CyberIntel ⬡ News
★ Saved ◆ Cyber Reads

// Vulnerabilities & CVEs
Intel Feed

cyberintel.kalymoon.com  ·  8340 articles  ·  updated every 4 hours · grows forever

8340Total
4167Full Text
Jun 11, 2026Latest
◈ Women in Cyber ◉ Threat Intelligence ◎ How-To & Tutorials ⬡ Vulnerabilities & CVEs 🔍 Digital Forensics ◍ Incident Response & DFIR ◆ Security Tools & Reviews ◇ Industry News & Leadership ✉ Email Security 🛡 Active Threats ⚠ Critical CVEs ◐ Insider Threat & DLP ◌ Quantum Computing ◬ AI & Machine Learning
🔥 Trending Topics · Last 48h
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-5447 | wolfSSL up to 5.9.0 heap-based overflow

A vulnerability marked as critical has been reported in wolfSSL up to 5.9.0 . This affects an unknown part. Performing a manipulation results in heap-based buffer overflow. This vulnerability is repor…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-35629 | OpenClaw up to 2026.3.24 Destination fetch server-side request forgery (GHSA-rhfg-j8jq-7v2h)

A vulnerability described as critical has been identified in OpenClaw up to 2026.3.24 . This vulnerability affects the function fetch of the component Destination Handler . Executing a manipulation ca…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-35645 | OpenClaw up to 2026.3.24 operator.admin incorrect privileged apis (GHSA-h4jx-hjr3-fhgc)

A vulnerability classified as problematic has been found in OpenClaw up to 2026.3.24 . This issue affects the function operator.admin . The manipulation leads to incorrect use of privileged apis. This…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-40115 | MervinPraison PraisonAI up to 4.5.127 Recipe Registry server.py allocation of resources (GHSA-2xgv-5cv2-47vv)

A vulnerability classified as problematic was found in MervinPraison PraisonAI up to 4.5.127 . Impacted is an unknown function of the file server.py of the component Recipe Registry Handler . The mani…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-40150 | MervinPraison PraisonAIAgents up to 1.5.127 web_crawl_tools.py server-side request forgery (GHSA-8f4v-xfm9-3244)

A vulnerability, which was classified as critical , has been found in MervinPraison PraisonAIAgents up to 1.5.127 . The affected element is an unknown function of the file praisonaiagents/tools/web_cr…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-35634 | OpenClaw up to 2026.3.22 authorizeCanvasRequest authentication bypass (GHSA-6mqc-jqh6-x8fc)

A vulnerability, which was classified as critical , was found in OpenClaw up to 2026.3.22 . The impacted element is the function authorizeCanvasRequest . Such manipulation leads to authentication bypa…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-40148 | MervinPraison PraisonAI up to 4.5.127 _safe_extractall data amplification (GHSA-f2h6-7xfr-xm8w)

A vulnerability has been found in MervinPraison PraisonAI up to 4.5.127 and classified as problematic . This affects the function _safe_extractall . Performing a manipulation results in highly compres…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-5264 | wolfSSL up to 5.9.0 DTLS heap-based overflow

A vulnerability was found in wolfSSL up to 5.9.0 and classified as critical . This impacts an unknown function of the component DTLS Handler . Executing a manipulation can lead to heap-based buffer ov…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-4482 | Rapid7 Insight Agent up to 3.3.0 on Windows Certificate …/bootstrap/common/ssl permission assignment

A vulnerability was found in Rapid7 Insight Agent up to 3.3.0 on Windows. It has been classified as problematic . Affected is an unknown function of the file …/bootstrap/common/ssl of the component Ce…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-5477 | wolfSSL up to 5.9.0 Message wc_CmacUpdate integer overflow (EUVD-2026-21305)

A vulnerability was found in wolfSSL up to 5.9.0 . It has been declared as critical . Affected by this vulnerability is the function wc_CmacUpdate of the component Message Handler . The manipulation r…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-4432 | YITH WooCommerce Wishlist Plugin up to 4.12.x on WordPress AJAX /wishlist/ save_title authorization

A vulnerability was found in YITH WooCommerce Wishlist Plugin up to 4.12.x on WordPress. It has been rated as critical . Affected by this issue is the function save_title of the file /wishlist/ of the…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-28704 | Emocheck uncontrolled search path

A vulnerability categorized as problematic has been discovered in Japan Computer Emergency Response Team Coordination Center Emocheck . This affects an unknown part. Such manipulation leads to uncontr…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2025-14545 | YML for Yandex Market Plugin up to 5.0.25 on WordPress code injection

A vulnerability identified as critical has been detected in YML for Yandex Market Plugin up to 5.0.25 on WordPress. This vulnerability affects unknown code. Performing a manipulation results in code i…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-1115 | parisneo lollms up to 2.1.x __init__.py create_post cross site scripting

A vulnerability labeled as problematic has been found in parisneo lollms up to 2.1.x . This issue affects the function create_post of the file backend/routers/social/__init__.py . Executing a manipula…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
New Fortinet Zero-Day Warning—Update Now, Attacks Underway - Forbes

New Fortinet Zero-Day Warning—Update Now, Attacks Underway Forbes

Forbes Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-34945 | bytecodealliance wasmtime up to 36.0.6/42.0.1/44.0.0 return numeric conversion (GHSA-m9w2-8782-2946)

A vulnerability was found in bytecodealliance wasmtime up to 36.0.6/42.0.1/44.0.0 . It has been classified as problematic . This affects an unknown part. Performing a manipulation of the argument retu…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-39977 | flatpak -builder up to 1.4.7 g_file_resolve_relative_path path traversal

A vulnerability was found in flatpak -builder up to 1.4.7 . It has been declared as critical . This vulnerability affects the function g_file_resolve_relative_path . Executing a manipulation can lead …

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-28205 | OpenPLC v3 API insecure default initialization of resource (icsa-25-345-10)

A vulnerability was found in OpenPLC v3 . It has been rated as very critical . This issue affects some unknown processing of the component API . The manipulation leads to insecure default initializati…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-25854 | Apache Tomcat up to 7.0.108/8.5.100/9.0.115/10.1.52/11.0.18 redirect

A vulnerability categorized as problematic has been discovered in Apache Tomcat up to 7.0.108/8.5.100/9.0.115/10.1.52/11.0.18 . Impacted is an unknown function. The manipulation results in open redire…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-29129 | Apache Tomcat up to 9.0.115/10.1.52/11.0.18 Cipher Preference Order information disclosure

A vulnerability identified as problematic has been detected in Apache Tomcat up to 9.0.115/10.1.52/11.0.18 . The affected element is an unknown function of the component Cipher Preference Order . This…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-29145 | Apache Tomcat up to 8.5.99/9.0.115/10.1.52/11.0.18 CLIENT_CERT Authentication improper authentication

A vulnerability labeled as critical has been found in Apache Tomcat up to 8.5.99/9.0.115/10.1.52/11.0.18 . The impacted element is an unknown function of the component CLIENT_CERT Authentication . Suc…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-32990 | Apache Tomcat up to 9.0.115/10.1.52/11.0.19 input validation

A vulnerability marked as critical has been reported in Apache Tomcat up to 9.0.115/10.1.52/11.0.19 . This affects an unknown function. Performing a manipulation results in improper input validation. …

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-34946 | bytecodealliance wasmtime up to 36.0.6/42.0.1/44.0.0 control flow (GHSA-q49f-xg75-m9xw)

A vulnerability described as problematic has been identified in bytecodealliance wasmtime up to 36.0.6/42.0.1/44.0.0 . This impacts an unknown function. Executing a manipulation can lead to incorrect …

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 10, 2026
CVE-2026-34987 | bytecodealliance wasmtime up to 36.0.6/42.0.1/44.0.0 out-of-bounds (GHSA-xx5w-cvp6-jv83)

A vulnerability classified as problematic has been found in bytecodealliance wasmtime up to 36.0.6/42.0.1/44.0.0 . Affected is an unknown function. The manipulation leads to out-of-bounds read. This v…

VulDB Read →
← Prev 220 / 348 Next →