CyberIntel ⬡ News
★ Saved ◆ Cyber Reads

// Vulnerabilities & CVEs
Intel Feed

cyberintel.kalymoon.com  ·  5898 articles  ·  updated every 4 hours · grows forever

5898Total
4045Full Text
May 19, 2026Latest
◈ Women in Cyber ◉ Threat Intelligence ◎ How-To & Tutorials ⬡ Vulnerabilities & CVEs 🔍 Digital Forensics ◍ Incident Response & DFIR ◆ Security Tools & Reviews ◇ Industry News & Leadership ✉ Email Security 🛡 Active Threats ⚠ Critical CVEs ◐ Insider Threat & DLP ◌ Quantum Computing ◬ AI & Machine Learning
🔥 Trending Topics · Last 48h
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41295 | OpenClaw up to 2026.4.1 Workspace Channel inclusion of functionality from untrusted control sphere (GHSA-2qrv-rc5x-2g2h)

A vulnerability was found in OpenClaw up to 2026.4.1 and classified as problematic . This affects an unknown part of the component Workspace Channel Handler . The manipulation results in inclusion of …

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-40497 | freescout-help-desk freescout up to 1.8.212 Mailbox Signature Field /mailbox/settings/ stripDangerousTags cross site scripting (GHSA-fh99-wr77-pxq3)

A vulnerability was found in freescout-help-desk freescout up to 1.8.212 . It has been classified as problematic . This vulnerability affects the function Helper::stripDangerousTags of the file /mailb…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-5965 | NewSoft NewSoftOA prior 10.1.8.3 os command injection

A vulnerability was found in NewSoft NewSoftOA . It has been declared as critical . This issue affects some unknown processing. Such manipulation leads to os command injection. This vulnerability is d…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41296 | OpenClaw up to 2026.3.30 Remote Filesystem Bridge toctou (GHSA-9p3r-hh9g-5cmg)

A vulnerability was found in OpenClaw up to 2026.3.30 . It has been rated as problematic . Impacted is an unknown function of the component Remote Filesystem Bridge . Performing a manipulation results…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41297 | OpenClaw up to 2026.3.30 Marketplace Plugin server-side request forgery (GHSA-vjx8-8p7h-82gr)

A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.3.30 . The affected element is an unknown function of the component Marketplace Plugin . Executing a manipulation can…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41299 | OpenClaw up to 2026.3.27 Websocket Handshake reliance on untrusted inputs in a security decision (GHSA-6xg4-82hv-cp6f)

A vulnerability identified as critical has been detected in OpenClaw up to 2026.3.27 . The impacted element is an unknown function of the component Websocket Handshake Handler . The manipulation leads…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41298 | OpenClaw up to 2026.4.1 Read-Scoped Call kill authorization (GHSA-5hff-46vh-rxmw)

A vulnerability labeled as critical has been found in OpenClaw up to 2026.4.1 . This affects an unknown function of the file /sessions/:sessionKey/kill of the component Read-Scoped Call Handler . The …

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41300 | OpenClaw up to 2026.3.30 state distinction (GHSA-9f4w-67g7-mqwv)

A vulnerability marked as problematic has been reported in OpenClaw up to 2026.3.30 . This impacts an unknown function. This manipulation causes incomplete internal state distinction. This vulnerabili…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41331 | OpenClaw up to 2026.3.30 Telegram Audio Preflight Transcription amplification (GHSA-m6fx-m8hc-572m)

A vulnerability described as problematic has been identified in OpenClaw up to 2026.3.30 . Affected is an unknown function of the component Telegram Audio Preflight Transcription . Such manipulation l…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41301 | OpenClaw up to 2026.3.30 Nostr DM signature verification (GHSA-h43v-27wg-5mf9)

A vulnerability classified as problematic has been found in OpenClaw up to 2026.3.30 . Affected by this vulnerability is an unknown functionality of the component Nostr DM Handler . Performing a manip…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41303 | OpenClaw up to 2026.3.27 authorization (GHSA-98hh-7ghg-x6rq)

A vulnerability classified as critical was found in OpenClaw up to 2026.3.27 . Affected by this issue is some unknown functionality. Executing a manipulation can lead to incorrect authorization. The i…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41330 | OpenClaw up to 2026.3.30 Environment Variable variable initialization (GHSA-9gp8-hjxr-6f34)

A vulnerability, which was classified as problematic , has been found in OpenClaw up to 2026.3.30 . This affects an unknown part of the component Environment Variable Handler . The manipulation leads …

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41329 | OpenClaw up to 2026.3.30 senderIsOwner incorrect privileged apis (GHSA-g5cg-8x5w-7jpm)

A vulnerability, which was classified as critical , was found in OpenClaw up to 2026.3.30 . This vulnerability affects unknown code. The manipulation of the argument senderIsOwner results in incorrect…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-41302 | OpenClaw up to 2026.3.30 Marketplace Plugin fetch server-side request forgery (GHSA-9q7v-8mr7-g23p)

A vulnerability has been found in OpenClaw up to 2026.3.30 and classified as critical . This issue affects the function fetch of the component Marketplace Plugin . This manipulation causes server-side…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-34082 | langgenius dify up to 1.13.0 Chat History conversations authorization (GHSA-fxq3-hh7x-c63p)

A vulnerability was found in langgenius dify up to 1.13.0 and classified as problematic . Impacted is an unknown function of the file /console/api/installed-apps/conversations/ of the component Chat H…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
SAP Patch Day Fixes Critical SQL Injection, DoS, and Code Injection Flaws - gbhackers.com

SAP Patch Day Fixes Critical SQL Injection, DoS, and Code Injection Flaws gbhackers.com

gbhackers.com Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
Microsoft Office Zero-Day CVE-2026-21509: Emergency Patch Released for Actively Exploited OLE Vulnerability - Rescana

Microsoft Office Zero-Day CVE-2026-21509: Emergency Patch Released for Actively Exploited OLE Vulnerability Rescana

Rescana Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation - The Hacker News

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation The Hacker News

The Hacker News Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
Windows Snipping Tool Vulnerability Allows Attacker to Perform Spoofing Over a Network - CyberSecurityNews

Windows Snipping Tool Vulnerability Allows Attacker to Perform Spoofing Over a Network CyberSecurityNews

CyberSecurityNews Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
Apache ZooKeeper Flaw Exposes Sensitive Data to Attackers - gbhackers.com

Apache ZooKeeper Flaw Exposes Sensitive Data to Attackers gbhackers.com

gbhackers.com Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
Critical Cisco SD-WAN vulnerability exploited since 2023 - Techzine Global

Critical Cisco SD-WAN vulnerability exploited since 2023 Techzine Global

Techzine Global Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-6248 | tomdever wpForo Forum Plugin up to 3.0.5 on WordPress Members::update path traversal (EUVD-2026-23935)

A vulnerability was found in tomdever wpForo Forum Plugin up to 3.0.5 on WordPress. It has been classified as critical . This affects the function Members::update . The manipulation leads to path trav…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-6550 | Amazon AWS Encryption SDK for Python up to 2.5.1/3.3.0/4.0.4 Caching Layer downgrade (EUVD-2026-23943)

A vulnerability was found in Amazon AWS Encryption SDK for Python up to 2.5.1/3.3.0/4.0.4 . It has been declared as problematic . This vulnerability affects unknown code of the component Caching Layer…

VulDB Read →
⬡ Vulnerabilities & CVEs Apr 21, 2026
CVE-2026-6257 | givanz Vvveb 1.0.8 unrestricted upload (EUVD-2026-23942)

A vulnerability was found in givanz Vvveb 1.0.8 . It has been rated as critical . This issue affects some unknown processing. This manipulation causes unrestricted upload. This vulnerability is handle…

VulDB Read →
← Prev 76 / 246 Next →