CyberIntel ⬡ News
★ Saved ◆ Cyber Reads

// Vulnerabilities & CVEs
Intel Feed

cyberintel.kalymoon.com  ·  6513 articles  ·  updated every 4 hours · grows forever

6513Total
4072Full Text
May 26, 2026Latest
◈ Women in Cyber ◉ Threat Intelligence ◎ How-To & Tutorials ⬡ Vulnerabilities & CVEs 🔍 Digital Forensics ◍ Incident Response & DFIR ◆ Security Tools & Reviews ◇ Industry News & Leadership ✉ Email Security 🛡 Active Threats ⚠ Critical CVEs ◐ Insider Threat & DLP ◌ Quantum Computing ◬ AI & Machine Learning
🔥 Trending Topics · Last 48h
⬡ Vulnerabilities & CVEs Mar 30, 2026
CVE-2026-21715 | Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1 File Existence fs.realpathSync.native information disclosure

A vulnerability was found in Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1 and classified as problematic . This vulnerability affects the function fs.realpathSync.native of the component File Existence…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 30, 2026
Massive Spike in Attacks Exploiting Ivanti EPMM Systems 0-day Vulnerability - CyberSecurityNews

Massive Spike in Attacks Exploiting Ivanti EPMM Systems 0-day Vulnerability CyberSecurityNews

CyberSecurityNews Read →
⬡ Vulnerabilities & CVEs Mar 30, 2026
Beyond CVE China’s Dual Vulnerability Databases Reveal a Different Disclosure Timeline - CyberSecurityNews

Beyond CVE China’s Dual Vulnerability Databases Reveal a Different Disclosure Timeline CyberSecurityNews

CyberSecurityNews Read →
⬡ Vulnerabilities & CVEs Mar 30, 2026
Microsoft Desktop Window Manager Zero-Day Vulnerability Exploited in the Wild - cyberpress.org

Microsoft Desktop Window Manager Zero-Day Vulnerability Exploited in the Wild cyberpress.org

cyberpress.org Read →
⬡ Vulnerabilities & CVEs Mar 30, 2026
Hackers Actively Exploit Microsoft Office Zero-Day to Deliver Malware - cyberpress.org

Hackers Actively Exploit Microsoft Office Zero-Day to Deliver Malware cyberpress.org

cyberpress.org Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-33575 | OpenClaw up to 2026.3.11 /pair insufficiently protected credentials (GHSA-7h7g-x2px-94hj / EUVD-2026-17029)

A vulnerability was found in OpenClaw up to 2026.3.11 . It has been declared as critical . Affected is an unknown function of the file /pair . Such manipulation leads to insufficiently protected crede…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-33574 | OpenClaw up to 2026.3.7 toctou (GHSA-vhwf-4x96-vqx2 / EUVD-2026-17027)

A vulnerability was found in OpenClaw up to 2026.3.7 . It has been rated as problematic . Affected by this vulnerability is an unknown functionality. Performing a manipulation results in time-of-check…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-34005 | Xiongmai AHB7008T-MH-V2 /NBD7024H-P 4.03.R11 DVRIP Protocol system Hostname os command injection

A vulnerability categorized as critical has been discovered in Xiongmai AHB7008T-MH-V2 and NBD7024H-P 4.03.R11 . Affected by this issue is the function system of the component DVRIP Protocol Handler .…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-5101 | Totolink A3300R 17.0.0cu.557_b20221024 Parameter /cgi-bin/cstecgi.cgi setLanCfg lanIp command injection

A vulnerability identified as critical has been detected in Totolink A3300R 17.0.0cu.557_b20221024 . This affects the function setLanCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Han…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-5102 | Totolink A3300R 17.0.0cu.557_b20221024 Parameter /cgi-bin/cstecgi.cgi setSmartQosCfg qos_up_bw command injection

A vulnerability labeled as critical has been found in Totolink A3300R 17.0.0cu.557_b20221024 . This vulnerability affects the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi of the component …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-5103 | Totolink A3300R 17.0.0cu.557_b20221024 /cgi-bin/cstecgi.cgi setUPnPCfg enable command injection

A vulnerability marked as critical has been reported in Totolink A3300R 17.0.0cu.557_b20221024 . This issue affects the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi . This manipulation of the …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-5104 | Totolink A3300R 17.0.0cu.557_b20221024 /cgi-bin/cstecgi.cgi setStaticRoute ip command injection

A vulnerability described as critical has been identified in Totolink A3300R 17.0.0cu.557_b20221024 . Impacted is the function setStaticRoute of the file /cgi-bin/cstecgi.cgi . Such manipulation of th…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-5105 | Totolink A3300R 17.0.0cu.557_b20221024 Parameter /cgi-bin/cstecgi.cgi setVpnPassCfg pptpPassThru command injection

A vulnerability classified as critical has been found in Totolink A3300R 17.0.0cu.557_b20221024 . The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component P…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-5106 | code-projects Exam Form Submission 1.0 /admin/update_fst.php sname cross site scripting

A vulnerability classified as problematic was found in code-projects Exam Form Submission 1.0 . The impacted element is an unknown function of the file /admin/update_fst.php . Executing a manipulation…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-5107 | FRRouting FRR up to 10.5.1 EVPN Type-2 Route bgpd/bgp_evpn.c process_type2_route access control (ID 21098)

A vulnerability, which was classified as critical , has been found in FRRouting FRR up to 10.5.1 . This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-23400 | Linux Kernel up to 6.18.18/6.19.8/7.0-rc3 set_notification_done deadlock

A vulnerability, which was classified as critical , was found in Linux Kernel up to 6.18.18/6.19.8/7.0-rc3 . This vulnerability affects the function set_notification_done . Such manipulation leads to …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-32922 | OpenClaw up to 2026.3.10 device.token.rotate privileges assignment (GHSA-4jpw-hj22-2xmc)

A vulnerability has been found in OpenClaw up to 2026.3.10 and classified as critical . This issue affects the function device.token.rotate . Performing a manipulation results in incorrect privilege a…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-32923 | OpenClaw up to 2026.3.10 authorization (GHSA-9vvh-2768-c8vp)

A vulnerability was found in OpenClaw up to 2026.3.10 and classified as critical . Impacted is an unknown function. Executing a manipulation can lead to incorrect authorization. This vulnerability is …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-32924 | OpenClaw up to 2026.3.11 chat_type authorization (GHSA-m69h-jm2f-2pv8)

A vulnerability was found in OpenClaw up to 2026.3.11 . It has been classified as critical . The affected element is an unknown function. The manipulation of the argument chat_type leads to incorrect …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-32972 | OpenClaw up to 2026.3.10 CDP Endpoint authorization (GHSA-vmhq-cqm9-6p7q)

A vulnerability was found in OpenClaw up to 2026.3.10 . It has been declared as problematic . The impacted element is an unknown function of the component CDP Endpoint . The manipulation results in in…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-32973 | OpenClaw up to 2026.3.10 permissive regular expression (GHSA-f8r2-vg7x-gh8m)

A vulnerability was found in OpenClaw up to 2026.3.10 . It has been rated as critical . This affects an unknown function. This manipulation causes permissive regular expression. The identification of …

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-33573 | OpenClaw up to 2026.3.10 spawnedBy/workspaceDir exposure of resource (GHSA-2rqg-gjgv-84jm)

A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.3.10 . This impacts an unknown function. Such manipulation of the argument spawnedBy/workspaceDir leads to exposure o…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-32919 | OpenClaw up to 2026.3.10 authorization (GHSA-jf6w-m8jw-jfxc)

A vulnerability identified as problematic has been detected in OpenClaw up to 2026.3.10 . Affected is an unknown function. Performing a manipulation results in incorrect authorization. This vulnerabil…

VulDB Read →
⬡ Vulnerabilities & CVEs Mar 29, 2026
CVE-2026-32978 | OpenClaw up to 2026.3.10 authorization (GHSA-qc36-x95h-7j53)

A vulnerability labeled as problematic has been found in OpenClaw up to 2026.3.10 . Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to incorrect authoriza…

VulDB Read →
← Prev 201 / 272 Next →