswordpress #autothumbnail #wordfence #seguridadwordpress", "vulnerability": "CVE-2026-8899", "author": {"login": "automation"}}, {"uuid": "080cea61-c9ca-4875-9c42-635f90f0a04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:05:20.575499+00:00", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmthqixxht2m", "content": "\u30b9\u30d4\u30fc\u30ab\u30fc\u767b\u58c7\u3092\u78ba\u5b9f\u306b\u3059\u308b\u65b9\u6cd5\uff1a\u6587\u5b57\u901a\u308a\u30b7\u30b9\u30c6\u30e0\u3092\u30cf\u30c3\u30af\u3059\u308b\n\n\u3042\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u304c\u3001\u30c6\u30c3\u30af\u30ab\u30f3\u30d5\u30a1\u30ec\u30f3\u30b9\u306b\u30b9\u30d4\u30fc\u30ab\u30fc\u7533\u8acb\u3092\u78ba\u5b9f\u306b\u53d7\u7406\u3055\u305b\u308b\u4e07\u5168\u306e\u65b9\u6cd5\u3092\u898b\u3064\u3051\u305f\u3002\u305d\u306e\u30b7\u30b9\u30c6\u30e0\u81ea\u4f53\u3092\u30cf\u30c3\u30af\u3059\u308b\u3068\u3044\u3046\u3082\u306e\u3060\u3002CVE-2026-41241 \u306f\u3001\u30ab\u30f3\u30d5\u30a1\u30ec\u30f3\u30b9\u4e3b\u50ac\u8005\u304c\u30b9\u30d4\u30fc\u30ab\u30fc\u7533\u8acb\u3068\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb\u7ba1\u7406\u306b\u4f7f\u7528\u3059\u308b\u4eba\u6c17\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u30c4\u30fc\u30eb\u300cpretalx\u300d\u306b\u5b58\u5728\u3059\u308b\u3001\u4fdd\u5b58\u578b\u30af\u30ed\u30b9", "vulnerability": "CVE-2026-41241", "author": {"login": "automation"}}, {"uuid": "31a481d4-4a1e-44ad-86ec-456ff47e93c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:04:07.391474+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116646441556714399", "content": "A severe vulnerability was disclosed for Linux Kernel (CVE-2026-45837) https://vuldb.com/vuln/366053", "vulnerability": "CVE-2026-45837", "author": {"login": "automation"}}, {"uuid": "b0b5997b-6d16-42c5-b35a-19118252978f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:02:48.607652+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmthly6rxy2i", "content": "CVE-2026-42737 - WordPress VikBooking Hotel Booking Engine &amp; PMS plugin\nCVE ID : CVE-2026-42737\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in e4jvi...", "vulnerability": "CVE-2026-42737", "author": {"login": "automation"}}, {"uuid": "c47d2a78-b7f4-48ef-a64a-f02d0795d47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:02:14.831583+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmthkxnatz2o", "content": "Gitea\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u306730,000\u30c7\u30d7\u30ed\u30a4\u306e\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u3092\u516c\u958b\n\nGitea \u306e CVE-2026-27771 \u306b\u3088\u308a\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b3\u30f3\u30c6\u30ca\u30a4\u30e1\u30fc\u30b8\u306b\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u7d0430,000\u306e\u30c7\u30d7\u30ed\u30a4\u30e1\u30f3\u30c8\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u4e16\u754c\u4e2d\u3067\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306e\u30ea\u30b9\u30af\u304c\u751f\u3058\u3066\u3044\u307e\u3059\u3002\u81f3\u6025\u306e\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9 #CVE #\u8106\u5f31\u6027", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "e2dbca90-0868-495a-a476-3d0e1511081f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:02:02.939911+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthkkzhyw2t", "content": "\ud83d\udd34 CVE-2026-42747 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42747/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42747", "author": {"login": "automation"}}, {"uuid": "5e7af19c-16a6-4297-abaf-c54dbac6369d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:01:54.093997+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthkdikrp2n", "content": "\ud83d\udd34 CVE-2026-42761 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42761/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42761", "author": {"login": "automation"}}, {"uuid": "7b5a333f-e72d-4e4c-b2c5-5370ee2070c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:01:46.483742+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthk3rx3d26", "content": "\ud83d\udfe0 CVE-2026-42760 - High (7.5)\n\nAuthentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Stag...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42760", "author": {"login": "automation"}}, {"uuid": "b8baf44a-bcca-4918-92dc-89732f7791c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:01:04.124501+00:00", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmthiuabwd2o", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-45736 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/530 #AWS #Lambda #Security #CVE #DevOps #SecOps", "vulnerability": "CVE-2026-45736", "author": {"login": "automation"}}, {"uuid": "a74d56e3-e23d-44f0-8eab-e91360fc4db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:01:02.062986+00:00", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmthisvkmu2g", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-42044 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/511 #AWS #Lambda #Security #CVE #DevOps #SecOps", "vulnerability": "CVE-2026-42044", "author": {"login": "automation"}}, {"uuid": "402c34d0-0c40-493f-ab2d-68101e7e4da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:00:59.256979+00:00", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mmthiq7qil2c", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-42264 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/504 #AWS #Lambda #Security #CVE #DevOps #SecOps", "vulnerability": "CVE-2026-42264", "author": {"login": "automation"}}, {"uuid": "77297b5c-0aff-421d-aa7f-3a75e18578d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:00:52.125584+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthiihcsk2w", "content": "\ud83d\udd34 CVE-2026-42758 - Critical (9.8)\n\nIncorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42758/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42758", "author": {"login": "automation"}}, {"uuid": "61a739f2-15ab-42b4-8dc2-650217b91f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:00:44.127446+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthiasatw2s", "content": "\ud83d\udd34 CVE-2026-42757 - Critical (9.9)\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in S...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42757/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42757", "author": {"login": "automation"}}, {"uuid": "861cf73e-0ac6-4d66-9cdf-e0b402117938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T12:00:36.620280+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthhzbw3y2c", "content": "\ud83d\udd34 CVE-2026-42756 - Critical (9.9)\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in L...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42756/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42756", "author": {"login": "automation"}}, {"uuid": "951601bc-0504-4f48-95a1-0b60fc1c2e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:57:48.346311+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmthcznxr62p", "content": "CVE-2026-42757 - WordPress WebinarIgnition plugin\nCVE ID : CVE-2026-42757\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias We...", "vulnerability": "CVE-2026-42757", "author": {"login": "automation"}}, {"uuid": "4cfdaff8-723e-4aae-a553-d7af20a93b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:52:47.854468+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmth236lem2p", "content": "CVE-2026-40850 - Unauthenticated SQLi in getAccountData function\nCVE ID : CVE-2026-40850\n \n Published : 27 May 2026, 9:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAcco...", "vulnerability": "CVE-2026-40850", "author": {"login": "automation"}}, {"uuid": "df8bf254-8f8e-4915-93d1-3702eb81cb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:51:12.050796+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116646390761847046", "content": "A new vulnerability with increased severity was disclosed for Linux Kernel (CVE-2026-45844) https://vuldb.com/vuln/366047", "vulnerability": "CVE-2026-45844", "author": {"login": "automation"}}, {"uuid": "da46d10c-6df2-44d4-a5a3-ad63bfe68e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:47:47.558196+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtgr4okzl2i", "content": "CVE-2026-42755 - WordPress TableOn plugin\nCVE ID : CVE-2026-42755\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-tabl...", "vulnerability": "CVE-2026-42755", "author": {"login": "automation"}}, {"uuid": "f9be65f6-c7e0-4000-96b6-c2cfb553a124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:45:47.150880+00:00", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmtgnk4gw22j", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-0265 Palo Alto Networks\u306ePAN-OS\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nPalo Alto Networks\u306ePAN-OS\u00ae\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001Cloud Authentication Service (CAS)\u304c\u6709\u52b9\u306a\u5834\u5408\u3001", "vulnerability": "CVE-2026-0265", "author": {"login": "automation"}}, {"uuid": "21c6194c-22a5-42e3-93e1-077325b1dbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:45:26.356311+00:00", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmtgmvb2sj2d", "content": "Proofpoint reports 12 CVE-2026 flaws under active exploitation, with opportunistic actors reusing familiar tactics. AI-assisted discovery is increasing new flaws, but abuse is already seen in CVE-2026-21509 and CVE-2026-32202. #CVE2026 #APT28", "vulnerability": "CVE-2026-32202", "author": {"login": "automation"}}, {"uuid": "4cec1e57-85d5-4526-958a-08b4e8fe2fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:45:26.218424+00:00", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmtgmvb2sj2d", "content": "Proofpoint reports 12 CVE-2026 flaws under active exploitation, with opportunistic actors reusing familiar tactics. AI-assisted discovery is increasing new flaws, but abuse is already seen in CVE-2026-21509 and CVE-2026-32202. #CVE2026 #APT28", "vulnerability": "CVE-2026-21509", "author": {"login": "automation"}}, {"uuid": "595bd224-6183-4fe1-bbec-8de9ca988bda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:42:47.140756+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtgi655hc2t", "content": "CVE-2025-13392 - Synology DiskStation Manager (DSM) Distinguished Name Authentication Bypass\nCVE ID : CVE-2025-13392\n \n Published : 27 May 2026, 9:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : Improper check for unusual or exceptional conditions vulnerability in SSO in Syn...", "vulnerability": "CVE-2025-13392", "author": {"login": "automation"}}, {"uuid": "576c85de-245b-43f6-acd6-35a3263a57d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:39:39.342053+00:00", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mmtgclbrqf2c", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2025-11482\n\nAn Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 \nOperating System versions before 1.8.0 ma...", "vulnerability": "CVE-2025-11482", "author": {"login": "automation"}}, {"uuid": "547fb204-d589-49be-bab8-5fd070eadf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:39:13+00:00", "type": "published-proof-of-concept", "source": "https://github.com/oscal-compass/compliance-trestle/security/advisories/GHSA-g3vg-vx23-3858", "content": "", "vulnerability": "CVE-2026-45725", "author": {"login": "syspect"}}, {"uuid": "cb02ae78-5f8b-4b7f-b146-a5cdfe840315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:38:29.274535+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtgaijzr22e", "content": "CVE-2026-42730 - WordPress MasterStudy LMS plugin\nCVE ID : CVE-2026-42730\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy ...", "vulnerability": "CVE-2026-42730", "author": {"login": "automation"}}, {"uuid": "d384e44a-9c28-4499-ba13-3644da9d83b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:34:44.131377+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtfzrnkfd2p", "content": "CVE-2026-42748 - WordPress WPify Woo Czech plugin\nCVE ID : CVE-2026-42748\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Unrestricted Upload of File with Dangerous Type vulnerability in WPify WPify Woo Czech wpify-woo allows Upload a Web Shell ...", "vulnerability": "CVE-2026-42748", "author": {"login": "automation"}}, {"uuid": "4a0cf6a2-a492-49d4-8c5c-ae30cf9836bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:31:24.153927+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtftskjxs2c", "content": "CVE-2026-40851 - Command injection via USB\nCVE ID : CVE-2026-40851\n \n Published : 27 May 2026, 9:16 a.m. | 1\u00a0hour, 53\u00a0minutes ago\n \n Description : A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code exec...", "vulnerability": "CVE-2026-40851", "author": {"login": "automation"}}, {"uuid": "5da643ec-4805-4b45-a54f-f155369b0221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:28:49.106522+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmtfp6kgas2g", "content": "Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions\n\nMicrosoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions \u2026\n#hackernews #microsoft #news", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "489f9760-9be7-427c-9e90-6f9471cccb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:28:23.440754+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtfogikks2c", "content": "CVE-2026-42747 - WordPress Easy Form Builder plugin\nCVE ID : CVE-2026-42747\n \n Published : 27 May 2026, 9:49 a.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hassantafreshi Easy...", "vulnerability": "CVE-2026-42747", "author": {"login": "automation"}}, {"uuid": "5a9fb0cf-10f2-4e0e-8ba3-ab7a16f3ad00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:19:52.565702+00:00", "type": "seen", "source": "https://bsky.app/profile/kubonai.bsky.social/post/3mmtf77hyf32g", "content": "Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign\n\nA large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980...\n\n\ud83d\udd17 https://ipsec.live/blog/2026-05-27-ghost-cms-sql-injection-flaw-exploited-in-largescale-clickfi\n\n#infosec #cybersecurity", "vulnerability": "CVE-2026-26980", "author": {"login": "automation"}}, {"uuid": "2ab5ac80-bd6b-4910-91e1-ffb4e491dd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:18:38+00:00", "type": "seen", "source": "https://t.me/true_secator/8247", "content": "\u0412 \u043c\u0430\u043b\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u041f\u041e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0418\u0418, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 BadHost (\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-48710), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f Starlette, \u043b\u0435\u0433\u043a\u043e\u0432\u0435\u0441\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043d\u0430 Python \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n\u041f\u0440\u043e\u0449\u0435 \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u00ab\u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c\u00bb \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0438\u0445 \u043a \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 URL-\u0430\u0434\u0440\u0435\u0441\u0443 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u0441\u044f \u043a \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c, \u043e\u0442\u043a\u0443\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u043b\u0438 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u0430\u044f X41 D-Sec \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043d\u0435\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443, \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a: \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u043b\u0435\u0433\u043a\u043e \u0441\u043e\u0431\u0440\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u043d\u0430\u044e\u0442, \u043a \u043a\u0430\u043a\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e API \u043e\u043d\u0438 \u0445\u043e\u0442\u044f\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f: GET\u00a0/privateendpoint HTTP/1.1 \u0438 Host:\u00a0example.com/public?bar=.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Starlette \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0418\u0418, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u0430 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u0430.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a Starlette \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043a\u0430\u043a LiteLLM, vLLM, \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0434\u043b\u044f \u0418\u0418, \u0441\u0435\u0440\u0432\u0435\u0440\u044b MCP \u0438 \u0434\u0430\u0436\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0438 \u0434\u043b\u044f \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0418\u0418.\n\nX41 D-Sec \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0418\u0418 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0442\u0438\u043f\u0430 BadHost.", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "e9abfd78-874e-440e-bc30-26e26dcb58c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:01:20.247401+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmte62ojkl27", "content": "\u6ce8\u610f\u559a\u8d77: Cisco ASA\u304a\u3088\u3073FTD\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\uff08CVE-2025-20333\u3001CVE-2025-20362\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  (\u66f4\u65b0)\n\nCisco ASA\u304a\u3088\u3073FTD\u306e\u8106\u5f31\u6027CVE-2025-20362\uff08\u8a8d\u8a3c\u306a\u3057URL\u63a5\u7d9a\uff09\u3068CVE-2025-20333\uff08\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\uff09\u3092\u7d44\u307f\u5408\u308f\u305b\u305f\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002VPN Web\u30b5\u30fc\u30d3\u30b9\u6709\u52b9\u306a\u4e00\u90e8\u88fd\u54c1\u304c\u4fb5\u5bb3\u3055\u308c\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u8a2d\u7f6e\u3084\u60c5\u5831\u7a83\u53d6\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u56fd\u5185\u3067\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30db\u30b9\u30c8\u304c\u591a\u6570\u5b58\u5728\u3057\u3066\u304a\u308a\u3001\u65e9\u671f\u306e\u5bfe\u7b56\u5b9f\u65bd\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u30de\u30eb\u30a6\u30a7\u30a2", "vulnerability": "CVE-2025-20362", "author": {"login": "automation"}}, {"uuid": "e7c848cd-8585-4043-abc4-6c3230ee84b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:01:20.092274+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmte62ojkl27", "content": "\u6ce8\u610f\u559a\u8d77: Cisco ASA\u304a\u3088\u3073FTD\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\uff08CVE-2025-20333\u3001CVE-2025-20362\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  (\u66f4\u65b0)\n\nCisco ASA\u304a\u3088\u3073FTD\u306e\u8106\u5f31\u6027CVE-2025-20362\uff08\u8a8d\u8a3c\u306a\u3057URL\u63a5\u7d9a\uff09\u3068CVE-2025-20333\uff08\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\uff09\u3092\u7d44\u307f\u5408\u308f\u305b\u305f\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u307e\u3059\u3002VPN Web\u30b5\u30fc\u30d3\u30b9\u6709\u52b9\u306a\u4e00\u90e8\u88fd\u54c1\u304c\u4fb5\u5bb3\u3055\u308c\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u8a2d\u7f6e\u3084\u60c5\u5831\u7a83\u53d6\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u56fd\u5185\u3067\u3082\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30db\u30b9\u30c8\u304c\u591a\u6570\u5b58\u5728\u3057\u3066\u304a\u308a\u3001\u65e9\u671f\u306e\u5bfe\u7b56\u5b9f\u65bd\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u30de\u30eb\u30a6\u30a7\u30a2", "vulnerability": "CVE-2025-20333", "author": {"login": "automation"}}, {"uuid": "272e47f5-1190-4edb-8d3f-5c50369cf932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:00:06+00:00", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/86099", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9082-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a thinhap\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 10:27:28\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2026-9082", "author": {"login": "automation"}}, {"uuid": "ced1de12-d2a4-447c-8270-34fc0907b8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:00:05.860500+00:00", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mmte3szsrg2d", "content": "Exchange Server zero-day (CVE-2026-42897): crafted email \u2192 OWA XSS \u2192 session token stolen.\u00a0\nActive exploitation confirmed.\nNo permanent patch.\n CISA deadline May 29.\nIf EM Service is disabled, you're unprotected right now.\n\nCheck EM Service status before Friday.\n\n#CyberSecurity", "vulnerability": "CVE-2026-42897", "author": {"login": "automation"}}, {"uuid": "bf1a2621-e8cf-4a08-980c-2246cce8e688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T11:00:04+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86098", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-999999\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 24520597-blip\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 10:48:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA critical Server-Side Template Injection (SSTI) vulnerability exists in the X-Trading Portal v1.4.2 dashboard metadata   rendering engine. The flaw is due to improper sanitization of user-controlled input in the username and widget_label fields before   they are processed by the internal Smarty template parser.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2026-999999", "author": {"login": "automation"}}, {"uuid": "f34e34e4-8300-460a-83be-43adcf44d07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:52:24.227544+00:00", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmtdo24ajok2", "content": "CISA Warns of Exploited LiteSpeed cPanel Plugin Flaw The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added CVE-2026-48172 to its Known Exploited Vulnerabilities (K...\n\n#Cyber #Security #News #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "46c0336c-5678-4faf-9289-c3a763c2be79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:34:06.319794+00:00", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mmtcnajjkr24", "content": "CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON\nil blog: insicurezzadigitale.com/cve-2026-542...\n\n#cybersecurity #apt #backdoor #cobaltstrike #infosec #malware #zeroday", "vulnerability": "CVE-2026-5426", "author": {"login": "automation"}}, {"uuid": "a504d95e-035a-4f97-90a6-95db2c81bd9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:30:34.032057+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmtcgzadie2d", "content": "LiteSpeed cPanel plugin CRITICAL vuln (CVE-2026-48172) is under active exploit \u2014 remote attackers can gain root access! Patch plugin v2.3 \u2013 v2.4.4 ASAP. CISA gives feds 4 days. https://radar.offseq.com/threat/cisa-gives-feds-4-days-to-patch-actively-exploited-ebc57663 #OffSeq #cybersecurity #patc...", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "7f7b09d8-a859-419d-86ed-3953f35d50b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:30:32.825950+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116646073527499637", "content": "\u26a0\ufe0f CRITICAL: Actively exploited privilege escalation in LiteSpeed cPanel plugin (CVE-2026-48172) enables remote root access via lsws.redisAble. Patch plugin v2.3 \u2013 v2.4.4 now! CISA mandates 4-day deadline for U.S. agencies. https://radar.offseq.com/threat/cisa-gives-feds-4-days-to-patch-actively-exploited-ebc57663 #OffSeq #vuln #patchnow", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "7480d811-ffc4-4eef-8e74-c0312b3c9af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:20:21+00:00", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-may-2026-monthly-rollup-av26-456", "content": "", "vulnerability": "CVE-2026-45659", "author": {"login": "syspect"}}, {"uuid": "b15b679d-ba2a-49ea-8d06-26fff9b332f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:12:05.200701+00:00", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmtbfxg2bb2t", "content": "\ud83d\udd12 Millions of BO agents imperiled by critical vulnerability in open source package\n\nA critical vulnerability, named \"BadHost\" (CVE-2026-48710), has been discovered in the Starlette ...\n\nhttps://tinyurl.com/32dpwrys #PotatoSecurity #InfoSec #CrustyTLDR", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "03387880-47ff-43b5-90eb-374b0249c946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:09:05+00:00", "type": "seen", "source": "https://t.me/thehackernews/9089", "content": "\ud83d\udea8 Gitea flaw exposes private container images without authentication.\n\nhttps://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.html\n\nCVE-2026-27771 affects all Gitea versions before 1.26.2 and likely impacts 30,000+ deployments worldwide. Attackers can pull private images without an account or password.\n\nUpdate now or enable REQUIRE_SIGNIN_VIEW as a temporary workaround.", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "fe467b0f-cf25-4bf8-8e41-2d962a995fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:07:08.128616+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmtb54njo225", "content": "\ud83d\udccc CVE-2026-7079 - A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Th... https://www.cyberhub.blog/cves/CVE-2026-7079", "vulnerability": "CVE-2026-7079", "author": {"login": "automation"}}, {"uuid": "2344bb84-82be-4ec3-a35e-e8c5028b4726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:06:48.179922+00:00", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmtb4khfno23", "content": "\ud83d\udd12 Millions of AI agents imperiled by critical vulnerability in open source package\n\nA critical vulnerability, named \"BadHost\" (CVE-2026-48710), has been discovered in the Starlette ...\n\nhttps://tinyurl.com/32dpwrys #CyberSecurity #InfoSec #CrustyTLDR", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "fd60ea9d-b411-471e-a555-46cd57d2c0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:04:18.998039+00:00", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3mmtay3o3wa2w", "content": "Ghost CMS SQL Injection Vulnerability Fuels ClickFix Campaign Targeting 700+\u00a0Websites\n\nThreat actors are exploiting a SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to hijack over 700 websites in a large-scale ClickFix campaign,.", "vulnerability": "CVE-2026-26980", "author": {"login": "automation"}}, {"uuid": "db7254f2-c2b3-424d-ae56-9edf4ae91b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:04:13.294454+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxwk33y23", "content": "\ud83d\udd10 CVE-2026-48784: UrlGenerator Encoding Skips Every Other Chained ../ or ./: Generated URL Collapses Off-Route\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48784-urlgenerator-encoding-skips-every-other-chained-or-generated-url-collapses-off-route", "vulnerability": "cve-2026-48784", "author": {"login": "automation"}}, {"uuid": "620a7ab4-1406-4155-b03e-4acfc04f03d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:04:08.651245+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxsaqpf2h", "content": "\ud83d\udd10 CVE-2026-48761: HtmlSanitizer Misses URL Attributes on object, applet, iframe, img and meta refresh\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48761-htmlsanitizer-misses-url-attributes-on-object-applet-iframe-img-and-meta-refresh", "vulnerability": "cve-2026-48761", "author": {"login": "automation"}}, {"uuid": "54c3836c-fa52-4266-a2cb-630e83694877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:04:06.445901+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxn3hnf2h", "content": "\ud83d\udd10 CVE-2026-48760: HtmlSanitizer URL Parser Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48760-htmlsanitizer-url-parser-underinclusive-percent-encoded-bidi-marks-and-unicode-whitespace-bypass", "vulnerability": "cve-2026-48760", "author": {"login": "automation"}}, {"uuid": "f89521ee-6315-4ad2-9e68-d5004e3343ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:03:58.636872+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxinnso2w", "content": "\ud83d\udd10 CVE-2026-48747: Mailomat Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48747-mailomat-webhook-parser-reads-the-hmac-algorithm-from-the-request-signature-algorithm-downgrade", "vulnerability": "cve-2026-48747", "author": {"login": "automation"}}, {"uuid": "e448fe0d-82b5-44ad-8831-ffda9f96444f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:03:53.463870+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtaxdm4z32u", "content": "\ud83d\udd10 CVE-2026-48736: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms: SSRF Bypass in NoPrivateNetworkHttpClient\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48736-iputils-private-subnets-omits-ipv6-transition-forms-ssrf-bypass-in-noprivatenetworkhttpclient", "vulnerability": "cve-2026-48736", "author": {"login": "automation"}}, {"uuid": "8e971635-b5fd-42f0-b2af-5cb736cebc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:03:46.196289+00:00", "type": "seen", "source": "https://bsky.app/profile/symfony.com/post/3mmtax4kuhm2m", "content": "\ud83d\udd10 CVE-2026-48489: Security Firewall Bypass via failure_forward Subrequest\n\u27a1\ufe0f https://symfony.com/blog/cve-2026-48489-security-firewall-bypass-via-failure-forward-subrequest", "vulnerability": "cve-2026-48489", "author": {"login": "automation"}}, {"uuid": "cd8fc742-8c55-434e-ae1d-3a1430523faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:01:56.005564+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtatsula22l", "content": "\ud83d\udfe0 CVE-2025-13392 - High (8.1)\n\nImproper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-13392/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2025-13392", "author": {"login": "automation"}}, {"uuid": "a8270f9a-e227-41f8-adf7-d9c58d6dfefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:01:48.401911+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtatl6fgw2c", "content": "\ud83d\udd34 CVE-2025-12686 - Critical (9.8)\n\nBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in AdminCent...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-12686/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2025-12686", "author": {"login": "automation"}}, {"uuid": "818735e8-e27e-4b98-b711-4e3c3360ee10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:01:40.281003+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtatdk3jz2g", "content": "\ud83d\udfe0 CVE-2025-30028 - High (8.6)\n\nA vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitr...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-30028/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2025-30028", "author": {"login": "automation"}}, {"uuid": "07c69335-2d8b-4fbe-b7d6-f2c837c4afd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:00:47.327636+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtarr7t5o2n", "content": "\ud83d\udfe0 CVE-2026-40851 - High (8.4)\n\nA local attacker can perform a confusion attack on the cfgparser via a specially crafted file on ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-40851/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-40851", "author": {"login": "automation"}}, {"uuid": "07c5074d-f71d-4984-8c2d-bbb3904e655f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:00:38.869195+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtarjcbom2r", "content": "\ud83d\udfe0 CVE-2026-40850 - High (7.5)\n\nAn unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-40850/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-40850", "author": {"login": "automation"}}, {"uuid": "c5c3d7b6-c382-4068-ba72-e4f2b9493d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:00:36+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86092", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Spring4Shell #CVE #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Spring4Shell-CTF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a YUTING-HUANG0\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 09:50:23\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nSpring4Shell (CVE-2022-22965) \u6f0f\u6d1e\u74b0\u5883\u642d\u5efa\u8207 CTF \u984c\u76ee\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2022-22965", "author": {"login": "automation"}}, {"uuid": "3355e712-1577-46b9-a29c-06107aed7e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T10:00:31.440867+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmtarc2msy2e", "content": "\ud83d\udd34 CVE-2026-49002 - Critical (9.1)\n\nAccess control failure means that an application does not effectively check user access permissio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-49002/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-49002", "author": {"login": "automation"}}, {"uuid": "8e391731-a142-489b-92e3-a5c666d40008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:59:23+00:00", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-deserialization-untrusted-data-vulnerability-apache-activemq-nms-amqp", "content": "", "vulnerability": "CVE-2025-54539", "author": {"login": "syspect"}}, {"uuid": "a526fdfc-51f6-4f0b-882a-e545744a663b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:58:45.978994+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtao64q3s2p", "content": "CVE-2026-41704 - Compromised VM can make arbitrary blobstore deletes\nCVE ID : CVE-2026-41704\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on...", "vulnerability": "CVE-2026-41704", "author": {"login": "automation"}}, {"uuid": "06f86c67-d281-4990-b037-c7ed76c105c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:53:45.382950+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmtaf7ne3f2e", "content": "CVE-2026-8042 - Github Shortcode\nCVE ID : CVE-2026-8042\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The Github Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'repo' shortcode attribute in the 'github' shortcode ...", "vulnerability": "CVE-2026-8042", "author": {"login": "automation"}}, {"uuid": "73c84a70-abc0-48c3-afa0-1dbcfbef6661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:48:45.009844+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmta4b6euq2p", "content": "CVE-2026-40816 - Unauthenticated SQLi in _mb24confi_getTagAlarm function\nCVE ID : CVE-2026-40816\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24al...", "vulnerability": "CVE-2026-40816", "author": {"login": "automation"}}, {"uuid": "99622543-7702-421c-905f-7ec649098b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:45:21.463369+00:00", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmt7w6mipq2d", "content": "CISA added CVE-2026-48172 to its exploited vulnerabilities list. The LiteSpeed cPanel plugin flaw can let attackers gain root access via arbitrary script execution. Patch with LiteSpeed WHM Plugin 5.3.1.0+ #LiteSpeed #cPanel #CISA", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "603f3099-5df7-4952-ae47-eb3146708f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:43:44.580979+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt7tcohta2q", "content": "CVE-2026-8832 - WPCode\nCVE ID : CVE-2026-8832\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in version...", "vulnerability": "CVE-2026-8832", "author": {"login": "automation"}}, {"uuid": "b52695c3-b33d-4e9c-b4af-f37513827073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:38:43.989087+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt7kdvw6z2k", "content": "CVE-2026-8143 - Booking Calendar \u2013 Event Calendar\nCVE ID : CVE-2026-8143\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The HBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hb_country_iso', 'hb_usa_state_iso', and 'hb_c...", "vulnerability": "CVE-2026-8143", "author": {"login": "automation"}}, {"uuid": "db1436c4-710c-49ef-9b41-52ac6b2e2562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:37:06.499785+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmt7hgwd4m25", "content": "\ud83d\udccc CVE-2026-7068 - A vulnerability was identified in D-Link DIR-825 3.00b32. This affects the function NMBD_process of the file sserver.c of the component nmbd. Such man... https://www.cyberhub.blog/cves/CVE-2026-7068", "vulnerability": "CVE-2026-7068", "author": {"login": "automation"}}, {"uuid": "eb64d986-6d96-461b-a220-a0209d2ff73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:37:05.333260+00:00", "type": "seen", "source": "https://bsky.app/profile/Firefox.activitypub.awakari.com.ap.brid.gy/post/3mmt7hdzkhb32", "content": "Windows Kernel Flaw Lets Attackers Modify Memory Counters A critical vulnerability in the Windows kernel, tracked as CVE-2026-40369, has been publicly disclosed, allowing any unprivileged attacke...\n\n#Cyber #Security #News #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "vulnerability": "CVE-2026-40369", "author": {"login": "automation"}}, {"uuid": "7b903441-67f1-4d13-9127-431d5e7bcbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:33:43.510035+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt7bfh4i42t", "content": "CVE-2026-40823 - Authenticated SQLi in DevSerialReset function\nCVE ID : CVE-2026-40823\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset fu...", "vulnerability": "CVE-2026-40823", "author": {"login": "automation"}}, {"uuid": "e1e7c50b-39f6-4643-96e9-412e507d19f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:29:25.774769+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6zpts4t2i", "content": "CVE-2026-8906 - WP Promoter\nCVE ID : CVE-2026-8906\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The WP Promoter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or inc...", "vulnerability": "CVE-2026-8906", "author": {"login": "automation"}}, {"uuid": "fa16d484-ec0f-45cb-bd37-9d8bf7fa9947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:25:40.701203+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6syvk6t2n", "content": "CVE-2026-49001 - Cross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE product\nCVE ID : CVE-2026-49001\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user...", "vulnerability": "CVE-2026-49001", "author": {"login": "automation"}}, {"uuid": "5869f68e-84a2-43e0-86f0-f7c4ce47cc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:23:25+00:00", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-microsoft-sharepoint-remote-code-execution-vulnerability-patch-immediately", "content": "", "vulnerability": "CVE-2026-45659", "author": {"login": "syspect"}}, {"uuid": "aaff4eea-e638-4de2-a6e5-d54aac6b71bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:22:20.219393+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6mzraeh2k", "content": "CVE-2026-41009 - Local Blobstore may allow arbitrary reads/deletes\nCVE ID : CVE-2026-41009\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by Agen...", "vulnerability": "CVE-2026-41009", "author": {"login": "automation"}}, {"uuid": "3c6fa882-8e23-4841-b1c7-9f88e1c45a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:19:20.019979+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6hnqzqn2c", "content": "CVE-2026-6169 - affiliate-toolkit\nCVE ID : CVE-2026-6169\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The affiliate-toolkit plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 3.8.5. This is due to the p...", "vulnerability": "CVE-2026-6169", "author": {"login": "automation"}}, {"uuid": "c3c91279-f03d-4c41-9f46-9a37cc8695bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:16:35.779875+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt6crdyt72e", "content": "CVE-2026-40817 - Unauthenticated SQLi in getAlarmProfiles function\nCVE ID : CVE-2026-40817\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProf...", "vulnerability": "CVE-2026-40817", "author": {"login": "automation"}}, {"uuid": "f8880692-f82f-4c85-9d54-ed0ee7a55b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:14:05.594117+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt66bwzwf2n", "content": "CVE-2026-40824 - Authenticated SQLi in accountstatus view\nCVE ID : CVE-2026-40824\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view use...", "vulnerability": "CVE-2026-40824", "author": {"login": "automation"}}, {"uuid": "f730e2e2-1bbe-4484-91ca-da87e259adb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:11:46.354352+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt625haue2p", "content": "CVE-2026-8942 - MetaMagic SEO Plugin\nCVE ID : CVE-2026-8942\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The MetaMagic SEO Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6. This is due...", "vulnerability": "CVE-2026-8942", "author": {"login": "automation"}}, {"uuid": "382d9562-bba2-44c6-b7cf-805b8329e1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:11:41.286947+00:00", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mmt5zygnj22b", "content": "Critical Security Alert BadHost Authentication Bypass Vulnerability CVE-2026-48710 Found in Starlette Framework Impacting AI Infrastructure #appsec", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "509d3bb5-2cbd-4c42-85cf-0ad276b4b935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:10:17.490962+00:00", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mmt5xirscr2l", "content": "CVE-2026-9022: XSS en Splide Carousel Block\n\nCVE-2026-9022 afecta Splide Carousel Block hasta 1.7.1: XSS almacenado que compromete visitantes. \u00bfYa actualizaste tu plugin antes de que alguien lo exp...\n\n#cve20269022 #xssalmacenado #splidecarousel #wordpressvulnerabilidad #wordfence", "vulnerability": "CVE-2026-9022", "author": {"login": "automation"}}, {"uuid": "09ff5b84-7a54-4250-97e6-b9c25638f060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:09:37.955231+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5wchvu42i", "content": "CVE-2026-40825 - Authenticated SQLi in accountstatus view\nCVE ID : CVE-2026-40825\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view dev...", "vulnerability": "CVE-2026-40825", "author": {"login": "automation"}}, {"uuid": "dfba5497-58bf-4cea-a0c8-500884818030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:07:37.192180+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5spnx352o", "content": "CVE-2026-40821 - Authenticated SQLi in getAccountByID function\nCVE ID : CVE-2026-40821\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID fu...", "vulnerability": "CVE-2026-40821", "author": {"login": "automation"}}, {"uuid": "f981f2c7-77e1-4263-b4df-da62db07acc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:07:07.804290+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmt5rtchdo2r", "content": "\ud83d\udccc CVE-2026-7034 - A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the com... https://www.cyberhub.blog/cves/CVE-2026-7034", "vulnerability": "CVE-2026-7034", "author": {"login": "automation"}}, {"uuid": "3c4264e9-a8b8-4f30-8c78-271067f6564f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:05:44.402135+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5pdzo272p", "content": "CVE-2026-40822 - Authenticated SQLi in DevSerialReset function\nCVE ID : CVE-2026-40822\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset fu...", "vulnerability": "CVE-2026-40822", "author": {"login": "automation"}}, {"uuid": "6ea520ef-0d90-4243-b1bc-cddb72b9d023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:03:57.839201+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5m6pi7z2n", "content": "CVE-2026-40818 - Unauthenticated SQLi in _mb24confi_getDevice function function\nCVE ID : CVE-2026-40818\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the...", "vulnerability": "CVE-2026-40818", "author": {"login": "automation"}}, {"uuid": "3b8ae247-d335-4ad1-85c6-fb3e458ef5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:03:36.812806+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmt5lk7w4p2l", "content": "CVE-2025-26909 - Critical LFI in Hide My WP Ghost &lt;=5.4.01. CVSS 9.6. Unpatched. Disable immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-26909/", "vulnerability": "CVE-2025-26909", "author": {"login": "automation"}}, {"uuid": "41603efb-a674-461d-8aa8-89ce7f4010fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:02:25.137022+00:00", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mmt5jetana2a", "content": "CVE-2026-48710 in Starlette enables HTTP Host header manipulation to bypass access controls, risking internal server exposure and credential access for AI agents.\n", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "8eef51c2-f200-45fa-a226-8c2eda2cd5c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:02:17.744775+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5j6yajv2t", "content": "CVE-2026-40826 - Authenticated SQLi in dsgvo_contracts view\nCVE ID : CVE-2026-40826\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dsgvo_contracts view...", "vulnerability": "CVE-2026-40826", "author": {"login": "automation"}}, {"uuid": "c7cdb7d8-8f6c-414e-85f8-a015ea70bf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:01:14.401068+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmt5hcumbm2j", "content": "\u6ce8\u610f\u559a\u8d77: GUARDIANWALL MailSuite\u306b\u304a\u3051\u308b\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77\n\n\u30ad\u30e4\u30ce\u30f3\u30de\u30fc\u30b1\u30c6\u30a3\u30f3\u30b0\u30b8\u30e3\u30d1\u30f3\u306eGUARDIANWALL MailSuite\uff08CVE-2026-32661\uff09\u306b\u30b9\u30bf\u30c3\u30af\u30d9\u30fc\u30b9\u306e\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u7248Ver 1.4.00\uff5e2.4.26\u304c\u5f71\u97ff\u3092\u53d7\u3051\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3067\u3059\u3002\u65e2\u306b\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u4fee\u6b63\u30d1\u30c3\u30c1\u306e\u9069\u7528\u304c\u63a8\u5968\u3055\u308c\u307e\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "vulnerability": "CVE-2026-32661", "author": {"login": "automation"}}, {"uuid": "3991995f-66fb-489a-9506-ab8ace6f3064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:00:52+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86085", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a abc1230940\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 08:50:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2025-21298", "author": {"login": "automation"}}, {"uuid": "d5d53b32-3b72-4a52-93dd-3dff43271115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:00:42.414847+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5gecmo52v", "content": "CVE-2026-7618 - Env\u00edaloSimple: Email Marketing y Newsletters\nCVE ID : CVE-2026-7618\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : The Env\u00edaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to time-based blind SQL Injection vi...", "vulnerability": "CVE-2026-7618", "author": {"login": "automation"}}, {"uuid": "a26cd386-c09e-4422-ab7f-54683f5fae9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:00:31.071044+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmt5fyl4zu2m", "content": "SQL Injection alert: MB connect line mbCONNECT24 hit by HIGH severity vuln (CVE-2026-40825). No patch yet \u2014 restrict access &amp; watch for updates. https://radar.offseq.com/threat/cve-2026-40825-cwe-89-improper-neutralization-of-s-0b1fbf64 #OffSeq #SQLInjection #Security", "vulnerability": "cve-2026-40825", "author": {"login": "automation"}}, {"uuid": "72d7a640-5435-4a5d-ad3b-d6c9a65a26ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T09:00:29.144333+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116645719441029051", "content": "\u26a0\ufe0f HIGH severity: CVE-2026-40825 in MB connect line mbCONNECT24. SQL Injection via accountstatus view devices param enables DB read/modify. No patch yet \u2014 restrict access &amp; monitor vendor advisories. https://radar.offseq.com/threat/cve-2026-40825-cwe-89-improper-neutralization-of-s-0b1fbf64 #OffSeq #SQLInjection #Vuln #MBconnect", "vulnerability": "cve-2026-40825", "author": {"login": "automation"}}, {"uuid": "40b480a7-233a-4855-8fa0-41533991d7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:59:12.186859+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmt5do6aqt2i", "content": "CVE-2026-40819 - Unauthenticated SQLi in sync_data24 task\nCVE ID : CVE-2026-40819\n \n Published : May 27, 2026, 8:16 a.m. | 15\u00a0minutes ago\n \n Description : An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task due ...", "vulnerability": "CVE-2026-40819", "author": {"login": "automation"}}, {"uuid": "ee5ed08a-46de-4a7d-aced-79443b080225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:51:08.399812+00:00", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mmt4vasnsk2j", "content": "\u6ce8\u610f\u559a\u8d77: Palo Alto Networks\u88fdPAN-OS\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027\uff08CVE-2026-0265\uff09\n\nPalo Alto Networks\u306ePAN-OS\u306b\u8a8d\u8a3c\u56de\u907f\u8106\u5f31\u6027CVE-2026-0265\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002Cloud Authentication Service\uff08CAS\uff09\u304c\u6709\u52b9\u306a\u74b0\u5883\u3067\u9060\u9694\u306e\u653b\u6483\u8005\u304cGlobalProtect\u306e\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3066VPN\u63a5\u7d9a\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002\u8a73\u7d30\u60c5\u5831\u304c\u516c\u958b\u3055\u308c\u3066\u304a\u308a\u3001\u56fd\u5185\u3067\u306e\u653b\u6483\u62e1\u5927\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u305f\u3081\u3001\u5bfe\u8c61\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u5229\u7528\u8005\u306f\u65e9\u6025\u306a\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "vulnerability": "CVE-2026-0265", "author": {"login": "automation"}}, {"uuid": "f5357133-fca7-4be6-bdb1-eed368e470ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:36:46.102230+00:00", "type": "seen", "source": "https://bsky.app/profile/humanghostemoji.bsky.social/post/3mmt43k6gjs23", "content": "Millions of AI agents are exposed due to the \u201cBadHost\u201d vulnerability (CVE-2026-48710) in Starlette, used by FastAPI and vLLM. Versions prior to 1.0.1 allow trivial HTTP Host header exploits.\narstechnica.com/information-...", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "aecfc032-5a64-4ba6-8d1e-48a55742bfa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:36:11+00:00", "type": "seen", "source": "https://t.me/xakep_ru/19433", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c BadHost \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Starlette \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-48710, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043e\u043f\u0435\u043d\u0441\u043e\u0440\u0441\u043d\u043e\u043c Python-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Starlette \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BadHost. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Starlette \u043b\u0435\u0436\u0438\u0442 \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 FastAPI \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0418\u0418-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u0430 \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0441\u0438\u043c\u0432\u043e\u043b\u0443 \u0432 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Host.\n\nhttps://xakep.ru/2026/05/27/badhost/", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "ab0248b9-bf2e-46e4-bbc5-63cf9784d7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:35:26.561161+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmt3z5xhq22g", "content": "High-severity SharePoint RCE bug patched by Microsoft (CVE-2026-45659)\n\nMicrosoft has released patches for a high-severity remote code execution vulnerability (CVE-2026-45659) in SharePoint that may be exploited in low-complexity attacks. It affects the SharePoint Serve\u2026\n#hackernews #microsoft #news", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "719ada30-c8b1-42b8-87fd-1e2f961ffd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:20:02.966960+00:00", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mmt35nop3s2y", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass | Discussion", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "fdc8fb93-9d2e-4d59-9512-fe9ba7cffe20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:16:40.155676+00:00", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mmt2xm5dfp2c", "content": "CISA\u304ccPanel\u306eLiteSpeed\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306e\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u8981\u8acb\n\nCISA\u306f\u706b\u66dc\u65e5\u3001\u91ce\u5916\u3067\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308bcPanel\u5411\u3051LiteSpeed\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u3001\u9023\u90a6\u6a5f\u95a2\u306b\u5bfe\u3057\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u6c42\u3081\u305f\u3002 CVE-2026-48172\uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u6b20\u9665\u306f\u3001\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u6a29\u9650\u6607", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "ca12435c-450b-4bbb-a0d0-849db7558a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:16:03.467871+00:00", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3mmt2wi4qcz24", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\n\n#HackerNews\n\nhttps://badhost.org/", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "413216e3-3b57-464c-8f0f-e16ed4100b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:13:21.517627+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2rkzdiju2", "content": "#OT #Advisory VDE-2026-059\nHelmholz: Multiple vulnerabilities in REX100/REX200/REX250\n\nTwo command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.\n#CVE CVE-2026-40851, CVE-2026-40852\n\nhttps://certvde.com/en/advisories/vde-2026-059/\n\n#CSAF [\u2026]", "vulnerability": "CVE-2026-40852", "author": {"login": "automation"}}, {"uuid": "5d1ecc57-fb3c-401f-9eb0-0c8e67ebc43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:13:21.358317+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2rkzdiju2", "content": "#OT #Advisory VDE-2026-059\nHelmholz: Multiple vulnerabilities in REX100/REX200/REX250\n\nTwo command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.\n#CVE CVE-2026-40851, CVE-2026-40852\n\nhttps://certvde.com/en/advisories/vde-2026-059/\n\n#CSAF [\u2026]", "vulnerability": "CVE-2026-40851", "author": {"login": "automation"}}, {"uuid": "b9d1b689-476a-4327-84f6-36b1b363d33c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:13:16.497116+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645533832975624", "content": "#OT #Advisory VDE-2026-059Helmholz: Multiple vulnerabilities in REX100/REX200/REX250\nTwo command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.#CVE CVE-2026-40851, CVE-2026-40852\nhttps://certvde.com/en/advisories/vde-2026-059/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-059.json", "vulnerability": "CVE-2026-40852", "author": {"login": "automation"}}, {"uuid": "4efeaf86-a266-497d-bdc8-7644c6a16366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:13:16.337890+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645533832975624", "content": "#OT #Advisory VDE-2026-059Helmholz: Multiple vulnerabilities in REX100/REX200/REX250\nTwo command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.#CVE CVE-2026-40851, CVE-2026-40852\nhttps://certvde.com/en/advisories/vde-2026-059/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-059.json", "vulnerability": "CVE-2026-40851", "author": {"login": "automation"}}, {"uuid": "6e04c8a1-ab6d-4aa6-932e-93b383317090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:55.136363+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2qrk6fzh2", "content": "#OT #Advisory VDE-2026-054\nMB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini\n\nTwo command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.\n#CVE CVE-2026-40851, CVE-2026-40852\n\nhttps://certvde.com/en/advisories/vde-2026-054/ [\u2026]", "vulnerability": "CVE-2026-40852", "author": {"login": "automation"}}, {"uuid": "7252c1d4-1aea-4833-9e7a-1670c3f2845e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:54.878963+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2qrk6fzh2", "content": "#OT #Advisory VDE-2026-054\nMB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini\n\nTwo command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.\n#CVE CVE-2026-40851, CVE-2026-40852\n\nhttps://certvde.com/en/advisories/vde-2026-054/ [\u2026]", "vulnerability": "CVE-2026-40851", "author": {"login": "automation"}}, {"uuid": "17b9ff35-c0cd-41e3-bc4d-dfa432af9c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:47.414822+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645531930716742", "content": "#OT #Advisory VDE-2026-054MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini\nTwo command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.#CVE CVE-2026-40851, CVE-2026-40852\nhttps://certvde.com/en/advisories/vde-2026-054/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-054.json", "vulnerability": "CVE-2026-40852", "author": {"login": "automation"}}, {"uuid": "a3457b5c-d3af-4a0d-97e6-e93df9b73ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:47.266273+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645531930716742", "content": "#OT #Advisory VDE-2026-054MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini\nTwo command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.#CVE CVE-2026-40851, CVE-2026-40852\nhttps://certvde.com/en/advisories/vde-2026-054/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-054.json", "vulnerability": "CVE-2026-40851", "author": {"login": "automation"}}, {"uuid": "edc7a1e0-3847-43e5-bbe9-46b7fa5cb9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:10.879544+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40820", "author": {"login": "automation"}}, {"uuid": "792a4777-dc9d-4a76-ba5d-f6ad3f43834f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:10.747948+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40821", "author": {"login": "automation"}}, {"uuid": "ac6fb8a7-e410-4b48-bfba-1184387ab8a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:10.585089+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40822", "author": {"login": "automation"}}, {"uuid": "12daa4fe-6faf-4de3-990f-7a239db61ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:10.445571+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40826", "author": {"login": "automation"}}, {"uuid": "8a54a244-0764-4f22-b031-3f56a672e5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:10.305525+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40823", "author": {"login": "automation"}}, {"uuid": "e217d57c-8953-4f74-b525-8532488e0152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:10.153222+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40824", "author": {"login": "automation"}}, {"uuid": "430ace71-e578-4e6d-8f2d-cd16e745b26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:10.028739+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2piimu572", "content": "#OT #Advisory VDE-2026-058\nHelmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\n\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815 [\u2026]", "vulnerability": "CVE-2026-40815", "author": {"login": "automation"}}, {"uuid": "e2535d53-238c-4f02-91a1-e5338a125c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.999432+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40825", "author": {"login": "automation"}}, {"uuid": "09831619-7b92-4e06-99e8-70ea0c8ebe11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.886504+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2piimu572", "content": "#OT #Advisory VDE-2026-058\nHelmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\n\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815 [\u2026]", "vulnerability": "CVE-2026-40816", "author": {"login": "automation"}}, {"uuid": "19451f8d-0d3d-4cd7-94f8-ba281834137e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.839020+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40827", "author": {"login": "automation"}}, {"uuid": "3bd33537-cccb-472c-95ec-ce7c776cc906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.753431+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2piimu572", "content": "#OT #Advisory VDE-2026-058\nHelmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\n\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815 [\u2026]", "vulnerability": "CVE-2026-40817", "author": {"login": "automation"}}, {"uuid": "c471b035-e035-4bb4-b090-a2d09045df49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.663246+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40828", "author": {"login": "automation"}}, {"uuid": "e4028f36-5cae-4a8e-8691-d97dca9b470e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.608845+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2piimu572", "content": "#OT #Advisory VDE-2026-058\nHelmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\n\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815 [\u2026]", "vulnerability": "CVE-2026-40818", "author": {"login": "automation"}}, {"uuid": "c2f401f7-d516-4e64-bf2a-bbea676f33ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.476960+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40829", "author": {"login": "automation"}}, {"uuid": "caf26d93-145d-4e37-b589-2498d7bed0d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.475507+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2piimu572", "content": "#OT #Advisory VDE-2026-058\nHelmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\n\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815 [\u2026]", "vulnerability": "CVE-2026-40819", "author": {"login": "automation"}}, {"uuid": "5a9293ab-fa58-4847-a214-4fe8879cea11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.345767+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40830", "author": {"login": "automation"}}, {"uuid": "dc700c53-73c9-4687-9c48-04207669d519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.213117+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2piimu572", "content": "#OT #Advisory VDE-2026-058\nHelmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\n\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815 [\u2026]", "vulnerability": "CVE-2026-40850", "author": {"login": "automation"}}, {"uuid": "794b2f41-73a3-435a-a92b-7f868ae2d7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.210306+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40831", "author": {"login": "automation"}}, {"uuid": "b9780d15-6d4a-4777-ba2e-d555a70640c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:09.051829+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40832", "author": {"login": "automation"}}, {"uuid": "522db16c-da8a-4681-b869-d27972ae0a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:08.924089+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40835", "author": {"login": "automation"}}, {"uuid": "f2cb61a4-86a5-4ca2-ae1e-e300fa254dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:08.782317+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40837", "author": {"login": "automation"}}, {"uuid": "c19176f6-c8e7-4588-ab5d-ecc3cb72b043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:08.653185+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40838", "author": {"login": "automation"}}, {"uuid": "ae4e1c94-89c1-4603-b1aa-2cad0f9a1121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:08.517001+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40839", "author": {"login": "automation"}}, {"uuid": "db4d0c9b-5a14-45f4-914f-21d0a2ba29b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:08.367407+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40840", "author": {"login": "automation"}}, {"uuid": "98257612-61d2-4b08-a70a-93d1d37aaf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:08.228400+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40841", "author": {"login": "automation"}}, {"uuid": "4b1b2e3f-d8d0-49a7-a333-53eee72cf8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:08.082074+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40842", "author": {"login": "automation"}}, {"uuid": "20991ba5-31a4-4db1-a9f4-d976c7e0f156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:07.942451+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40843", "author": {"login": "automation"}}, {"uuid": "c0eb8bcf-91cf-4242-a7bd-f3379116eaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:07.791262+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40844", "author": {"login": "automation"}}, {"uuid": "ba98468a-45f5-400a-aae7-143e9e2b2379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:07.642862+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40845", "author": {"login": "automation"}}, {"uuid": "7f21a623-90e4-40f2-b54f-ab78ad5c9101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:07.499897+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40846", "author": {"login": "automation"}}, {"uuid": "b76c8d05-5f5f-4e24-b05c-4721b08a1e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:07.348268+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40847", "author": {"login": "automation"}}, {"uuid": "b2207e2d-aaef-414b-91fc-71feb8467ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:07.205794+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40848", "author": {"login": "automation"}}, {"uuid": "33fcf9e0-5794-4a86-a212-3b8aa8e25adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:07.059339+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40849", "author": {"login": "automation"}}, {"uuid": "719fb417-fdce-4606-8fa1-f52ee4a84f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:06.900124+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40833", "author": {"login": "automation"}}, {"uuid": "5e371f4f-cdde-4ed3-847a-bcf861ea6d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:06.758335+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40834", "author": {"login": "automation"}}, {"uuid": "bee8e938-5175-4f91-9205-0cca3bd9b464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:06.624268+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40836", "author": {"login": "automation"}}, {"uuid": "93b4d5d7-9f64-4b13-8051-692e06d432c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:06.482816+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40810", "author": {"login": "automation"}}, {"uuid": "3d32b876-26c8-44f5-9756-09b5d5dc3bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:06.339258+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40811", "author": {"login": "automation"}}, {"uuid": "0f2c4242-03e0-4252-851d-4867b79507ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:06.212863+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40812", "author": {"login": "automation"}}, {"uuid": "3a958d89-973c-4b86-a9c6-bcf6b6f563cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:06.069121+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40813", "author": {"login": "automation"}}, {"uuid": "21cc266b-3789-4c3f-866d-71473998d1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:05.892492+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40814", "author": {"login": "automation"}}, {"uuid": "b687b000-72d3-4611-8e3e-cf7a12c99ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:05.757913+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40815", "author": {"login": "automation"}}, {"uuid": "8081a03d-a732-4f17-afee-5b21c5fae209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:05.600515+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40816", "author": {"login": "automation"}}, {"uuid": "6962a50d-56ea-41f3-a600-fc07f9f59771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:05.445207+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40817", "author": {"login": "automation"}}, {"uuid": "f2d2af87-456e-4006-98f2-3b4c4576d301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:05.293602+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40818", "author": {"login": "automation"}}, {"uuid": "0dc8074a-f44a-467c-80c7-d2a2af5747f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:05.145845+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40819", "author": {"login": "automation"}}, {"uuid": "d9bf167b-6e89-4374-9104-57c4db5ac985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:12:04.973837+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645529147227087", "content": "#OT #Advisory VDE-2026-058Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual\nMultiple SQLi vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-058/\n#CSAF https://helmholz.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-058.json", "vulnerability": "CVE-2026-40850", "author": {"login": "automation"}}, {"uuid": "88027654-d030-4214-a367-93a8ebd326da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:20.386532+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232", "content": "#OT #Advisory VDE-2026-044\nMB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\n\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816 [\u2026]", "vulnerability": "CVE-2026-40816", "author": {"login": "automation"}}, {"uuid": "63113007-29cc-4fe2-8466-97ccda4b167b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:20.367868+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40820", "author": {"login": "automation"}}, {"uuid": "5ab6ee04-e6dd-486f-86b3-ca543d85ab6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:20.238658+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40821", "author": {"login": "automation"}}, {"uuid": "187309cd-0259-4ba9-b745-0b379fd97989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:20.124437+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232", "content": "#OT #Advisory VDE-2026-044\nMB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\n\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816 [\u2026]", "vulnerability": "CVE-2026-40817", "author": {"login": "automation"}}, {"uuid": "940abd1a-7495-471c-b0e2-11241d72e52a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:20.097234+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40822", "author": {"login": "automation"}}, {"uuid": "573eea33-fff7-4f1a-81f9-7af76cc548ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.942263+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40826", "author": {"login": "automation"}}, {"uuid": "93663d2b-e6e6-4b7b-85e9-e012de76c7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.819012+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232", "content": "#OT #Advisory VDE-2026-044\nMB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\n\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816 [\u2026]", "vulnerability": "CVE-2026-40818", "author": {"login": "automation"}}, {"uuid": "224c0f3f-012a-4e64-8c9e-51fd2164074f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.777252+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40823", "author": {"login": "automation"}}, {"uuid": "b6a8edf2-f534-4671-a886-3dc2b037f093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.682360+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232", "content": "#OT #Advisory VDE-2026-044\nMB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\n\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816 [\u2026]", "vulnerability": "CVE-2026-40819", "author": {"login": "automation"}}, {"uuid": "0299e598-ace7-483f-9f75-0b5c436a371d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.612341+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40824", "author": {"login": "automation"}}, {"uuid": "7edd6bb0-545b-4d6e-9597-bf4133ebfb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.467679+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40825", "author": {"login": "automation"}}, {"uuid": "ec5e381f-6c22-4454-ad50-b53598135a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.385906+00:00", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mmt2nw2pp232", "content": "#OT #Advisory VDE-2026-044\nMB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\n\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.\n#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816 [\u2026]", "vulnerability": "CVE-2026-40850", "author": {"login": "automation"}}, {"uuid": "0d3d746b-bb01-4446-bebe-b2d27622fb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.316539+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40827", "author": {"login": "automation"}}, {"uuid": "e026a102-0b65-4668-8eaa-9ad71258c31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.154677+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40828", "author": {"login": "automation"}}, {"uuid": "5f3d8446-b640-41cd-b54d-a0302957a805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:19.002192+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40829", "author": {"login": "automation"}}, {"uuid": "120429bb-21ab-47f2-9d63-966658eba6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:18.865671+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40830", "author": {"login": "automation"}}, {"uuid": "e51e3d96-6934-4d54-876f-d39d847ee62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:18.708565+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40831", "author": {"login": "automation"}}, {"uuid": "f0765950-03d2-4553-af55-30bac81aa788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:18.567071+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40832", "author": {"login": "automation"}}, {"uuid": "371d1925-5793-4bec-977e-b4961e7a2384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:18.413822+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40835", "author": {"login": "automation"}}, {"uuid": "da6792c0-6cdd-4c6e-a8b3-eed89a3734c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:18.276359+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40837", "author": {"login": "automation"}}, {"uuid": "2109adb3-de60-4263-af9d-e4733a5c52ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:18.143302+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40838", "author": {"login": "automation"}}, {"uuid": "7bfa2b34-3802-40f2-8b91-d15383869833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:17.999599+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40839", "author": {"login": "automation"}}, {"uuid": "2dfd0a04-a1a1-4bf8-8611-ff03f4a92ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:17.845029+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40840", "author": {"login": "automation"}}, {"uuid": "ebb0ae52-e174-404b-95e7-8d372c26c003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:17.697702+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40841", "author": {"login": "automation"}}, {"uuid": "e69f9763-8140-4145-9afb-24eedab1d884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:17.558099+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40842", "author": {"login": "automation"}}, {"uuid": "49feaa98-c2a9-42cd-8fa8-cc3922a632de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:17.337125+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40843", "author": {"login": "automation"}}, {"uuid": "fa0624c5-be94-4291-b43a-6545a4066966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:17.181709+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40844", "author": {"login": "automation"}}, {"uuid": "d4db1543-bcea-45da-9ca3-e623752724c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:17.020239+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40845", "author": {"login": "automation"}}, {"uuid": "0735d6cf-43a1-4fce-8f06-d5666a2711f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:16.857373+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40846", "author": {"login": "automation"}}, {"uuid": "39712114-1a35-49e2-b0ed-5b8f8626a12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:16.709906+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40847", "author": {"login": "automation"}}, {"uuid": "f746a6aa-6887-47d9-baff-e803dd986a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:16.572140+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40848", "author": {"login": "automation"}}, {"uuid": "0e504917-1eb4-48b0-934e-b53814237c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:16.414766+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40849", "author": {"login": "automation"}}, {"uuid": "4f7a9ca6-cf2b-45c2-a19a-485b849e4183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:16.254342+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40833", "author": {"login": "automation"}}, {"uuid": "b67ad8b2-6e3b-442c-b052-2f61373ed3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:16.101332+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40834", "author": {"login": "automation"}}, {"uuid": "7e2f2328-0de2-4480-b007-327d224fa92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:15.906636+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40836", "author": {"login": "automation"}}, {"uuid": "679e2117-d08f-45f9-b65f-d46f8bf64155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:15.767222+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40810", "author": {"login": "automation"}}, {"uuid": "69a1f235-2274-407b-8de4-1a54e85ff26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:15.605215+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40811", "author": {"login": "automation"}}, {"uuid": "bf826d97-5e99-4cca-8233-f795c2aba40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:15.443743+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40812", "author": {"login": "automation"}}, {"uuid": "85eadff3-bd79-4d6d-8e61-e31486e751a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:15.297544+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40813", "author": {"login": "automation"}}, {"uuid": "27bc406d-8fc7-4dd1-8e0d-4029c389402d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:15.142313+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40814", "author": {"login": "automation"}}, {"uuid": "f4dc9147-52f4-42f1-8468-9e6d618eeb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:14.986609+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40815", "author": {"login": "automation"}}, {"uuid": "f4a67c64-f18b-43ab-9c88-d350e1e67dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:14.822120+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40816", "author": {"login": "automation"}}, {"uuid": "8e48fd62-640d-46e5-9256-e5771661074e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:14.564369+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40817", "author": {"login": "automation"}}, {"uuid": "b6f4036d-01c3-4989-a620-b1d0c20891b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:14.418219+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40818", "author": {"login": "automation"}}, {"uuid": "25598d52-9145-4a97-baac-ff8ff17e62f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:14.258339+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40819", "author": {"login": "automation"}}, {"uuid": "5e4612de-3187-4df2-a0c7-61e80ed62399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:11:14.087239+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645525736344350", "content": "#OT #Advisory VDE-2026-044MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24\nMultiple SQLi vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.#CVE CVE-2026-40850, CVE-2026-40819, CVE-2026-40818, CVE-2026-40817, CVE-2026-40816, CVE-2026-40815, CVE-2026-40814, CVE-2026-40813, CVE-2026-40812, CVE-2026-40811, CVE-2026-40810, CVE-2026-40836, CVE-2026-40834, CVE-2026-40833, CVE-2026-40849, CVE-2026-40848, CVE-2026-40847, CVE-2026-40846, CVE-2026-40845, CVE-2026-40844, CVE-2026-40843, CVE-2026-40842, CVE-2026-40841, CVE-2026-40840, CVE-2026-40839, CVE-2026-40838, CVE-2026-40837, CVE-2026-40835, CVE-2026-40832, CVE-2026-40831, CVE-2026-40830, CVE-2026-40829, CVE-2026-40828, CVE-2026-40827, CVE-2026-40825, CVE-2026-40824, CVE-2026-40823, CVE-2026-40826, CVE-2026-40822, CVE-2026-40821, CVE-2026-40820\nhttps://certvde.com/en/advisories/vde-2026-044/\n#CSAF https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json", "vulnerability": "CVE-2026-40850", "author": {"login": "automation"}}, {"uuid": "58669d0e-b444-425c-a808-fd65e686f52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:08:36.369439+00:00", "type": "seen", "source": "https://bsky.app/profile/tongzhuodeni.bsky.social/post/3mmt2j6ua2e2s", "content": "\u538b\u7f29\u8f6f\u4ef6\u88ab\u516c\u5f00\u6f0f\u6d1e\uff0c\u8fd8\u9644\u8d60\u4e00\u6761\u9493\u9c7c\u6377\u5f84\n\n7-Zip \u88ab\u516c\u5f00\u9ad8\u5371\u6f0f\u6d1e\uff08CVE-2026-48095\uff09\uff0c\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7279\u5236\u538b\u7f29\u6587\u4ef6\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u81f4\u5d29\u6e83\uff0c\u8be5\u6f0f\u6d1e\u5728 26.01 \u7248\u672c\u4e2d\u5df2\u4fee\u590d\u3002\n\n\u6d88\u606f\u6765\u6e90\uff1aSocprime Blog\nhttps://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "7c1e9c5c-d8cf-4edc-b022-9489e6017c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T08:06:32+00:00", "type": "seen", "source": "https://thehackernews.com/2026/05/gitea-vulnerability-exposes-private.html", "content": "Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote attackers to pull private container images from Gitea deployments without requiring an account, password, or other credentials.\n\nThe vulnerability, tracked as CVE-2026-27771 (CVSS score: N/A), affects all versions of Gitea prior to 1.26.2", "vulnerability": "CVE-2026-27771", "author": {"login": "automation"}}, {"uuid": "de1c8b31-7a9b-414e-a2a1-c47de03eaf5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:57:03.424559+00:00", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmszuhdmsjq2", "content": "# **CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON**\n\n\n@informatica\nMandiant ha pubblicato i dettagli dell'exploitation attiva di CVE-2026-5426, zero-day nel LMS KnowledgeDeliver causato da chiavi ASP.NET machineKey hardcoded e condivise [\u2026]", "vulnerability": "CVE-2026-5426", "author": {"login": "automation"}}, {"uuid": "9f3a1b37-89ac-410f-9daf-14a0df049473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:56:52.045931+00:00", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-486a-16a3-a903-786386626250", "content": "CVE-2026-5426: zero-day in KnowledgeDeliver LMS sfruttato per distribuire BLUEBEAM e Cobalt Strike BEACON\n@informaticaMandiant ha pubblicato i dettagli dell'exploitation attiva di CVE-2026-5426, zero-day nel LMS KnowledgeDeliver causato da chiavi ASP.NET machineKey hardcoded e condivise tra tutte le installazioni.RE: insicurezzadigitale.com/?p=977\u2026", "vulnerability": "CVE-2026-5426", "author": {"login": "automation"}}, {"uuid": "ec5dc1fb-126b-4fd6-a346-8c66f9decc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:56:13.268497+00:00", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmszstqikpq2", "content": "Microsoft SharePoint Has a New RCE Flaw. If You Haven\u2019t Patched Yet, Go Do That. A critical vulnerability, tracked as CVE-2026-45659, in Microsoft SharePoint can allow attackers to achieve remote...\n\n#Breaking #News #Hacking #Security #CVE-2026-45659 #hacking #news #information #security #news [\u2026]", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "a54caa28-90ef-473f-81e0-07d5987c8a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:40:07.266716+00:00", "type": "seen", "source": "https://bsky.app/profile/lobsters-feed.bsky.social/post/3mmsywah7tl27", "content": "CVE-2026-48710 Starlette Host-Header Auth Bypass https://lobste.rs/s/cmsgwo #python #web ", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "4bafe1b8-9865-4ff3-9064-a61118c83050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:33:02.540679+00:00", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mmsyjl3da62b", "content": "Microsoft has patched a high-severity remote code execution vulnerability (CVE-2026-45659) in SharePoint, affecting SharePoint Server Subscription Edition, Server 2019, and Enterprise Server 2016.", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "93cb26e4-4e87-4dac-a869-bd7a876bd8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:30:52.960021+00:00", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mmsyfqgnsk2q", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\n\nhttps://badhost.org/", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "977d1db8-5d67-41f1-a1ca-cf4848e33730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:30:37.979627+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmsyeyfx472f", "content": "Critical alert: CVE-2026-8760 in india-web-developer Login with OTP (\u22641.6) enables OTP brute-forcing. No patch yet \u2014 disable plugin or restrict access to reduce risk. https://radar.offseq.com/threat/cve-2026-8760-cwe-307-improper-restriction-of-exce-49a9becd #OffSeq #WordPress #Security", "vulnerability": "cve-2026-8760", "author": {"login": "automation"}}, {"uuid": "52ad3215-4609-46cd-a2ab-2754588756fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:30:26.640394+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116645365388258624", "content": "\ud83d\udd25 CVE-2026-8760 (CRITICAL, CVSS 9.8): india-web-developer Login with OTP \u22641.6 allows brute-force OTP bypass \u2014 no rate-limit on validation, no OTP expiry. Disable the plugin or restrict login access now. Patch pending. https://radar.offseq.com/threat/cve-2026-8760-cwe-307-improper-restriction-of-exce-49a9becd #OffSeq #WordPress #Vuln", "vulnerability": "cve-2026-8760", "author": {"login": "automation"}}, {"uuid": "a1ebbc58-4388-4634-9973-cdb65e8f805a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:22:42.207620+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645334969189092", "content": "#OT #Advisory VDE-2026-050Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and Configuration Files\nThis advisory addresses security issues in PLCnext firmware versions prior to 2026.0.3 that are related to APP handling and the processing of configuration files. The identified vulnerabilities affect APP installation authenticity as well as the handling of configuration data in writable directories. Successful exploitation may allow authenticated attackers with different privilege levels to compromise integrity, availability, and system security of affected PLCnext Control. Both issues are resolved starting with PLCnext firmware version 2026.0.3.#CVE CVE-2025-41669, CVE-2025-41670\nhttps://certvde.com/en/advisories/vde-2026-050/\n#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-050.json", "vulnerability": "CVE-2025-41670", "author": {"login": "automation"}}, {"uuid": "a5261abc-f26f-433b-a64d-b84383cb2100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:22:42.065598+00:00", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116645334969189092", "content": "#OT #Advisory VDE-2026-050Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and Configuration Files\nThis advisory addresses security issues in PLCnext firmware versions prior to 2026.0.3 that are related to APP handling and the processing of configuration files. The identified vulnerabilities affect APP installation authenticity as well as the handling of configuration data in writable directories. Successful exploitation may allow authenticated attackers with different privilege levels to compromise integrity, availability, and system security of affected PLCnext Control. Both issues are resolved starting with PLCnext firmware version 2026.0.3.#CVE CVE-2025-41669, CVE-2025-41670\nhttps://certvde.com/en/advisories/vde-2026-050/\n#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-050.json", "vulnerability": "CVE-2025-41669", "author": {"login": "automation"}}, {"uuid": "c98eab6c-27a4-4360-920a-abc2fd451f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:19:44.947952+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mmsxqyxaue2a", "content": "\ud83d\udea8 CVE-2025-51427: RCE w ModelScope. Zagro\u017cenie dla projekt\u00f3w AI\n\nLuka CVE-2025-51427 w popularnej bibliotece AI ModelScope pozwala na zdalne wykonanie kodu. Polskie zespo\u0142y data science powinny\n\nhttps://cyberowi.pl/cve-2025-51427-rce-w-modelscope-zagrozenie-dla-projektow-ai/\n\n#cyberbezpieczenstwo", "vulnerability": "cve-2025-51427", "author": {"login": "automation"}}, {"uuid": "82120521-6891-4eb0-b929-68be32918603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:19:43.895111+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mmsxqwetty2s", "content": "\ud83d\udea8 Apache Camel: Krytyczna luka CVE-2026-47323 pozwala na RCE\n\nLuka w Apache Camel z ocen\u0105 9.8 CVSS pozwala na zdalne wykonanie kodu. Problem dotyczy popularnych komponent\u00f3w CXF i Knative.\n\nhttps://cyberowi.pl/apache-camel-krytyczna-luka-cve-2026-47323-pozwala-na-rce/\n\n#cyberbezpieczenstwo", "vulnerability": "cve-2026-47323", "author": {"login": "automation"}}, {"uuid": "e4a75fa9-216d-4476-9502-ba96ea4b9021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:19:13.096511+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberowi.pl/post/3mmsxqum7dk2n", "content": "\ud83d\udea8 Joplin: Luka Path Traversal (CVE-2026-22810) pozwala nadpisa\u0107 pliki\n\nLuka w popularnej aplikacji do notatek Joplin pozwala na nadpisanie dowolnych plik\u00f3w na dysku po zaimportowaniu z\u0142o\u015bliwego\n\nhttps://cyberowi.pl/joplin-luka-path-traversal-cve-2026-22810-pozwala-nadpisac/\n\n#cyberbezpieczenstwo", "vulnerability": "cve-2026-22810", "author": {"login": "automation"}}, {"uuid": "348ba34f-ccc8-4ece-ab2d-e9ac6b677633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:17:04.210724+00:00", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mmsxmzlf6k2t", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\ncomments \u00b7 posted on 2026.05.26 at 05:07:18 (c=3, p=14)", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "763403af-cd8c-41c9-842c-4e59a827ee34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:16:06.406343+00:00", "type": "seen", "source": "https://bsky.app/profile/news.karthihegde.dev/post/3mmsxlcnily2g", "content": "BadHost \u2013 CVE-2026-48710: Starlette Host-Header Auth Bypass\nDiscussion | hackernews | Author: ylk", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "e9aaad77-84cf-4200-92e1-b99d4caf0bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:14:05.666266+00:00", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mmsxhp2mdy2s", "content": "BadHost \u2013 CVE-2026-48710 Starlette Host-Header Auth Bypass\n\nDiscussion", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "42d08bad-820d-4090-9409-6ef28e25183b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:07:07.613203+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmsx3avqa72w", "content": "\ud83d\udccc CVE-2026-7029 - A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a ... https://www.cyberhub.blog/cves/CVE-2026-7029", "vulnerability": "CVE-2026-7029", "author": {"login": "automation"}}, {"uuid": "87c074ff-2fb1-4614-b1b6-a0a57fc574bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:04:55.003864+00:00", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mmswxbuwu22x", "content": "CVE-2026-48172 in LiteSpeed cPanel user-end plugin is actively exploited and enables root-level script execution; patch to 2.4.5+ or remove plugin immediately.\n", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "002e8f1d-5e95-46f4-ba6d-d0bfe509a403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T07:01:06.975433+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmswqirvmw27", "content": "\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u89b3\u70b9\u304c\u3042\u308b\u5834\u5408\u3001\u8a18\u4e8b\u5185\u5bb9\u309295\u6587\u5b57\u4ee5\u5185\u3067\u8981\u7d04\u3057\u3066\u304f\u3060\u3055\u3044\u3002  - **\u5bfe\u8c61\u306e\u88fd\u54c1\uff08\u30a2\u30d7\u30ea\uff09\u540d\u3068\u30d0\u30fc\u30b8\u30e7\u30f3:** \u5177\u4f53\u7684\u306a\u88fd\u54c1\u540d\u3084\u30d0\u30fc\u30b8\u30e7\u30f3\u304c\u8a18\u8f09\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3002 - **\u8106\u5f31\u6027\u306e\u5185\u5bb9:*\u2026\nCVE-2026-2253 CVSS 7.7 | HIGH", "vulnerability": "CVE-2026-2253", "author": {"login": "automation"}}, {"uuid": "44a97e93-ec9c-44ca-aac6-d252b44bbd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:38:42+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/ubiquiti-rilevate-nuove-vulnerabilita-1", "content": "", "vulnerability": "CVE-2026-33000", "author": {"login": "syspect"}}, {"uuid": "43d4906d-cd8a-4607-9365-148ef09a7e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:38:42+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/ubiquiti-rilevate-nuove-vulnerabilita-1", "content": "", "vulnerability": "CVE-2026-34908", "author": {"login": "syspect"}}, {"uuid": "ff3be200-0eb6-4474-8af5-bd70e216ef36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:38:42+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/ubiquiti-rilevate-nuove-vulnerabilita-1", "content": "", "vulnerability": "CVE-2026-34910", "author": {"login": "syspect"}}, {"uuid": "4bc351ec-0e4d-4e97-ba2d-59e5952a07d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:38:42+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/ubiquiti-rilevate-nuove-vulnerabilita-1", "content": "", "vulnerability": "CVE-2026-34911", "author": {"login": "syspect"}}, {"uuid": "bd4d8905-b066-4368-b3c9-82d7cb5b0c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:38:42+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/ubiquiti-rilevate-nuove-vulnerabilita-1", "content": "", "vulnerability": "CVE-2026-34909", "author": {"login": "syspect"}}, {"uuid": "58fe5830-da65-40fd-a72e-5156e82878c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:37:08.103937+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmsvfm5prs2r", "content": "\ud83d\udccc CVE-2026-7160 - A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a man... https://www.cyberhub.blog/cves/CVE-2026-7160", "vulnerability": "CVE-2026-7160", "author": {"login": "automation"}}, {"uuid": "a40d2bbf-35a8-4932-b4c5-9ec929fc17d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:34:52.780000+00:00", "type": "published-proof-of-concept", "source": "https://blog.securelayer7.net/cve-2025-48459-apache-iotdb-unsafe-deserialization", "content": "", "vulnerability": "CVE-2025-48459", "author": {"login": "syspect"}}, {"uuid": "84fa5a30-b35b-4ea1-afec-9b0a3b40a235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:18:37.515537+00:00", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mmsudahhkstq", "content": "Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions https://thehackernews.com/2026/05/microsoft-patches-sharepoint-rce-flaw.html", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "00b8d536-7cf2-4c11-84ff-212c117b7c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:12:13.780281+00:00", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mmstxsdncstq", "content": "CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "bd34aa77-e723-4ffe-9a08-7f1f8d634bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:00:52.037943+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsteptle52s", "content": "\ud83d\udd34 CVE-2026-44450 - Critical (9.9)\n\nLumiverse is a full-featured AI chat application. Prior to 0.9.7, the MCP server creation endpoin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44450/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44450", "author": {"login": "automation"}}, {"uuid": "8c47ef2e-3644-4bbd-82ba-9f9597184d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:00:42.946314+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmstehswhn2s", "content": "\ud83d\udd34 CVE-2026-44449 - Critical (9.1)\n\nLumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPath(full...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44449/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44449", "author": {"login": "automation"}}, {"uuid": "855ad242-6d00-4e76-afaf-504685293cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:00:35.278196+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmstea23hr2r", "content": "\ud83d\udfe0 CVE-2026-44847 - High (7.5)\n\nMaxKB is an open-source AI assistant for enterprise. Prior to 2.9.0, MaxKB's webhook trigger endp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44847/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44847", "author": {"login": "automation"}}, {"uuid": "033f76a6-aaa8-4e71-973f-c64303d586d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:00:29.710786+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmste3ofru22", "content": "CRITICAL: OS command injection in OALDERS HTTP::Daemon &lt;6.17 \ud83d\udea8. Attackers can execute arbitrary commands &amp; manipulate files. Avoid untrusted input to send_file() while awaiting patch. https://radar.offseq.com/threat/cve-2026-8450-cwe-78-improper-neutralization-of-sp-75c93cb2 #OffSeq #CVE20268450 ...", "vulnerability": "cve-2026-8450", "author": {"login": "automation"}}, {"uuid": "71a8fb70-b2a1-46b8-8fab-87c49d58bfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:00:28.912838+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116645011565190190", "content": "\ud83d\udea8 CVE-2026-8450 (CRITICAL): OALDERS HTTP::Daemon &lt;6.17 has OS command injection via send_file(). Attackers can run commands, leak data, &amp; manipulate files. Avoid untrusted input and monitor for patches. https://radar.offseq.com/threat/cve-2026-8450-cwe-78-improper-neutralization-of-sp-75c93cb2 #OffSeq #CVE20268450 #infosec", "vulnerability": "cve-2026-8450", "author": {"login": "automation"}}, {"uuid": "e6c25795-2db0-451a-ba94-a43693293310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:00:06+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86071", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE20264893poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lottiedeyan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 05:56:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGenerate the poc for CVE-2026-4893: broken EDNS Client Subnet validation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2026-4893", "author": {"login": "automation"}}, {"uuid": "75bb9f20-034e-46ed-9dd5-0a88ee2a4b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T06:00:04+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86070", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE20265172poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lottiedeyan\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 05:56:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2026-5172", "author": {"login": "automation"}}, {"uuid": "436b195d-eb36-482f-91fc-3670e79435b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:53:32.743490+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmssxoqors2i", "content": "CVE-2026-9608 - QianFox FoxCMS Administrator Backend edit cross site scripting\nCVE ID : CVE-2026-9608\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A vulnerability was determined in QianFox FoxCMS up to 1.2.6. The impacted element is an unkn...", "vulnerability": "CVE-2026-9608", "author": {"login": "automation"}}, {"uuid": "05dba9ec-9b54-42ec-8783-d40cee4b16bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:52:39.490764+00:00", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mmssvy5szc23", "content": "CVE-2026-42897, Microsoft publie une att\u00e9nuation d'urgence pour la faille XSS d'Exchange - IT SOCIAL itsocial.fr/cybersecurit...", "vulnerability": "CVE-2026-42897", "author": {"login": "automation"}}, {"uuid": "ebfceaf8-c44a-44f6-ae66-4c5cdf1e4ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:48:32.725991+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmssoqcydb2t", "content": "CVE-2026-9022 - Splide Carousel Block\nCVE ID : CVE-2026-9022\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : The Splide Carousel Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'url' Block Attribute in all versions up to, an...", "vulnerability": "CVE-2026-9022", "author": {"login": "automation"}}, {"uuid": "6c52ee2d-14ed-4961-8a21-44f38a0e8c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:43:31.967095+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmssfrtxur2c", "content": "CVE-2026-9609 - QianFox FoxCMS Admin.php edit password recovery\nCVE ID : CVE-2026-9609\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A vulnerability was identified in QianFox FoxCMS up to 1.2.6. This affects the function Edit of the file Adm...", "vulnerability": "CVE-2026-9609", "author": {"login": "automation"}}, {"uuid": "e27485ae-bd5b-434b-9603-17c8dd355183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:43:26.663432+00:00", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mmssflnav62r", "content": "Anyone running a Palo Alto firewall with the User-ID portal exposed online should patch right now. CVE-2026-0300 lets attackers gain root with no login. A state-linked group is already exploiting it.", "vulnerability": "CVE-2026-0300", "author": {"login": "automation"}}, {"uuid": "6ebf56cf-649b-45ef-840b-f41a0dad6020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:38:31.763598+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmss4tg5nw2v", "content": "CVE-2026-2255 - Hitachi Vantara Pentaho Data Integration &amp; Analytics - Insufficiently Protected Credentials\nCVE ID : CVE-2026-2255\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : Hitachi Vantara Pentaho Data Integration &amp; Analytics versions before ...", "vulnerability": "CVE-2026-2255", "author": {"login": "automation"}}, {"uuid": "3e9a80d8-c65d-48ec-a80d-f0f62a07cbfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:33:31.404836+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsrtuw2qm2i", "content": "CVE-2026-9628 - UTT HiPER 1200GW Web Management formPptpClientConfig stack-based overflow\nCVE ID : CVE-2026-9628\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is...", "vulnerability": "CVE-2026-9628", "author": {"login": "automation"}}, {"uuid": "d8cc3be9-345b-4111-b936-74803a4770bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:31:06.488784+00:00", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mmsrob4j4ktq", "content": "\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8\u3001SharePoint\u306e\u6df1\u523b\u306aRCE\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\uff08CVE-2026-45659\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/45807/", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "c9e40d11-8cf9-4c4e-b921-866884d7dd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:28:30.998455+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsrkwg7wh2q", "content": "CVE-2026-9627 - UTT HiPER 1200GW Web Management setSysAdm strcpy buffer overflow\nCVE ID : CVE-2026-9627\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts th...", "vulnerability": "CVE-2026-9627", "author": {"login": "automation"}}, {"uuid": "d86e69c7-d56f-42e5-a3d1-76dcb00fa459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:24:13.452491+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsrdatlg52p", "content": "CVE-2026-48999 - Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product\nCVE ID : CVE-2026-48999\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : Attackers carefully craft malicious scripts, such as JavaScript, and inject them in...", "vulnerability": "CVE-2026-48999", "author": {"login": "automation"}}, {"uuid": "3a08e6cd-15c0-4c83-af96-cb5dae637c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:20:28.047089+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsr4ju5ia2i", "content": "CVE-2026-48961 - IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID\nCVE ID : CVE-2026-48961\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Desc...", "vulnerability": "CVE-2026-48961", "author": {"login": "automation"}}, {"uuid": "a6fc0442-5525-4a12-a2f9-5c9802daeeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:17:43.537943+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqxmuwt222", "content": "CVE-2026-8450: HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()", "vulnerability": "CVE-2026-8450", "author": {"login": "automation"}}, {"uuid": "4906c56b-d337-447e-b5a6-b8909f82b790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:17:07.484168+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqwkq3f22e", "content": "CVE-2026-2254 - Hitachi Vantara Pentaho Data Integration &amp; Analytics - Incorrect Permission Assignment for Critical Resource\nCVE ID : CVE-2026-2254\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : Hitachi Vantara Pentaho Data Integration &amp; Analytics...", "vulnerability": "CVE-2026-2254", "author": {"login": "automation"}}, {"uuid": "29d9eec7-48a1-4798-ba80-481cbbf188fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:14:06.988037+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqr6mndi2i", "content": "CVE-2026-2253 - Hitachi Vantara Pentaho Data Integration &amp; Analytics - Improper Restriction of XML External Entity Reference\nCVE ID : CVE-2026-2253\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : Hitachi Vantara Pentaho Data Integration &amp; Analytics...", "vulnerability": "CVE-2026-2253", "author": {"login": "automation"}}, {"uuid": "be5e167f-4293-4885-8c4b-262bf60dcd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:12:45.517959+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqoqx2dh2m", "content": "CVE-2025-15649: IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date", "vulnerability": "CVE-2025-15649", "author": {"login": "automation"}}, {"uuid": "5a105363-5e25-4112-b23c-c47adb9d0dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:12:40.825052+00:00", "type": "seen", "source": "https://bsky.app/profile/theresidentmachine.bsky.social/post/3mmsqomdt2i2s", "content": "CVE-2026-1615: When \"Static\" Evaluation Wasn't That Static\n\n#TheResident #ehabhussein #cybersecurity #infosec #vulnerability #CVE #hacking #security #CVE20261615", "vulnerability": "CVE-2026-1615", "author": {"login": "automation"}}, {"uuid": "47954a0c-8b62-4523-9938-84fa985919a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:11:23.259456+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqmc7vbf2t", "content": "CVE-2025-15649 - IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date\nCVE ID : CVE-2025-15649\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : IO::Uncompress::Unzip versions be...", "vulnerability": "CVE-2025-15649", "author": {"login": "automation"}}, {"uuid": "32cae723-3916-4a7d-92eb-2f0574cfcda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:11:12.373744+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116644817910935458", "content": "Attention, elevated activities detected targeting Ettercap (CVE-2026-9365) https://vuldb.com/vuln/365328/cti", "vulnerability": "CVE-2026-9365", "author": {"login": "automation"}}, {"uuid": "736a80ef-25ce-44c4-b1ea-3d7cdb698d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:08:52.913606+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqhssf332h", "content": "CVE-2026-9631 - UTT HiPER 1250GW Web Management formConfigFastDirectionW strcpy stack-based overflow\nCVE ID : CVE-2026-9631\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180...", "vulnerability": "CVE-2026-9631", "author": {"login": "automation"}}, {"uuid": "38481a2c-e25d-4f43-8af3-4fe605395186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:07:44.562939+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsqfrv2ht2x", "content": "CVE-2026-48959: IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward", "vulnerability": "CVE-2026-48959", "author": {"login": "automation"}}, {"uuid": "d0c31ed9-4830-48bc-b3d1-2dc56a3c9811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:06:33.783160+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsqdoedpx2i", "content": "CVE-2026-48962 - IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob\nCVE ID : CVE-2026-48962\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : IO::Compress versions before 2.22...", "vulnerability": "CVE-2026-48962", "author": {"login": "automation"}}, {"uuid": "6f4b0dba-8aa7-4952-8e19-dfc0cebad2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:04:46.807572+00:00", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mmsq77gmsktq", "content": "7-Zip\u306b\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3002\u30d0\u30fc\u30b8\u30e7\u30f326.00\u4ee5\u4e0b\u306b\u5f71\u97ff\u300226.01\u4ee5\u4e0a\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092 | \u30cb\u30c3\u30c1\u306aPC\u30b2\u30fc\u30de\u30fc\u306e\u74b0\u5883\u69cb\u7bc9Z https://www.nichepcgamer.com/archives/7-zip-vulnerability-cve-2026-48095.html", "vulnerability": "cve-2026-48095", "author": {"login": "automation"}}, {"uuid": "87dfa388-fcf2-4ca7-a9d8-c0c0c856411f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:04:24.815414+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsq7tel7g2i", "content": "CVE-2026-48959 - IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward\nCVE ID : CVE-2026-48959\n \n Published : May 27, 2026, 4:16 a.m. | 15\u00a0minutes ago\n \n Description : IO::Uncompress::Unzip versions before 2.220 for Per...", "vulnerability": "CVE-2026-48959", "author": {"login": "automation"}}, {"uuid": "83de3b61-251d-4e35-bbc6-b079591ba3b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:02:43.394229+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsq4sqpjn2s", "content": "CVE-2026-48962: IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob", "vulnerability": "CVE-2026-48962", "author": {"login": "automation"}}, {"uuid": "ce4220da-9943-4936-9c5e-2f19305179f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:02:24.486790+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsq4ako6c2k", "content": "CVE-2026-9632 - UTT HiPER 1250GW Web Management formGroupConfig strcpy stack-based overflow\nCVE ID : CVE-2026-9632\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by...", "vulnerability": "CVE-2026-9632", "author": {"login": "automation"}}, {"uuid": "9a9cccf2-10f3-4c71-89ff-f85f599b0b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:01:12.897127+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmsq23rpnq2g", "content": "CVE-2025-2005 - Critical RCE in Front End Users plugin for WordPress. Unauthenticated arbitrary file upload. CVSS 9.8. No patch available. Disable plugin immediately. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-2005/", "vulnerability": "CVE-2025-2005", "author": {"login": "automation"}}, {"uuid": "0a448c4a-1429-47aa-833a-a53593024e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:00:31.515729+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmspyuw3jw2p", "content": "CVE-2026-49017 - OpenStack Swift S3API Middleware Infinite Loop Denial of Service Vulnerability\nCVE ID : CVE-2026-49017\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an inf...", "vulnerability": "CVE-2026-49017", "author": {"login": "automation"}}, {"uuid": "b673c4a1-4ca8-4232-9078-6fe79589f4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T05:00:12.042025+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmspyb5e7w2e", "content": "\ud83d\udfe0 CVE-2026-2253 - High (7.7)\n\nHitachi Vantara Pentaho Data Integration &amp; Analytics versions before 10.2.0.7 and 11.0.0.0, inclu...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-2253/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-2253", "author": {"login": "automation"}}, {"uuid": "b7eee634-36e4-4cbc-af63-b6e5beab3ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:58:45.287416+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmspvpknit2h", "content": "CVE-2026-6565 - Style Kits \u2013 Advanced Theme Styles for Elementor\nCVE ID : CVE-2026-6565\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : The Style Kits \u2013 Advanced Theme Styles for Elementor, Elementor Kits &amp; Elementor Patterns plugin for Wo...", "vulnerability": "CVE-2026-6565", "author": {"login": "automation"}}, {"uuid": "f24ad49d-9d8e-4199-9120-544a010d3643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:57:44.535832+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmspttjznl2z", "content": "CVE-2026-48961: IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID", "vulnerability": "CVE-2026-48961", "author": {"login": "automation"}}, {"uuid": "6f3d10bc-ce25-43a0-91dc-3bdca7007c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:57:05.985667+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmspsorzxi2o", "content": "CVE-2026-9156 - Tanium addressed a denial of service vulnerability in Tanium Server.\nCVE ID : CVE-2026-9156\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Tanium addressed a denial of service vulnerability in Tanium Server.\n \n Severity: 6.5 |...", "vulnerability": "CVE-2026-9156", "author": {"login": "automation"}}, {"uuid": "bca315eb-6795-4819-96c5-81ea2ac54b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:55:29.000187+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsppu4g5d2h", "content": "CVE-2026-9207 - Command Injection in Connect Allows Privilege Escalation on Windows Tanium Module Server\nCVE ID : CVE-2026-9207\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Tanium addressed an unauthorized code execution vulnerability in Co...", "vulnerability": "CVE-2026-9207", "author": {"login": "automation"}}, {"uuid": "00026ee0-752d-4fd7-af79-dfb8521478f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:53:58.512371+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmspn5xkta2e", "content": "CVE-2026-7493 - Appointment Booking Calendar \u2014 Simply Schedule Appointments Booking Plugin\nCVE ID : CVE-2026-7493\n \n Published : May 27, 2026, 2:16 a.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : The Appointment Booking Calendar \u2014 Simply Schedule Appointments Booking Plugin pl...", "vulnerability": "CVE-2026-7493", "author": {"login": "automation"}}, {"uuid": "bc5307bb-cda7-403e-9da0-fedf946ea2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:39:56.258993+00:00", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mmsou2itsc2r", "content": "The latest update for #Indusface includes \"CVE-2026-9082: Critical Drupal SQL Injection Vulnerability Affects #PostgreSQL Deployments\" and \"CVE-2026-44575: Middleware Authorization Bypass in Next.js App Router\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "vulnerability": "CVE-2026-44575", "author": {"login": "automation"}}, {"uuid": "59e480e0-7268-47f7-91fc-beba7c8f12d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:39:56.096520+00:00", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mmsou2itsc2r", "content": "The latest update for #Indusface includes \"CVE-2026-9082: Critical Drupal SQL Injection Vulnerability Affects #PostgreSQL Deployments\" and \"CVE-2026-44575: Middleware Authorization Bypass in Next.js App Router\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "vulnerability": "CVE-2026-9082", "author": {"login": "automation"}}, {"uuid": "b8ccdc29-0b96-41c5-83d8-f1ab5dc4f442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:30:31.157720+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmsod6gi4p22", "content": "HIGH severity alert: Eval injection in PMQS IO::Compress (&lt;2.220) lets attackers run arbitrary Perl code via crafted output globs. Restrict to trusted input, patch when available. https://radar.offseq.com/threat/cve-2026-48962-cwe-95-improper-neutralization-of-d-a4f0eb17 #OffSeq #Vulnerability #Perl", "vulnerability": "cve-2026-48962", "author": {"login": "automation"}}, {"uuid": "a313811b-6a1c-45b7-b328-4cb09efe2170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:30:28.090137+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116644657711662061", "content": "\u26a0\ufe0f HIGH severity: CVE-2026-48962 in PMQS IO::Compress (Perl &lt;2.220) enables eval injection via crafted glob strings. Arbitrary Perl code may execute with process privileges. Restrict untrusted input &amp; monitor for patches. https://radar.offseq.com/threat/cve-2026-48962-cwe-95-improper-neutralization-of-d-a4f0eb17 #OffSeq #Vuln #Perl #Infosec", "vulnerability": "cve-2026-48962", "author": {"login": "automation"}}, {"uuid": "e90a18a8-dcd3-4b69-9296-297636e03d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:14:12.726538+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116644593811372296", "content": "It is possible to see elevated activities targeting Edimax BR-6675nD (CVE-2026-9379) https://vuldb.com/vuln/365342/cti", "vulnerability": "CVE-2026-9379", "author": {"login": "automation"}}, {"uuid": "a22b44ac-b68f-4d55-8368-6377c10d865d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:14:11.955864+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116644593765514992", "content": "Some increased actor activities are shown targeting NousResearch hermes-agent (CVE-2026-9351) https://vuldb.com/vuln/365314/cti", "vulnerability": "CVE-2026-9351", "author": {"login": "automation"}}, {"uuid": "9d87e5e1-cda4-4fe6-aa70-a20b98db5724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:07:08.159515+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmsmzfpwys2p", "content": "\ud83d\udccc CVE-2026-7119 - A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCountrystr. The manipulation of th... https://www.cyberhub.blog/cves/CVE-2026-7119", "vulnerability": "CVE-2026-7119", "author": {"login": "automation"}}, {"uuid": "cc137101-de66-48ef-be63-0840a7a941f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:01:32.943087+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmpfgm3q2s", "content": "\ud83d\udfe0 CVE-2025-43306 - High (7.8)\n\nA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macO...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2025-43306/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2025-43306", "author": {"login": "automation"}}, {"uuid": "29b8d3d1-b86e-4c1c-97bd-4d1cc75e36cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:01:25.342774+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmp5p25f2k", "content": "\ud83d\udfe0 CVE-2026-44900 - High (8.1)\n\nepa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44900/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44900", "author": {"login": "automation"}}, {"uuid": "3d30eb71-27b6-4347-aef1-5d9c2d1f0ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:01:17.121652+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmovh4ot2z", "content": "\ud83d\udfe0 CVE-2026-43988 - High (7.5)\n\nVanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-43988/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-43988", "author": {"login": "automation"}}, {"uuid": "cb3c4717-0668-4a06-9d0b-8bff1746ddb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:00:30.441629+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmniu4hc2n", "content": "\ud83d\udfe0 CVE-2026-9631 - High (8.8)\n\nA vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vuln...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9631/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9631", "author": {"login": "automation"}}, {"uuid": "b10a4f6e-3c2e-4de0-ad1d-283412397c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T04:00:21.359254+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsmnat2lv2t", "content": "\ud83d\udfe0 CVE-2026-9628 - High (8.8)\n\nA weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown fun...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9628/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9628", "author": {"login": "automation"}}, {"uuid": "f087dffd-039f-4ec8-9cac-d0e6f950b1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:55:00+00:00", "type": "seen", "source": "https://cert.pl/en/posts/2026/05/CVE-2026-35087", "content": "", "vulnerability": "CVE-2026-35087", "author": {"login": "syspect"}}, {"uuid": "f3408552-3b8d-4995-b350-99f23006095b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:55:00+00:00", "type": "seen", "source": "https://cert.pl/en/posts/2026/05/CVE-2026-35087", "content": "", "vulnerability": "CVE-2026-35089", "author": {"login": "syspect"}}, {"uuid": "5d5cfe1a-7d70-4218-be50-94fab7c45185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:55:00+00:00", "type": "seen", "source": "https://cert.pl/en/posts/2026/05/CVE-2026-35087", "content": "", "vulnerability": "CVE-2026-35090", "author": {"login": "syspect"}}, {"uuid": "7d8565e6-3017-4f22-9c7b-4aa66fa54453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:37:06.407555+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmsldpayna2r", "content": "\ud83d\udccc CVE-2026-6988 - A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of th... https://www.cyberhub.blog/cves/CVE-2026-6988", "vulnerability": "CVE-2026-6988", "author": {"login": "automation"}}, {"uuid": "5ff6c681-efc2-4212-aade-cbe9f3efbb14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:19:16.403752+00:00", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mmskdt7wsi2a", "content": "\ud83d\udcf0 CISA Perintahkan Instansi Pemerintah Segera Tambal Kerentanan SQL Injection Kritis \"CVE-2026-9082\" pada Drupal CMS\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/05/27/cisa-perintahkan-tambal-kerentanan-sql-injection-drupal/\n\n#beritaTeknologi #bindingOperationalDirective #cisaKe", "vulnerability": "CVE-2026-9082", "author": {"login": "automation"}}, {"uuid": "a7b4f5c9-1576-411f-ac39-7d71ad7475fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:17:13.020821+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116644369651047677", "content": "Our CTI team identified a lot of activities targeting NousResearch hermes-agent (CVE-2026-9352) https://vuldb.com/vuln/365315/cti", "vulnerability": "CVE-2026-9352", "author": {"login": "automation"}}, {"uuid": "e2ea1cfa-e058-4ce2-a980-f9be81f902d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:17:11.674558+00:00", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116644369602702510", "content": "Some increased actor activities are shown targeting Edimax EW-7438RPn (CVE-2026-9361) https://vuldb.com/vuln/365324/cti", "vulnerability": "CVE-2026-9361", "author": {"login": "automation"}}, {"uuid": "d8adc0af-6800-42f9-b68e-1273840d2557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:01:32.581474+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsjdzvoso2w", "content": "\ud83d\udfe0 CVE-2026-9627 - High (8.8)\n\nA security flaw has been discovered in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the func...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9627/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9627", "author": {"login": "automation"}}, {"uuid": "f5fa9e56-dcc7-4a1d-818b-415a0265f2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:01:22.541201+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsjdsegpa2z", "content": "\ud83d\udfe0 CVE-2026-9207 - High (8.8)\n\nTanium addressed an unauthorized code execution vulnerability in Connect.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9207/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9207", "author": {"login": "automation"}}, {"uuid": "4d87dfcd-80cd-46c2-b5ba-1498423b6f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:01:14.041892+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmsjdkdwvs2s", "content": "\ud83d\udfe0 CVE-2026-9632 - High (8.8)\n\nA flaw has been found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this issue is th...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9632/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9632", "author": {"login": "automation"}}, {"uuid": "f37f43fa-d077-4a46-8430-54f538d5c127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:00:29.536628+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmsjca6nvq2v", "content": "OpenStack Swift 2.36.0 &amp; 2.37.0 hit by HIGH-severity infinite loop flaw \u2014 risk of denial of service! Patch to 2.36.2/2.37.2+ after checking vendor advisory. \ud83d\udea8 https://radar.offseq.com/threat/cve-2026-49017-cwe-835-loop-with-unreachable-exit--0557d1bf #OffSeq #OpenStack #Security", "vulnerability": "cve-2026-49017", "author": {"login": "automation"}}, {"uuid": "5b6a2e70-d868-4919-9360-46f5186c6169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:00:27.932207+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116644303789823901", "content": "CVE-2026-49017: HIGH-severity in OpenStack Swift 2.36.0 &amp; 2.37.0. Infinite loop in s3api lets authenticated attackers exhaust proxy workers \u2192 DoS risk. Patch to 2.36.2 or 2.37.2+ now! \ud83d\udd04 https://radar.offseq.com/threat/cve-2026-49017-cwe-835-loop-with-unreachable-exit--0557d1bf #OffSeq #OpenStack #Vuln #DoS", "vulnerability": "cve-2026-49017", "author": {"login": "automation"}}, {"uuid": "37ac9aab-0e36-4c04-8fe4-83864d99b286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T03:00:06.840098+00:00", "type": "seen", "source": "https://bsky.app/profile/geeknewsbot.bsky.social/post/3mmsjbj3m5v26", "content": "\uacf5\uaca9\uc790\ub4e4\uc774 ClickFix \uacf5\uaca9\uc744 \uc704\ud574 700\uac1c\uc758 Ghost CMS \uc0ac\uc774\ud2b8\ub97c \ud0c8\ucde8\ud568\n\n\uace0\uc2a4\ud2b8 CMS(Ghost CMS)\uc758 \uc2ec\uac01\ud55c \ucde8\uc57d\uc810(CVE-2026-26980)\uc744 \uc545\uc6a9\ud55c \ub300\uaddc\ubaa8 \ud574\ud0b9 \uacf5\uaca9\uc73c\ub85c 700\uac1c \uc774\uc0c1\uc758 \uc6f9\uc0ac\uc774\ud2b8\uac00 \uac10\uc5fc\ub418\uc5b4 \uac00\uc9dc \ubcf4\uc548 \uc778\uc99d\uc744 \uc720\ub3c4\ud558\ub294 '\ud074\ub9ad\ud53d\uc2a4(ClickFix)' \uacf5\uaca9\uc5d0 \ub178\ucd9c\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc804\ubb38 \ubc88\uc5ed \uacf5\uaca9\uc790\ub4e4\uc774 \ucd5c\uadfc \uacf5\uac1c\ub41c \uace0\uc2a4\ud2b8 CMS(Ghost CMS)\uc758", "vulnerability": "CVE-2026-26980", "author": {"login": "automation"}}, {"uuid": "0b1b4049-31f3-424e-8b10-1633eff8f498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:45:37.583192+00:00", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmsihnwhmn2v", "content": "**\u8106\u5f31\u6027\u6982\u8981**: iOS/iPadOS\u306eWebKit\u306b\u5b58\u5728\u3002\u7d30\u5de5\u3055\u308c\u305fWeb\u30b3\u30f3\u30c6\u30f3\u30c4\u8868\u793a\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u3002  **\u5f71\u97ff**: \u60aa\u610f\u3042\u308bWeb\u30b5\u30a4\u30c8\u95b2\u89a7\u306b\u3088\u308a\u3001\u30c7\u30d0\u30a4\u30b9\u304c\u4e57\u3063\u53d6\u3089\u308c\u308b\u6050\u2026\nCVE-2025-43306 CVSS 7.8 | HIGH", "vulnerability": "CVE-2025-43306", "author": {"login": "automation"}}, {"uuid": "b880d3fd-9ab5-4875-b742-1da149f7717c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:30:58.297887+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "b042a1e0-624c-4317-a731-37cb99df8d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:30:58.142116+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "vulnerability": "CVE-2026-28952", "author": {"login": "automation"}}, {"uuid": "5f5935bb-8432-4e4d-9d78-f1290d3c9aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:30:57.994377+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "6e4d5498-e383-45e4-955e-54800285fb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:30:57.839668+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "vulnerability": "CVE-2026-46727", "author": {"login": "automation"}}, {"uuid": "02a65102-4940-42e1-b221-1b19cd44c41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:30:57.574213+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "vulnerability": "CVE-2026-45584", "author": {"login": "automation"}}, {"uuid": "f29784cd-77c4-4f79-9364-fe0c3ef86cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:30:57.383282+00:00", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmshngckkv2m", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45250: 72 interactions\nCVE-2026-45584: 65 interactions\nCVE-2026-46727: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-48710: 11 interactions\nCVE-2026-28952: 3 interactions\nCVE-2026-45659: 3 interactions\n", "vulnerability": "CVE-2026-45250", "author": {"login": "automation"}}, {"uuid": "d2b9dbaa-093a-40cc-8f89-c77c02ec9b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:24:19+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "vulnerability": "CVE-2026-4480", "author": {"login": "syspect"}}, {"uuid": "cc692575-5f74-49e7-a86a-7cb9c61c2501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:24:19+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "vulnerability": "CVE-2026-1933", "author": {"login": "syspect"}}, {"uuid": "b2809583-c250-4d48-a77d-f76f0677dc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:24:19+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "vulnerability": "CVE-2026-4408", "author": {"login": "syspect"}}, {"uuid": "fad590e8-4a46-4533-8aab-6c8d3f23589a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:24:19+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "vulnerability": "CVE-2026-3012", "author": {"login": "syspect"}}, {"uuid": "3607e281-2954-41a7-9fb2-69f1ab498ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:24:19+00:00", "type": "seen", "source": "https://www.acn.gov.it/portale/w/nuove-vulnerabilita-in-samba", "content": "", "vulnerability": "CVE-2026-3238", "author": {"login": "syspect"}}, {"uuid": "1676cee1-fe95-475c-8e25-fadafe07508e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:05:00.432038+00:00", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mmsg6zpb7d2j", "content": "\ud83d\udd12 Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions\n\nMicrosoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint tha...\n\nhttps://tinyurl.com/434xhcv6 #CyberSecurity #InfoSec #CrustyTLDR", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "106f3f97-1a77-4e09-bf0c-f0357e3f6779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:04:31+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86051", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Drupal_REST-RCE_Unauthenticated\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a joaoaugustom\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 01:28:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis exploit is based on CVE-2019-6340 and was built upon the original exploit by leonjza and the Metasploit module, extending it can be executed multiple times against the same target without waiting for cache expiration.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2019-6340", "author": {"login": "automation"}}, {"uuid": "0512049e-7ef2-4e58-82be-87dcf285f8f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:33.510959+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmsfyror252f", "content": "CVE-2025-27740 - Critical auth bypass in Microsoft AD CS. Allows privilege escalation over network. CVSS 8.8. No patch yet. Mitigate immediately. #CVE #Microsoft #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-27740/", "vulnerability": "CVE-2025-27740", "author": {"login": "automation"}}, {"uuid": "75fba6ce-9b67-480f-8c1d-5dc87fd65894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:30.973543+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfym7jpe2x", "content": "7/9\n\nhttps://www.samba.org/samba/security/CVE-2026-3012.html\n    https://www.samba.org/samba/security/CVE-2026-3238.html\n    https://www.samba.org/samba/security/CVE-2026-4408.html\n    https://www.samba.org/samba/security/CVE-2026-4480.html\n  (* Security fix *)", "vulnerability": "CVE-2026-4480", "author": {"login": "automation"}}, {"uuid": "c423e86c-8cda-4c94-b662-9d80c288651c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:30.815945+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfym7jpe2x", "content": "7/9\n\nhttps://www.samba.org/samba/security/CVE-2026-3012.html\n    https://www.samba.org/samba/security/CVE-2026-3238.html\n    https://www.samba.org/samba/security/CVE-2026-4408.html\n    https://www.samba.org/samba/security/CVE-2026-4480.html\n  (* Security fix *)", "vulnerability": "CVE-2026-4408", "author": {"login": "automation"}}, {"uuid": "acea75ff-f4b3-48e1-813e-886e3c25fd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:30.659381+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfym7jpe2x", "content": "7/9\n\nhttps://www.samba.org/samba/security/CVE-2026-3012.html\n    https://www.samba.org/samba/security/CVE-2026-3238.html\n    https://www.samba.org/samba/security/CVE-2026-4408.html\n    https://www.samba.org/samba/security/CVE-2026-4480.html\n  (* Security fix *)", "vulnerability": "CVE-2026-3238", "author": {"login": "automation"}}, {"uuid": "9f329723-7192-4935-afee-2414772d7277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:30.456725+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfym7jpe2x", "content": "7/9\n\nhttps://www.samba.org/samba/security/CVE-2026-3012.html\n    https://www.samba.org/samba/security/CVE-2026-3238.html\n    https://www.samba.org/samba/security/CVE-2026-4408.html\n    https://www.samba.org/samba/security/CVE-2026-4480.html\n  (* Security fix *)", "vulnerability": "CVE-2026-3012", "author": {"login": "automation"}}, {"uuid": "2d170626-3b56-4ebb-bbd7-cacaf9cb9451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:29.465768+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyl27rh2e", "content": "6/9\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-3238\n    https://www.cve.org/CVERecord?id=CVE-2026-4408\n    https://www.cve.org/CVERecord?id=CVE-2026-4480\n    https://www.samba.org/samba/security/CVE-2026-1933.html\n    https://www.samba.org/samba/security/CVE-2026-2340.html", "vulnerability": "CVE-2026-2340", "author": {"login": "automation"}}, {"uuid": "ca1863dc-29d7-45ae-a2d5-e05f2b08cc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:29.313135+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyl27rh2e", "content": "6/9\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-3238\n    https://www.cve.org/CVERecord?id=CVE-2026-4408\n    https://www.cve.org/CVERecord?id=CVE-2026-4480\n    https://www.samba.org/samba/security/CVE-2026-1933.html\n    https://www.samba.org/samba/security/CVE-2026-2340.html", "vulnerability": "CVE-2026-1933", "author": {"login": "automation"}}, {"uuid": "211324b9-a7c1-42b5-9d46-9026603a521b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:29.140453+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyl27rh2e", "content": "6/9\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-3238\n    https://www.cve.org/CVERecord?id=CVE-2026-4408\n    https://www.cve.org/CVERecord?id=CVE-2026-4480\n    https://www.samba.org/samba/security/CVE-2026-1933.html\n    https://www.samba.org/samba/security/CVE-2026-2340.html", "vulnerability": "CVE-2026-4480", "author": {"login": "automation"}}, {"uuid": "03689b06-7740-47a1-8b1d-b4a99e4368f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:28.963188+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyl27rh2e", "content": "6/9\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-3238\n    https://www.cve.org/CVERecord?id=CVE-2026-4408\n    https://www.cve.org/CVERecord?id=CVE-2026-4480\n    https://www.samba.org/samba/security/CVE-2026-1933.html\n    https://www.samba.org/samba/security/CVE-2026-2340.html", "vulnerability": "CVE-2026-4408", "author": {"login": "automation"}}, {"uuid": "48c52ebf-70da-41fc-953e-c131e74f6ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:28.687142+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyl27rh2e", "content": "6/9\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-3238\n    https://www.cve.org/CVERecord?id=CVE-2026-4408\n    https://www.cve.org/CVERecord?id=CVE-2026-4480\n    https://www.samba.org/samba/security/CVE-2026-1933.html\n    https://www.samba.org/samba/security/CVE-2026-2340.html", "vulnerability": "CVE-2026-3238", "author": {"login": "automation"}}, {"uuid": "e7ca5f4e-ae76-4aed-a542-4d309b792c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:27.524689+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyjytqj2i", "content": "5/9\n\nUnauthenticated Remote Code Execution in Samba printing subsystem.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-1933\n    https://www.cve.org/CVERecord?id=CVE-2026-2340\n    https://www.cve.org/CVERecord?id=CVE-2026-3012", "vulnerability": "CVE-2026-3012", "author": {"login": "automation"}}, {"uuid": "22b5dcce-73c0-4d1b-97d1-26414dff5171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:27.378235+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyjytqj2i", "content": "5/9\n\nUnauthenticated Remote Code Execution in Samba printing subsystem.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-1933\n    https://www.cve.org/CVERecord?id=CVE-2026-2340\n    https://www.cve.org/CVERecord?id=CVE-2026-3012", "vulnerability": "CVE-2026-2340", "author": {"login": "automation"}}, {"uuid": "7eb35f54-d3cb-44e5-a414-2e9d7375de81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:01:27.219505+00:00", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mmsfyjytqj2i", "content": "5/9\n\nUnauthenticated Remote Code Execution in Samba printing subsystem.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-1933\n    https://www.cve.org/CVERecord?id=CVE-2026-2340\n    https://www.cve.org/CVERecord?id=CVE-2026-3012", "vulnerability": "CVE-2026-1933", "author": {"login": "automation"}}, {"uuid": "f65b35e7-f1c2-4de1-aa76-f4ddb73c3c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T02:00:53.893501+00:00", "type": "seen", "source": "https://bsky.app/profile/bugxhunter.bsky.social/post/3mmsfxonynz2x", "content": "\ud83c\udfdb\ufe0f CISA Adds LiteSpeed cPanel Plugin Privilege Escalation Vulnerability\n\n\ud83d\udcdd CISA adds CVE-2026-48172 to KEV Catalog, affecting federal agencies.\n\nhttps://www.cisa.gov/news-events/alerts/2026/05/26/cisa-adds-one-known-exploited-vulnerability-catalog\n\n\ud83d\udcf0 Alerts\n\n#GovSec #CVE", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "e40d6268-5c7a-4b51-a6f1-f1727ce42608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:58:20.216489+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsft3xj642p", "content": "CVE-2026-9606 - itsourcecode Courier Management System manage_user.php sql injection\nCVE ID : CVE-2026-9606\n \n Published : May 27, 2026, 12:16 a.m. | 15\u00a0minutes ago\n \n Description : A vulnerability has been found in itsourcecode Courier Management System 1.0. Impacted is an un...", "vulnerability": "CVE-2026-9606", "author": {"login": "automation"}}, {"uuid": "0d554c98-8a30-4ea4-8974-7929d3e7d0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:53:19.810264+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsfk5jppg2c", "content": "CVE-2026-9607 - itsourcecode Courier Management System parcel_list.php sql injection\nCVE ID : CVE-2026-9607\n \n Published : May 27, 2026, 12:16 a.m. | 15\u00a0minutes ago\n \n Description : A vulnerability was found in itsourcecode Courier Management System 1.0. The affected element i...", "vulnerability": "CVE-2026-9607", "author": {"login": "automation"}}, {"uuid": "75b691c5-523e-4b8a-ade6-711360740239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:48:19.603079+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsfb74agt2i", "content": "CVE-2026-8606 - Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpoint\nCVE ID : CVE-2026-8606\n \n Published : May 27, 2026, 12:16 a.m. | 15\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHu...", "vulnerability": "CVE-2026-8606", "author": {"login": "automation"}}, {"uuid": "d65558e4-19bf-438b-b1a3-257d936c827d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:43:43.112922+00:00", "type": "seen", "source": "https://bsky.app/profile/Xuzyh-Oty.closednetwork.social.ap.brid.gy/post/3mmseyse7kcp2", "content": "https://cyberpress.org/exploited-drupal-sql-injection/\nCISA flags exploited Drupal SQL injection flaw CISA added CVE-2026-9082 to its Known Exploited Vulnerabilities catalog after active abuse of a highly critical Drupal Core SQL injection bug", "vulnerability": "CVE-2026-9082", "author": {"login": "automation"}}, {"uuid": "9fefbac8-c019-4b01-8467-c7f5a12ccdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:43:19.338652+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmseyaotzz2e", "content": "CVE-2026-9605 - GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow\nCVE ID : CVE-2026-9605\n \n Published : May 27, 2026, 12:16 a.m. | 15\u00a0minutes ago\n \n Description : A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read...", "vulnerability": "CVE-2026-9605", "author": {"login": "automation"}}, {"uuid": "fc4f3671-9c06-4d9c-b7fc-289c754d34f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:38:18.977641+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsepcasdg2c", "content": "CVE-2026-9312 - Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpoint\nCVE ID : CVE-2026-9312\n \n Published : May 27, 2026, 12:16 a.m. | 15\u00a0minutes ago\n \n Description : A server-side reques...", "vulnerability": "CVE-2026-9312", "author": {"login": "automation"}}, {"uuid": "0ac7b5ad-6a0e-4eb8-8376-e17c11ade456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:33:18.681982+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsegdt5cw2q", "content": "CVE-2026-9584 - code-projects Project Management System Login chk.php sql injection\nCVE ID : CVE-2026-9584\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A security vulnerability has been detected in code-projects Project Management System 1...", "vulnerability": "CVE-2026-9584", "author": {"login": "automation"}}, {"uuid": "10a36936-9884-48dd-8f34-f4aaf1669956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:30:28.076028+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mmsebabvvk26", "content": "CRITICAL: CVE-2026-9312 in GitHub Enterprise Server enables unauth attackers to hit internal services via SSRF. Patch to 3.16.20+ ASAP. Details: https://radar.offseq.com/threat/cve-2026-9312-cwe-918-server-side-request-forgery--b1f49fcb #OffSeq #SSRF #GitHubSecurity", "vulnerability": "cve-2026-9312", "author": {"login": "automation"}}, {"uuid": "cb2731d7-cfdd-4258-a007-773a5211e8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:30:25.774276+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116643949752477544", "content": "\ud83d\udea8 CRITICAL: CVE-2026-9312 (SSRF) in GitHub Enterprise Server 3.16.0 \u2013 3.21.0 lets unauth attackers access internal services via crafted uploads. Patch to 3.16.20+ ASAP! Details: https://radar.offseq.com/threat/cve-2026-9312-cwe-918-server-side-request-forgery--b1f49fcb #OffSeq #SSRF #GitHub #Vuln", "vulnerability": "cve-2026-9312", "author": {"login": "automation"}}, {"uuid": "8e5275ed-c448-4370-8961-40a06834f151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:29:01.068321+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmse6obg6h2r", "content": "CVE-2026-9604 - JeecgBoot AiragModelController access control\nCVE ID : CVE-2026-9604\n \n Published : May 26, 2026, 11:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A vulnerability was detected in JeecgBoot up to 3.9.1. This vulnerability affects unknown code of the componen...", "vulnerability": "CVE-2026-9604", "author": {"login": "automation"}}, {"uuid": "606d2c57-2e4d-41ae-ac77-0258a7df3674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:25:15.675847+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdxxcrxo2r", "content": "CVE-2026-45574 - epa4all-client: TLS Certificate Validation Disabled in Production\nCVE ID : CVE-2026-45574\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur....", "vulnerability": "CVE-2026-45574", "author": {"login": "automation"}}, {"uuid": "58706424-af1d-40f7-ae1e-c46f033aa168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:21:55.318163+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdry7r5r2h", "content": "CVE-2026-9603 - SourceCodester eDoc Doctor Appointment System delete-session.php authorization\nCVE ID : CVE-2026-9603\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A security vulnerability has been detected in SourceCodester eDoc Doctor App...", "vulnerability": "CVE-2026-9603", "author": {"login": "automation"}}, {"uuid": "4beed933-05f9-42a9-87d8-fc53e68a0f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:18:55.034917+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdmma4nh2i", "content": "CVE-2026-8680 - Apache HTTP Server Remote Code Execution\nCVE ID : CVE-2026-8680\n \n Published : May 26, 2026, 11:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\n \n Severity: 0.0 | NA\n ...", "vulnerability": "CVE-2026-8680", "author": {"login": "automation"}}, {"uuid": "6ae6c23f-8a61-4073-bd31-943c9f8526ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:16:10.898407+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsdhpsf2h2v", "content": "CVE-2026-48710 - Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks\nCVE ID : CVE-2026-48710\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Starlette is a lightweight ASGI framewor...", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "cc25e78c-98f1-4c14-8ccc-7b88c1ecbc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:13:40.392209+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsddafoew2i", "content": "CVE-2026-44905 - Vanetza: Remote Denial of Service via Uncaught OER Encoding Exception in Cryptographic Verification\nCVE ID : CVE-2026-44905\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Vanetza is an open-source implementation of the ETSI ...", "vulnerability": "CVE-2026-44905", "author": {"login": "automation"}}, {"uuid": "bf90a222-bee6-4664-a17f-a0a6b1fda462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:11:21.894006+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsd73zcda2o", "content": "CVE-2026-44903 - Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI\nCVE ID : CVE-2026-44903\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Prometheus is an open-source monitor...", "vulnerability": "CVE-2026-44903", "author": {"login": "automation"}}, {"uuid": "191a15fb-5bc9-41fa-bd93-73dc0b90fb9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:09:20.586775+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsd3b27g32n", "content": "CVE-2026-44985 - Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication\nCVE ID : CVE-2026-44985\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Dozzle is a realtime log viewer for docker containers. Pr...", "vulnerability": "CVE-2026-44985", "author": {"login": "automation"}}, {"uuid": "b3066e45-66eb-4f6d-a207-bbe8c9c8968d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:07:12.267913+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmscxoassz2e", "content": "CVE-2026-44966 - Velocity.js: Prototype Pollution in #set path assignment\nCVE ID : CVE-2026-44966\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and ...", "vulnerability": "CVE-2026-44966", "author": {"login": "automation"}}, {"uuid": "245d764b-767a-4789-9759-7ef807f8ec81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:05:19.646690+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmscucna4x2k", "content": "CVE-2026-45298 - Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)\nCVE ID : CVE-2026-45298\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : Dozzle is a realtime log viewer for...", "vulnerability": "CVE-2026-45298", "author": {"login": "automation"}}, {"uuid": "387b1b73-0e20-410c-882a-4569a6ac93a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:05:06+00:00", "type": "seen", "source": "https://t.me/GithubRedTeam/86046", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2021-3560-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Jeanback1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-27 00:48:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2021-3560 \u2014 Polkit privilege escalation exploit via accounts-daemon D-Bus race condition\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "vulnerability": "CVE-2021-3560", "author": {"login": "automation"}}, {"uuid": "a23863d8-9199-4b62-888b-e672b08f3195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:03:33.172694+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmscr5cl2r2v", "content": "CVE-2026-8647 - Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available\nCVE ID : CVE-2026-8647\n \n Published : May 26, 2026, 11:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Crypt::ScryptKDF versions through 0.0...", "vulnerability": "CVE-2026-8647", "author": {"login": "automation"}}, {"uuid": "1868ca50-643a-4cbc-948f-a732185a31e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:01:52.911504+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsco5lniw2k", "content": "CVE-2026-44983 - smallbitvec: Safe API Triggered Heap Buffer Overflow via Integer Overflow\nCVE ID : CVE-2026-44983\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : smallbitvec is a growable bit-vector for Rust, optimized for size. From 1.0.1 t...", "vulnerability": "CVE-2026-44983", "author": {"login": "automation"}}, {"uuid": "cf51e7fe-b523-4636-9296-3f52999ae671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T01:00:17.533993+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmsclcm7wc2c", "content": "CVE-2026-5260 - Gnutls: gnutls: information disclosure via heap overread in rsa key exchange\nCVE ID : CVE-2026-5260\n \n Published : May 26, 2026, 10:16 p.m. | 2\u00a0hours, 15\u00a0minutes ago\n \n Description : A flaw was found in libgnutls. A remote attacker, by sending an extremely shor...", "vulnerability": "CVE-2026-5260", "author": {"login": "automation"}}, {"uuid": "35b0f5af-9ae4-401b-80a2-f2ecefcfa264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:58:47.285974+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmscime3hs2q", "content": "CVE-2026-46740 - Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections\nCVE ID : CVE-2026-46740\n \n Published : May 26, 2026, 11:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed me...", "vulnerability": "CVE-2026-46740", "author": {"login": "automation"}}, {"uuid": "2ba4206b-f69c-4843-9028-ad0e561762cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:56:21+00:00", "type": "published-proof-of-concept", "source": "https://github.com/langroid/langroid/security/advisories/GHSA-mxfr-6hcw-j9rq", "content": "", "vulnerability": "CVE-2026-25879", "author": {"login": "syspect"}}, {"uuid": "06686d3c-b46f-4e49-8b38-6bdb56af08be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:43:09.944040+00:00", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mmsbmoi4i724", "content": "Trend Micro Apex One\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001CISA\u304b\u3089\u8b66\u544a\u304c\u767a\u4ee4\u3055\u308c\u307e\u3057\u305f\uff08CVE-2026-34926\uff09 \n\nActively exploited Trend Micro Apex One flaw gets CISA warning (CVE-2026-34926)  #HelpNetSecurity (May 26)\n\nwww.helpnetsecurity.com/2026/05/26/a...", "vulnerability": "CVE-2026-34926", "author": {"login": "automation"}}, {"uuid": "00cb93b9-d45a-4023-bd85-083fcc026200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:42:35.882741+00:00", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mmsblnlrcz2d", "content": "Microsoft\u304cSharePoint\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027CVE-2026-45659\u3092\u30b5\u30fc\u30d0\u30fc\u30d0\u30fc\u30b8\u30e7\u30f3\u5168\u4f53\u3067\u4fee\u6b63 \n\nMicrosoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions  #HackerNews (May 26)\n\nthehackernews.com/2026/05/micr...", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "8081e89f-47ae-49cb-bee3-6cb705b1fad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:42:14.487820+00:00", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mmsbkplmsz2q", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (May 26)\n\nCVE-2026-48172  LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "vulnerability": "CVE-2026-48172", "author": {"login": "automation"}}, {"uuid": "d54926aa-b40b-4c5b-b386-de9ee351eaf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:37:08.009340+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmsbbvbp5c2v", "content": "\ud83d\udccc CVE-2026-6135 - A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromSetIpBind of the file /goform/SetIpBind. Executin... https://www.cyberhub.blog/cves/CVE-2026-6135", "vulnerability": "CVE-2026-6135", "author": {"login": "automation"}}, {"uuid": "256e17f2-d948-4fc7-a89e-0bd7f6fd1974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:32:28.584827+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsazkwpzd2s", "content": "CVE-2026-8647: Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available", "vulnerability": "CVE-2026-8647", "author": {"login": "automation"}}, {"uuid": "ed7d8203-2eb9-4ecf-80eb-65f198b94745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:27:28.286556+00:00", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmsaqmimy72u", "content": "CVE-2026-46740: Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections", "vulnerability": "CVE-2026-46740", "author": {"login": "automation"}}, {"uuid": "6a85d321-ece0-4272-9def-e3cf1afaf2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:19:55+00:00", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8181.yaml", "content": "", "vulnerability": "CVE-2026-8181", "author": {"login": "automation"}}, {"uuid": "7606abcd-63c6-4e70-86ef-56e404fc14de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:19:21.549923+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmsac3s46k2g", "content": "[SECURITY ADVISORY] CVE-2021-21735 - ZTE ZXHN H168N V3.5 Unauthenticated Admin Credential Leak\n\nPosted by m.nageh on May 25-----BEGIN SECURITY ADVISORY----- \n\nAdvisory ID: MONX-2021-001 \nCVE ID: CVE-2021-21735 \nTitle: ZTE ZXHN H168N V3.5 - Unauthenticated Wizard Credential \nDisclo\u2026\n#hackernews #news", "vulnerability": "CVE-2021-21735", "author": {"login": "automation"}}, {"uuid": "608a7e33-ddb8-412f-a900-feaebf201712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:08:43.860270+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mms7p3atnk2g", "content": "[SECURITY ADVISORY] CVE-2026-34474 - ZTE H298A/H108N Unauthenticated Admin Credential Exposure\n\nPosted by m.nageh on May 25-----BEGIN SECURITY ADVISORY----- \n\nAdvisory ID: MONX-2026-003 \nCVE ID: CVE-2026-34474 \nTitle: ZTE ZXHN H298A / H108N - Unauthenticated Admin Password &amp; \nWLAN\u2026\n#hackernews #news", "vulnerability": "CVE-2026-34474", "author": {"login": "automation"}}, {"uuid": "082eb7de-5d54-4c39-9b91-35185e57a1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:07:13.630806+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mms7mak6dk2u", "content": "\ud83d\udccc CVE-2026-30893 - Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.4.0 to before version 4.14.4, a path trav... https://www.cyberhub.blog/cves/CVE-2026-30893", "vulnerability": "CVE-2026-30893", "author": {"login": "automation"}}, {"uuid": "c19c0b5e-7153-49cc-bffa-969b7491f516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:07:11.805977+00:00", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mms7m5dgey2r", "content": "PgBouncer 1.25.2 fixes four CVEs. Two of them (CVE-2026-6664 and CVE-2026-6665) are reachable pre-auth and crash the pooler from a single SCRAM packet.\n\nIf your pooler is behind an unfiltered LB, patch this week.\n\nwww.pgbouncer.org/2026/05/pgbo...\n\npgexperts.com", "vulnerability": "CVE-2026-6665", "author": {"login": "automation"}}, {"uuid": "0d0646aa-19d3-4ed0-9d3a-62892b1c797b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:07:11.647366+00:00", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mms7m5dgey2r", "content": "PgBouncer 1.25.2 fixes four CVEs. Two of them (CVE-2026-6664 and CVE-2026-6665) are reachable pre-auth and crash the pooler from a single SCRAM packet.\n\nIf your pooler is behind an unfiltered LB, patch this week.\n\nwww.pgbouncer.org/2026/05/pgbo...\n\npgexperts.com", "vulnerability": "CVE-2026-6664", "author": {"login": "automation"}}, {"uuid": "8fd814ac-e328-40f1-895a-cd05330b5875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:06:59.077144+00:00", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mms7lua3kk2n", "content": "nginx\u306e\u300cnjs\u300d\u30e2\u30b8\u30e5\u30fc\u30eb\u306bCVSS 9.2\u306e\u6df1\u523b\u306a\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc \u8106\u5f31\u6027 CVE-2026-8711\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "vulnerability": "CVE-2026-8711", "author": {"login": "automation"}}, {"uuid": "47158896-8a53-41a0-ad42-0daa3309d757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:39.355225+00:00", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116643596586856381", "content": "\ud83d\udea8 CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server (&lt;0.6.0) allows unauthenticated access to a mutation-capable RPC endpoint, risking full GitLab resource compromise. Upgrade to 0.6.0+ ASAP. https://radar.offseq.com/threat/cve-2026-44895-cwe-306-missing-authentication-for--bc836ac6 #OffSeq #Vuln #GitLab #CVE202644895", "vulnerability": "cve-2026-44895", "author": {"login": "automation"}}, {"uuid": "eb1c88ef-39cf-4e9c-9757-20faeece6f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:39.240457+00:00", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mms7an3cam2j", "content": "CRITICAL: CVE-2026-44895 in yoda-digital mcp-gitlab-server &lt; 0.6.0 exposes unauthenticated, mutation-capable RPC endpoints. Upgrade to 0.6.0+ now to secure GitLab access. https://radar.offseq.com/threat/cve-2026-44895-cwe-306-missing-authentication-for--bc836ac6 #OffSeq #Vulnerability #GitLab", "vulnerability": "cve-2026-44895", "author": {"login": "automation"}}, {"uuid": "3407dad6-33d3-4ac7-bc36-581bea9a9e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-7954", "author": {"login": "automation"}}, {"uuid": "32f118f4-a400-4ef9-9ec0-dee75281ab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-42640", "author": {"login": "automation"}}, {"uuid": "62e42693-6db1-4248-8dcd-8e1546fd12e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-9805", "author": {"login": "automation"}}, {"uuid": "444e2354-9137-4c6f-9023-dac630d0293a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2001-0537", "author": {"login": "automation"}}, {"uuid": "9dd7d5c7-813b-453a-8f5c-6319eacc5c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-1389", "author": {"login": "automation"}}, {"uuid": "84067ff5-be78-4a3c-86fa-30d1330492be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-28771", "author": {"login": "automation"}}, {"uuid": "cdbb2e1c-cbc5-41a9-b4ff-16175976b507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-46805", "author": {"login": "automation"}}, {"uuid": "0399982a-fbc4-4d27-b3f3-1d8500b739f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-53118", "author": {"login": "automation"}}, {"uuid": "fb3f5319-9fcc-478a-864a-069ebdc1df46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-48455", "author": {"login": "automation"}}, {"uuid": "1410c684-675e-4eb8-941e-7b78c2738c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-26084", "author": {"login": "automation"}}, {"uuid": "6d2b3f7f-7000-4f64-9a8f-85981d3820b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-53704", "author": {"login": "automation"}}, {"uuid": "abbc78f9-ec1e-41a0-9f00-50317cbea0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2020-5902", "author": {"login": "automation"}}, {"uuid": "ad44d708-1f90-4c6c-831b-a309cf9892f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-34473", "author": {"login": "automation"}}, {"uuid": "90d9c0da-bdcb-4409-a701-2bba0dff7f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-22986", "author": {"login": "automation"}}, {"uuid": "807fdeb3-faf9-4fed-b8ed-0df4f09f322e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-40438", "author": {"login": "automation"}}, {"uuid": "44a31f6b-3343-490f-8cdc-9a31092c2794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-22515", "author": {"login": "automation"}}, {"uuid": "d55ebc15-fda3-48e1-a06b-84a02a268106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-26138", "author": {"login": "automation"}}, {"uuid": "307f221e-d4c5-414a-8d1d-ecb847e3c39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-3721", "author": {"login": "automation"}}, {"uuid": "b68d3a1a-9a8b-4537-aaa6-93c697f73ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-7600", "author": {"login": "automation"}}, {"uuid": "972d991c-2651-4741-9b00-cb5921c08d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-0012", "author": {"login": "automation"}}, {"uuid": "505f5672-84ec-4b60-a7f2-5dd49cbd2a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-0108", "author": {"login": "automation"}}, {"uuid": "8e480f3a-a643-499a-a33a-7c42a7830f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-29059", "author": {"login": "automation"}}, {"uuid": "e00236b7-f2a4-4bec-8294-efd429f223b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-23897", "author": {"login": "automation"}}, {"uuid": "1c00d2b9-042a-43fe-bb58-a8b554368c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-36260", "author": {"login": "automation"}}, {"uuid": "64ecf836-40bb-4237-b4d6-c49f0f7e9d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-9205", "author": {"login": "automation"}}, {"uuid": "ede188d0-2b2a-4321-8e94-39ef6b7ca146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-24816", "author": {"login": "automation"}}, {"uuid": "ed394af0-ad62-4c9f-98eb-881b363157af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-18368", "author": {"login": "automation"}}, {"uuid": "2b5f45f5-9a0c-4802-a660-34e9c701cfad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-1709", "author": {"login": "automation"}}, {"uuid": "81790c6a-e2f4-4973-a5a4-e6d4f5dcdcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-7927", "author": {"login": "automation"}}, {"uuid": "c9efe0eb-511a-4a91-b82b-d504a156d4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-35078", "author": {"login": "automation"}}, {"uuid": "218a4b86-d897-4d29-b017-9285cbf85e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2013-7091", "author": {"login": "automation"}}, {"uuid": "4d249109-fb51-424d-87f7-2f0f21370661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-0204", "author": {"login": "automation"}}, {"uuid": "fe925a4d-bf72-4d6c-88ef-5f147ab2a586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-4966", "author": {"login": "automation"}}, {"uuid": "f3fe291b-c488-4cc0-be27-1a399ffaf881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-35081", "author": {"login": "automation"}}, {"uuid": "e5bd93ec-512f-4cdb-b177-463efe6553d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-28995", "author": {"login": "automation"}}, {"uuid": "3ee5bae2-02b8-44a1-8926-583adb41c144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2020-10173", "author": {"login": "automation"}}, {"uuid": "c70ec4e4-7c71-4aa5-bf40-5aaece36d2ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-22527", "author": {"login": "automation"}}, {"uuid": "2433996b-31a9-4be1-9f45-7ee8d8ba6aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-8963", "author": {"login": "automation"}}, {"uuid": "611c280d-8834-4b38-b0aa-3f83426285a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-24488", "author": {"login": "automation"}}, {"uuid": "3b267ed1-7bc2-4ff1-8d41-0f6feb4e6cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-21887", "author": {"login": "automation"}}, {"uuid": "81adb3a3-8ea1-41e9-addb-fda8b1b30c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-40684", "author": {"login": "automation"}}, {"uuid": "effa837c-3a69-4fbf-b6fa-e0b25dfa2b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-26134", "author": {"login": "automation"}}, {"uuid": "06f0fbf9-4b14-4cc0-9cb5-7517c7e63db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-37042", "author": {"login": "automation"}}, {"uuid": "156d0e5b-dad0-422d-b7e0-26f833cdf892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2019-11510", "author": {"login": "automation"}}, {"uuid": "ce62ac8b-0e91-4d03-9b66-1e780e2c26c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-29441", "author": {"login": "automation"}}, {"uuid": "5f0cbb49-f58d-4110-b77f-9317bec49ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-55182", "author": {"login": "automation"}}, {"uuid": "82a777da-a92f-43f9-a2ef-85db9eff5fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-44228", "author": {"login": "automation"}}, {"uuid": "ae8c3649-dcde-4ad8-bdff-8a1db00885a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2019-1653", "author": {"login": "automation"}}, {"uuid": "e6b12cac-bfc0-4f02-bed3-eaca668a82bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-0656", "author": {"login": "automation"}}, {"uuid": "daea4499-b1cd-46b0-aaa4-890ebb18d9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-13379", "author": {"login": "automation"}}, {"uuid": "b6bbfa34-4674-4261-a651-b627050cc6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-22274", "author": {"login": "automation"}}, {"uuid": "0f1cedea-e84c-4369-b911-9e61c9abf174", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2019-12780", "author": {"login": "automation"}}, {"uuid": "185fd14a-9939-4701-ae7e-23bc9fb02f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-34043", "author": {"login": "automation"}}, {"uuid": "2fa16b69-b79f-48dd-a0db-a760d6987bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2016-6277", "author": {"login": "automation"}}, {"uuid": "2e9d3ccd-dfa1-40e1-8b06-f8fc9b090f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2020-3452", "author": {"login": "automation"}}, {"uuid": "4d8390a1-c924-4f36-b559-4f939e4575b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-34036", "author": {"login": "automation"}}, {"uuid": "a8396fc3-a0c3-46e9-8a9d-9d1c6acbb74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-20198", "author": {"login": "automation"}}, {"uuid": "29e71c7a-c70e-4be1-8222-8f067335516d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-38646", "author": {"login": "automation"}}, {"uuid": "ac3ab976-1a18-48c4-886b-94a5bae0c91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2015-2051", "author": {"login": "automation"}}, {"uuid": "49b87632-389e-4faa-ba32-566e47d6c183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2026-41940", "author": {"login": "automation"}}, {"uuid": "2c38d5e6-5290-4895-a7de-0c4eb9678fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2016-10372", "author": {"login": "automation"}}, {"uuid": "49ed25ae-5fe6-430d-9b68-4d392e75395c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-9841", "author": {"login": "automation"}}, {"uuid": "0e78dd46-6775-4686-abb4-dfdd659dda9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-12847", "author": {"login": "automation"}}, {"uuid": "b838accd-55ff-4cec-a0fa-6a86ee110e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-45195", "author": {"login": "automation"}}, {"uuid": "d32b1b68-bea4-407d-a5dd-b118fa77847d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-39713", "author": {"login": "automation"}}, {"uuid": "15e59e4f-7804-441f-9918-9cba635d25f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-42793", "author": {"login": "automation"}}, {"uuid": "6231d05d-1318-49d4-a406-c76c510acab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2016-1555", "author": {"login": "automation"}}, {"uuid": "7fc3120e-404f-422e-b72d-013de06b90de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-29973", "author": {"login": "automation"}}, {"uuid": "b5faa67a-2bee-408d-a422-5632c6adc758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-12847", "author": {"login": "automation"}}, {"uuid": "767e5e7c-9a9d-4a87-b7a0-63ffc0112d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-42344", "author": {"login": "automation"}}, {"uuid": "840b10a1-bbf1-42cf-8dd7-a4a228d1b31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-28255", "author": {"login": "automation"}}, {"uuid": "6b310835-6288-477c-a7e7-b019bd2b0ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2020-8191", "author": {"login": "automation"}}, {"uuid": "c2fced0c-5f99-4d1f-9f3a-0343efb63ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-37032", "author": {"login": "automation"}}, {"uuid": "9decece9-34cb-4052-94fb-a6bf316ab02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-5830", "author": {"login": "automation"}}, {"uuid": "bc66f69e-096e-49ba-8ed0-7a86a8988f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2020-5847", "author": {"login": "automation"}}, {"uuid": "e7889451-71fd-4cad-a7e8-d12779aa3e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2026-41940", "author": {"login": "automation"}}, {"uuid": "88e09353-c6d2-46ea-ae75-38625135ade9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-8752", "author": {"login": "automation"}}, {"uuid": "86c8c5dc-5e8f-4f57-b541-ffd8326735cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2020-9054", "author": {"login": "automation"}}, {"uuid": "855918d2-c72b-495f-8e00-5bc6394e8842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2015-2051", "author": {"login": "automation"}}, {"uuid": "7bf574c1-6f7d-4342-a1c1-babc88538dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-10081", "author": {"login": "automation"}}, {"uuid": "7c056e36-4f45-4b91-aa4b-b4b05f94dc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-6329", "author": {"login": "automation"}}, {"uuid": "6617ae7b-47fe-4c36-ab61-4f88ab7643fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-48766", "author": {"login": "automation"}}, {"uuid": "24785356-3de3-49ee-9870-d0c49e540fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-35219", "author": {"login": "automation"}}, {"uuid": "5e1fe084-dfb3-4d34-961b-34882666068e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-4358", "author": {"login": "automation"}}, {"uuid": "d08eb04d-a31d-4e74-9964-4647ed1b0b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-18368", "author": {"login": "automation"}}, {"uuid": "122eeac6-9364-473a-abc0-9bbc7114ecab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2020-25506", "author": {"login": "automation"}}, {"uuid": "929c76d9-652f-40cd-b66d-2d28dad192a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-5222", "author": {"login": "automation"}}, {"uuid": "84279454-5455-4860-8ed8-3cfd45d50c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-59287", "author": {"login": "automation"}}, {"uuid": "4794185d-a13f-46fb-bb16-dde91450b148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-4542", "author": {"login": "automation"}}, {"uuid": "5107b29e-ea46-4dda-809c-e0530227c0c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-6875", "author": {"login": "automation"}}, {"uuid": "82d40153-5373-4926-aff1-3b4378cd4730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-48307", "author": {"login": "automation"}}, {"uuid": "830307a7-d59f-4b47-a7db-7618caa34fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-10914", "author": {"login": "automation"}}, {"uuid": "bc0f04d9-9b50-4af1-99c5-4126db3ef3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-25852", "author": {"login": "automation"}}, {"uuid": "4114a72c-3b8b-4479-868d-be6e7d017782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-34036", "author": {"login": "automation"}}, {"uuid": "dc249853-1dc7-4f8f-99e2-10219aa1b358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-4634", "author": {"login": "automation"}}, {"uuid": "d66ccca3-cde8-40b8-ac6b-e6455648f6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-10562", "author": {"login": "automation"}}, {"uuid": "ffb85736-6fd5-46d5-b798-2b320581f26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-21893", "author": {"login": "automation"}}, {"uuid": "d918e78d-795f-4489-ab3b-63d27551ea85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-38433", "author": {"login": "automation"}}, {"uuid": "8504a052-a7a8-4790-93e9-639ca80ffa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-1698", "author": {"login": "automation"}}, {"uuid": "b4cf9eae-0a7e-41d9-bf29-a66ffb7e7b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-27956", "author": {"login": "automation"}}, {"uuid": "4e3fad45-49db-4b9f-9cba-f71be2b8bfe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-5148", "author": {"login": "automation"}}, {"uuid": "e6b4dca6-ce32-44bc-9372-8d800f1221f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-7600", "author": {"login": "automation"}}, {"uuid": "3331a101-17c6-49ad-8355-33161b7c93ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-31750", "author": {"login": "automation"}}, {"uuid": "c9fa84ce-3732-4d11-96c0-35633fe332e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-18852", "author": {"login": "automation"}}, {"uuid": "489ed98f-34ee-4006-b767-7f037ed3fa5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-43360", "author": {"login": "automation"}}, {"uuid": "0a50d4ab-3865-4e20-864b-038fbf1aac69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-50968", "author": {"login": "automation"}}, {"uuid": "44f78bc4-a926-4442-9db2-4875f29555b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-8856", "author": {"login": "automation"}}, {"uuid": "d5829d4a-c38e-41d9-9fe9-5f751470ef47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-9205", "author": {"login": "automation"}}, {"uuid": "2bb50a9f-3898-4845-85db-60d2fe018b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-24816", "author": {"login": "automation"}}, {"uuid": "bd1f884e-b85a-414c-b06a-f54a0e9bbccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-7593", "author": {"login": "automation"}}, {"uuid": "04332bee-f7b8-4ed1-9463-ee554016eed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-24919", "author": {"login": "automation"}}, {"uuid": "3772e23d-8464-4355-b330-404e32c3e2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-48248", "author": {"login": "automation"}}, {"uuid": "5c1db3f4-f7c8-4e96-a8bc-fb05343c7c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-5777", "author": {"login": "automation"}}, {"uuid": "c0175d06-a098-4109-8ce0-802813e3c1b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-26775", "author": {"login": "automation"}}, {"uuid": "e92fb456-d1c9-492c-aa31-b88ea1d2fc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2022-43939", "author": {"login": "automation"}}, {"uuid": "53cbd2ca-78ca-466c-97a1-ce54ef1c8b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-7954", "author": {"login": "automation"}}, {"uuid": "29365ffd-9fc1-4fa9-bb92-b392a37ecc43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-36380", "author": {"login": "automation"}}, {"uuid": "17581119-c517-4c24-a8f9-3ab6349715f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-36401", "author": {"login": "automation"}}, {"uuid": "25ee1a8e-b5ca-4d01-8b89-9fafc6939e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-11759", "author": {"login": "automation"}}, {"uuid": "65da29de-5cba-4531-8174-80437048be6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-26855", "author": {"login": "automation"}}, {"uuid": "1da7722a-7b16-4ef0-937e-441fd4725bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-0692", "author": {"login": "automation"}}, {"uuid": "edb322c0-9b5a-4f89-9014-23667995f00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-26084", "author": {"login": "automation"}}, {"uuid": "44edc3bf-b6d8-4aa9-9557-a8330d53ea35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-32640", "author": {"login": "automation"}}, {"uuid": "a9a63a4d-a78b-4839-9815-c29e77327b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-7921", "author": {"login": "automation"}}, {"uuid": "59e5fa07-cb2f-441b-8346-e2c7bbf768c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-22527", "author": {"login": "automation"}}, {"uuid": "7f7817c2-8779-418e-833b-bdf4d07ec411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-13161", "author": {"login": "automation"}}, {"uuid": "47118474-0d04-4cc2-8caf-a1709b2a4a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2019-19825", "author": {"login": "automation"}}, {"uuid": "0c6b8d43-2fec-4093-8e3f-01be34c18c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-20767", "author": {"login": "automation"}}, {"uuid": "3edf6110-622c-4129-97f6-819f2faaa085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2019-3396", "author": {"login": "automation"}}, {"uuid": "5c3c4de2-ec75-47ab-8d96-a68e5ec301d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-51409", "author": {"login": "automation"}}, {"uuid": "c375be33-9f49-440a-bb1d-2630f18c9526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-45878", "author": {"login": "automation"}}, {"uuid": "c2db5c72-64d6-4df3-9e59-a630a3c29c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-1000486", "author": {"login": "automation"}}, {"uuid": "0572069f-30fd-4267-8de0-ffa41927cdc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-11714", "author": {"login": "automation"}}, {"uuid": "b33ff23f-96dc-47b6-8588-beb0b636e712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-34257", "author": {"login": "automation"}}, {"uuid": "af47b818-8534-43d6-91f4-93f1574987b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2025-5777", "author": {"login": "automation"}}, {"uuid": "763ebacc-c7c3-4390-b761-eeec5eb80548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-24919", "author": {"login": "automation"}}, {"uuid": "1c68d273-5832-44d4-8ee3-95465202dc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-9995", "author": {"login": "automation"}}, {"uuid": "684da082-7390-457c-8589-056289ff10dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2023-35082", "author": {"login": "automation"}}, {"uuid": "d1f55712-2c10-40c3-9444-81c890a91707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-50603", "author": {"login": "automation"}}, {"uuid": "6c7ae113-730f-40e6-90c5-a2469033191a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-6220", "author": {"login": "automation"}}, {"uuid": "c70f402c-ef79-43c6-8698-93889058b1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-6670", "author": {"login": "automation"}}, {"uuid": "d197434f-b43b-49b2-a403-e43eb48c5461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2024-3721", "author": {"login": "automation"}}, {"uuid": "dcf8cfde-99f9-4e53-8710-34fd23f4c823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2017-17215", "author": {"login": "automation"}}, {"uuid": "ce8a9de4-cb87-485c-b0df-80e8ebbda33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2018-10562", "author": {"login": "automation"}}, {"uuid": "ba33c8b1-22bc-400b-8731-30351cb566a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2014-8361", "author": {"login": "automation"}}, {"uuid": "c91eff47-33d3-4ef1-9b65-b93181079963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-27T00:00:00+00:00", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "vulnerability": "CVE-2021-42013", "author": {"login": "automation"}}, {"uuid": "63a07bed-d959-4c6d-91eb-8d5f39bc8e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:48:40.135462+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mms6l7twak2g", "content": "[SECURITY ADVISORY] CVE-2026-34472 - ZTE ZXHN H188A V6 Authentication Bypass via Pre-Login Wizard\n\nPosted by m.nageh on May 25-----BEGIN SECURITY ADVISORY----- \n\nAdvisory ID: MONX-2026-002 \nCVE ID: CVE-2026-34472 \nTitle: ZTE ZXHN H188A V6 - Authentication Bypass via Pre-Login \nWiz\u2026\n#hackernews #news", "vulnerability": "CVE-2026-34472", "author": {"login": "automation"}}, {"uuid": "73d44735-336d-4a6e-92d4-597ed3fbe577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:27:43.366858+00:00", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mms5fr5sbs2g", "content": "[SECURITY ADVISORY] CVE-2026-34473 - Unauthenticated DoS in 17+ ZTE Router Models (140K+ Devices)\n\nPosted by m.nageh on May 25-----BEGIN SECURITY ADVISORY----- \n\nAdvisory ID: MONX-2026-001 \nCVE ID: CVE-2026-34473 \nTitle: Unauthenticated Denial of Service via Oversized POST Body \ni\u2026\n#hackernews #news", "vulnerability": "CVE-2026-34473", "author": {"login": "automation"}}, {"uuid": "3c0ecfda-711d-4835-a4f2-58e5859e879e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:23:15.413282+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms55s5jkp2v", "content": "CVE-2026-9573 - iSourcecode Student Transcript Processing System SQL Injection Vulnerability\nCVE ID : CVE-2026-9573\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. T...", "vulnerability": "CVE-2026-9573", "author": {"login": "automation"}}, {"uuid": "8cebda0b-95a9-47d2-97eb-48be0001c0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:18:15.029070+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms4utq4xh2p", "content": "CVE-2026-9574 - iSourcecode Student Transcript Processing System SQL Injection\nCVE ID : CVE-2026-9574\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability aff...", "vulnerability": "CVE-2026-9574", "author": {"login": "automation"}}, {"uuid": "7cf68f99-636b-494f-b67c-cfeb67b55d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:13:14.703083+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms4lvcrww2p", "content": "CVE-2026-9575 - iSourcecode Student Transcript Processing System SQL Injection\nCVE ID : CVE-2026-9575\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue af...", "vulnerability": "CVE-2026-9575", "author": {"login": "automation"}}, {"uuid": "e4127d36-b726-4b79-8c9a-b17aa0e6edda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:08:14.453196+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms4cwvm6l2e", "content": "CVE-2026-9568 - ThingsBoard YAML provision getGatewayDockerComposeFile code injection\nCVE ID : CVE-2026-9568\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A weakness has been identified in ThingsBoard up to 4.3.1.1. Affected by this vulnerabi...", "vulnerability": "CVE-2026-9568", "author": {"login": "automation"}}, {"uuid": "086520d1-340c-4f4a-aaa8-c4f1b63165eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:03:13.907287+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms3zyi5p52h", "content": "CVE-2026-44833 - Snipe-IT: Open redirect vulnerability\nCVE ID : CVE-2026-44833\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Snipe-IT is an IT asset/license management system. Prior to 8.4.1, an open redirect vulnerability in Snipe-IT allows attacker...", "vulnerability": "CVE-2026-44833", "author": {"login": "automation"}}, {"uuid": "0863e63d-7550-4147-885b-6820b85e2301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:03:10.967216+00:00", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mms3zvjdu42r", "content": "CVE-2025-1782 - Critical RCE in HylaFAX. Unpatched. CVSS 9.9. Authenticated users can exploit file inclusion for full server compromise. Isolate or disable immediately. #CVE #HylaFAX #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-1782/", "vulnerability": "CVE-2025-1782", "author": {"login": "automation"}}, {"uuid": "ba18d81f-ca0b-4a3d-8948-19f200f76165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:02:06.777854+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xxz5sd2z", "content": "\ud83d\udfe0 CVE-2026-42013 - High (8.2)\n\nA flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42013/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-42013", "author": {"login": "automation"}}, {"uuid": "e505a543-1378-474d-b077-ef5263d7065d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:01:59.412113+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xqtamf2e", "content": "\ud83d\udfe0 CVE-2026-45574 - High (8.1)\n\nepa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45574/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45574", "author": {"login": "automation"}}, {"uuid": "05945fc7-5f0b-4cb5-a405-934c12a662e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:01:52.196610+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3xjqx762w", "content": "\ud83d\udfe0 CVE-2026-45298 - High (8.6)\n\nDozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deplo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-45298/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-45298", "author": {"login": "automation"}}, {"uuid": "d79e3ac5-d4e1-4250-9935-dbb932000c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:00:50.953167+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3vppgf52q", "content": "\ud83d\udfe0 CVE-2026-44966 - High (8.3)\n\nVelocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and e...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44966/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44966", "author": {"login": "automation"}}, {"uuid": "aa29ddca-858a-4094-a730-da24423263ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:00:43.634418+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3violnv2e", "content": "\ud83d\udfe0 CVE-2026-44905 - High (7.5)\n\nVanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44905/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44905", "author": {"login": "automation"}}, {"uuid": "0d11e234-976a-49fc-b206-27256eaf9c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T23:00:36.978062+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mms3vce4zi2k", "content": "\ud83d\udfe0 CVE-2026-5260 - High (8.2)\n\nA flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-5260/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-5260", "author": {"login": "automation"}}, {"uuid": "67fc5ef7-a523-4cb4-bbdd-f5fcf92eb8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:58:14.148495+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms3qzzaw52t", "content": "CVE-2026-44832 - Snipe-IT: Privilege Escalation via API Permissions Assignment\nCVE ID : CVE-2026-44832\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Snipe-IT is an IT asset/license management system. Prior to 8.4.1, aAn authenticated user with only u...", "vulnerability": "CVE-2026-44832", "author": {"login": "automation"}}, {"uuid": "38a2906b-7f05-4508-af4f-efae83969421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:53:56.143416+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms3jehql42k", "content": "CVE-2026-27331 - WordPress WpTravelly plugin\nCVE ID : CVE-2026-27331\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Leve...", "vulnerability": "CVE-2026-27331", "author": {"login": "automation"}}, {"uuid": "10a8a379-07ca-4cae-a5c9-da5c052b5d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:50:10.921425+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms3cnkctx2e", "content": "CVE-2026-8890 - code100x Mobile API Authentication Bypass via Header Spoofing\nCVE ID : CVE-2026-8890\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthen...", "vulnerability": "CVE-2026-8890", "author": {"login": "automation"}}, {"uuid": "4cbd7fde-a3e5-470e-bbb5-7cd9013785eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:46:50.379643+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms34oggoi2o", "content": "CVE-2026-9572 - GPAC MP4Box media.c Media_GetSample memory leak\nCVE ID : CVE-2026-9572\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_...", "vulnerability": "CVE-2026-9572", "author": {"login": "automation"}}, {"uuid": "200b8aa2-31cb-4d28-afe5-88c41e33b3c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:43:51.263542+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2xceqzy2o", "content": "CVE-2026-4051 - IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution\nCVE ID : CVE-2026-4051\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : IBM Engineering Lifecycle Management 7.0.3 ( t...", "vulnerability": "CVE-2026-4051", "author": {"login": "automation"}}, {"uuid": "4ead8b05-225e-4823-a54c-ea48ea7bb835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:41:06.589368+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2sermvv2k", "content": "CVE-2026-24520 - WordPress Tiktok Feed plugin\nCVE ID : CVE-2026-24520\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels.\n\n...", "vulnerability": "CVE-2026-24520", "author": {"login": "automation"}}, {"uuid": "4189c2e6-d61a-404d-9653-70852dbe376d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:38:34.400678+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2nvekgm2n", "content": "CVE-2026-44831 - Snipe-IT: XSS vulnerability in component notes\nCVE ID : CVE-2026-44831\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacte...", "vulnerability": "CVE-2026-44831", "author": {"login": "automation"}}, {"uuid": "a8b8bbf6-51d5-4f28-a428-adeeb48824bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:36:15.423732+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2jqv7k72e", "content": "CVE-2026-3660 - IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass\nCVE ID : CVE-2026-3660\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : IBM Engineering Lifecycle Management 7.0.3 ( through ) Interim ...", "vulnerability": "CVE-2026-3660", "author": {"login": "automation"}}, {"uuid": "30881bc4-1062-4136-ad95-47f99a3307fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:36:01.637472+00:00", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mms2jdkrgm2m", "content": "CVE-2026-6664: integer overflow in PgBouncer SCRAM packet parsing. Pre-authentication. Any TCP connection can crash the pooler. CVSS 7.5.\n\nnvd.nist.gov/vuln/detail/...\n\nIf your pooler tier quietly goes years between patches, we can help with that. \n\npgexperts.com", "vulnerability": "CVE-2026-6664", "author": {"login": "automation"}}, {"uuid": "027cd0ff-0513-4803-87c9-290fbf8dff4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:34:06.715155+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2fvvfpe2h", "content": "CVE-2026-48689 - FastNetMon Heap-Based Buffer Overflow Vulnerability\nCVE ID : CVE-2026-48689\n \n Published : May 26, 2026, 7:16 p.m. | 1\u00a0hour, 15\u00a0minutes ago\n \n Description : FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dyn...", "vulnerability": "CVE-2026-48689", "author": {"login": "automation"}}, {"uuid": "c9a15cc0-64d9-41e5-9f8f-65ef22766146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:32:06.858792+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms2cbsmp42t", "content": "CVE-2026-25444 - WordPress WpBookingly plugin\nCVE ID : CVE-2026-25444\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Le...", "vulnerability": "CVE-2026-25444", "author": {"login": "automation"}}, {"uuid": "15f679a8-ff4e-4922-b745-5fa1b6479de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:30:31.333932+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms26w6awm2h", "content": "CVE-2026-44214 - eventsource-encoder: SSE event injection via unsanitized event and id fields\nCVE ID : CVE-2026-44214\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : eventsource-encoder encodes events as well-formed EventSource/Server Sent Event (SSE) ...", "vulnerability": "CVE-2026-44214", "author": {"login": "automation"}}, {"uuid": "71cd282c-6fe4-4334-8c6c-6b65905ff10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:28:25.609984+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mms23qt5qx2k", "content": "CVE-2025-68709 - SailingLab AppLock JavaScript Injection Vulnerability\nCVE ID : CVE-2025-68709\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary Jav...", "vulnerability": "CVE-2025-68709", "author": {"login": "automation"}}, {"uuid": "ff497640-1dd7-41d8-b13b-5e2f7f310e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:26:45.376429+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrzyr4tzc2e", "content": "CVE-2026-8453 - Apache HTTP Server Cross-Site Request Forgery\nCVE ID : CVE-2026-8453\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All ...", "vulnerability": "CVE-2026-8453", "author": {"login": "automation"}}, {"uuid": "093a4ad2-6f60-4129-9d84-68ac8005563c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:25:10.195161+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrzvwhgpz2i", "content": "CVE-2026-25426 - WordPress Taxi Booking Manager for WooCommerce plugin\nCVE ID : CVE-2026-25426\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting...", "vulnerability": "CVE-2026-25426", "author": {"login": "automation"}}, {"uuid": "ea3f1183-aa73-4e75-bdb3-3d883215729a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:23:39.923260+00:00", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmrztac7fc2r", "content": "CVE-2025-68710 - Easyelife App Lock Fingerprinting Bypass Vulnerability\nCVE ID : CVE-2025-68710\n \n Published : May 26, 2026, 8:16 p.m. | 15\u00a0minutes ago\n \n Description : Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local a...", "vulnerability": "CVE-2025-68710", "author": {"login": "automation"}}, {"uuid": "42426cb5-050e-4157-a34e-2e56b64dff77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:16:47.403252+00:00", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mmrzgshnyk2n", "content": "\u3010\u8981\u8b66\u6212\u30117-Zip\u306b\u30d2\u30fc\u30d7\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u30a2\u53ef\u80fd\u306a\u5371\u967a\u306a\u8106\u5f31\u6027-CVE-2026-48095\n\n7-Zip\u306f\u81ea\u52d5\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306f\u3042\u308a\u307e\u305b\u3093\u3002\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "vulnerability": "CVE-2026-48095", "author": {"login": "automation"}}, {"uuid": "cf156170-5866-4ccf-bed7-4bead7ff2a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:15:19.315920+00:00", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmrzeclokg26", "content": "\ud83d\udd34 CVE-2026-9642 - Critical (9.8)\n\nThere is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Databa...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-9642/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2025-62582", "author": {"login": "automation"}}, {"uuid": "af33b2a2-9171-4172-9d9a-e5ca5b2100d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:15:19.160824+00:00", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mmrzeclokg26", "content": "\ud83d\udd34 CVE-2026-9642 - Critical (9.8)\n\nThere is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Databa...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-9642/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9642", "author": {"login": "automation"}}, {"uuid": "0d47d335-77f9-4c33-b3d3-2ec797c20a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:08:23.293861+00:00", "type": "seen", "source": "https://bsky.app/profile/agentwyre.ai/post/3mmryxw33pt2s", "content": "\ud83d\udd34 BadHost in Starlette puts FastAPI, vLLM, LiteLLM, and MCP servers at risk of auth bypass\n\nA newly disclosed Starlette flaw, CVE-2026-48710,...\n\nhttps://arstechnica.com/information-technology/2026/05/millions-of-ai-agents-imperiled-by-critical-vulnerability-in-open-source-package/\n\n#AI #AgentWyre", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "067d1cc4-35c5-4b9c-9a7d-e99d9618d9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:08:05.000859+00:00", "type": "seen", "source": "https://bsky.app/profile/wordfenceofficial.bsky.social/post/3mmryxc5u7s2i", "content": "Palo Alto PAN-OS Zero-Day Exploited | Wordfence Security News Clip | May 11, 2026\n\nCVE-2026-0300 is a PAN-OS buffer overflow letting unauthenticated attackers execute code as root on PA and VM series firewalls.\n\nwww.youtube.com/shorts/lx146...", "vulnerability": "CVE-2026-0300", "author": {"login": "automation"}}, {"uuid": "4da40b61-c388-4313-a685-36f65829b9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:07:07.785533+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmryvo4x4r2s", "content": "\ud83d\udccc CVE-2026-8834 - IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit th... https://www.cyberhub.blog/cves/CVE-2026-8834", "vulnerability": "CVE-2026-8834", "author": {"login": "automation"}}, {"uuid": "022b899a-ceb8-42a6-ba41-2f2b45069539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:05:55.119599+00:00", "type": "seen", "source": "https://bsky.app/profile/wordfenceofficial.bsky.social/post/3mmryth43gk2i", "content": "Palo Alto PAN-OS Zero-Day Exploited in Wild | Wordfence Security News Clip | May 11, 2026\n\nCVE-2026-0300 is a buffer overflow in PAN-OS allowing unauthenticated root code execution on PA and VM series firewalls.\n\nwww.youtube.com/watch?v=c-iG...", "vulnerability": "CVE-2026-0300", "author": {"login": "automation"}}, {"uuid": "18e7cd9d-ac4e-4601-b5be-8bf0e765c514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:00:55.367013+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmrykk5dpz2z", "content": "\ud83d\udfe0 CVE-2026-44843 - High (8.2)\n\nLangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-44843/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-44843", "author": {"login": "automation"}}, {"uuid": "4d70df01-e968-4fd1-9f1b-31c3a7224285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:00:48.044796+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmrykc73f22w", "content": "\ud83d\udfe0 CVE-2026-8676 - High (8.8)\n\nAn attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8676/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-8676", "author": {"login": "automation"}}, {"uuid": "6b076653-43c4-4835-866f-48157422d896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:00:47.036511+00:00", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mmrykd77ip26", "content": "\ud83d\udea8 EUVD-2026-31970\n\ud83d\udcca 9.8/10\n\ud83c\udfe2 Delta Electronics\n\n\ud83d\udcdd There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access) \n\nAn unauthenticated remote attacker...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31970\n\n#cybersecurity #infosec #cve #euvd", "vulnerability": "CVE-2025-62582", "author": {"login": "automation"}}, {"uuid": "a4e9d2fd-4c85-49c2-8ab6-9a66faac98fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:00:38.960033+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmryk2eogi2k", "content": "\ud83d\udd34 CVE-2026-9642 - Critical (9.8)\n\nThere is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Databa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9642/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2025-62582", "author": {"login": "automation"}}, {"uuid": "d66d91b6-509c-4bf4-bef6-c9555006a56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:00:38.802236+00:00", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmryk2eogi2k", "content": "\ud83d\udd34 CVE-2026-9642 - Critical (9.8)\n\nThere is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Databa...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-9642/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "vulnerability": "CVE-2026-9642", "author": {"login": "automation"}}, {"uuid": "6112ceae-6368-4b70-915a-a547c6b5b78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T22:00:27.686846+00:00", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmryjq4to32s", "content": "Mandiant says attackers used CVE-2026-5426 in KnowledgeDeliver LMS as a zero-day to deploy Godzilla web shells, abuse reused ASP.NET machine keys, and trigger Cobalt Strike via ViewState deserialization. #KnowledgeDeliver #Mandiant #CobaltStrike", "vulnerability": "CVE-2026-5426", "author": {"login": "automation"}}, {"uuid": "be78aeb8-df07-4a16-89b0-1a1268b08130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:44:38.801795+00:00", "type": "seen", "source": "https://bsky.app/profile/sleepydogtsjp.bsky.social/post/3mmrxnfkjvk2u", "content": "Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions\nthehackernews.com/2026/05/micr...", "vulnerability": "CVE-2026-45659", "author": {"login": "automation"}}, {"uuid": "7239a47f-f45d-4814-b4ee-cd00db4755f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:17:15.415826+00:00", "type": "seen", "source": "https://bsky.app/profile/hot.hn/post/3mmrw4iec232h", "content": "\ud83d\udcf0 CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude\n\n\ud83d\udd17 https://support.apple.com/en-us/127115\n\n\ud83d\udcac Discuss on HN", "vulnerability": "CVE-2026-28952", "author": {"login": "automation"}}, {"uuid": "6071d501-cc13-4d8e-b6d9-d22e79119a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:12:04.800829+00:00", "type": "seen", "source": "https://bsky.app/profile/humanghostemoji.bsky.social/post/3mmrvt6536k2a", "content": "Millions of AI agents are exposed due to the \u201cBadHost\u201d vulnerability (CVE-2026-48710) in Starlette, used by FastAPI and vLLM. Versions prior to 1.0.1 allow trivial HTTP Host header exploits.\narstechnica.com/information-...", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "58252923-febb-418f-8929-01816e7bb915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:09:30.088880+00:00", "type": "seen", "source": "https://bsky.app/profile/aibearnews.bsky.social/post/3mmrvomkxuy2q", "content": "\ud83d\udea8 Una falla critica mette a rischio milioni di AI agenti\n\nCVE-2026-48710 colpisce Starlette, base di FastAPI (325M download a settimana).\nUn carattere ruba credenziali da MCP e LiteLLM.\nAggiorna a Starlette 1.0.1\n\nFonte: arstechnica.com\n\nSegui\n\n#IA #Cybersecurity\n \ud83d\udd12 \ud83d\udc0d \ud83d\udce2", "vulnerability": "CVE-2026-48710", "author": {"login": "automation"}}, {"uuid": "a367f79a-c8ae-4785-92d1-d6fdabea7630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:07:07.126049+00:00", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmrvke7acb25", "content": "\ud83d\udccc CVE-2026-8855 - IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client aut... https://www.cyberhub.blog/cves/CVE-2026-8855", "vulnerability": "CVE-2026-8855", "author": {"login": "automation"}}, {"uuid": "b45edffc-5cee-4e6b-bc2f-acf2708c6fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:06:55.103383+00:00", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmrvjyxdaj2s", "content": "\ud83d\uded1 CVE-2025-34291\n\nCVSS 9.4 / EPSS 30% / KEV\nTL;DR: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and\u2026\nhttps://cvesentinel.com/report/CVE-2025-34291?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "vulnerability": "CVE-2025-34291", "author": {"login": "automation"}}, {"uuid": "344c40e6-3340-4263-85c2-67ffb7a2a27d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:06:42.429327+00:00", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mmrvjmqiyx2u", "content": "\ud83d\uded1 CVE-2025-34291\n\nCVSS 9.4 / EPSS 30% / KEV\nTL;DR: Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and\u2026\nhttps://cvesentinel.com/report/CVE-2025-34291?utm_source=bluesky&amp;utm_medium=social&amp;utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "vulnerability": "CVE-2025-34291", "author": {"login": "automation"}}, {"uuid": "171dcea2-4928-493a-abe5-e344772240df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "creation_timestamp": "2026-05-26T21:05:06.537839+00:00", "type": "seen", "source": "https://bsky.app/profile/knaepp.bsky.social/post/3mmrvgqw2dx26", "content": "PH71342:MULTIPLE VULNERABILITIES IN THE WEBSPHERE WEBSERVER PLUG-IN (CVE-2026-8633,CVE-2026-8620) https://tinyurl.com/24vretzo", "vulnerability": "CVE-2026-8620", "author": {"login": "automation"}}]}
