Aggregator

CVE-2026-41373 | OpenClaw up to 2026.3.30 host-env-security-policy.json uncontrolled search path (GHSA-g8xp-qx39-9jq9)

VulDB Recent Entries
3 months 1 week ago
A vulnerability labeled as problematic has been found in OpenClaw up to 2026.3.30. This impacts an unknown function of the file host-env-security-policy.json. The manipulation results in uncontrolled search path. This vulnerability is identified as CVE-2026-41373. The attack is only possible with local access. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2026-41376 | OpenClaw up to 2026.3.30 Validate Message origin validation (GHSA-rg8m-3943-vm6q)

VulDB Recent Entries
3 months 1 week ago
A vulnerability identified as critical has been detected in OpenClaw up to 2026.3.30. This affects an unknown function of the component Validate Message Handler. The manipulation leads to origin validation error. This vulnerability is referenced as CVE-2026-41376. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2026-3893 | Carlson VASCO-B GNSS Receiver up to 1.3.x missing authentication

VulDB Recent Entries
3 months 1 week ago
A vulnerability categorized as critical has been discovered in Carlson VASCO-B GNSS Receiver up to 1.3.x. The impacted element is an unknown function. Executing a manipulation can lead to missing authentication. The identification of this vulnerability is CVE-2026-3893. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-41375 | OpenClaw up to 2026.3.27 /phone authorization (GHSA-h2v7-xc88-xx8c)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in OpenClaw up to 2026.3.27. It has been classified as problematic. This issue affects some unknown processing of the file /phone. This manipulation causes incorrect authorization. This vulnerability is handled as CVE-2026-41375. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-41374 | OpenClaw up to 2026.3.30 Discord Audio Preflight Transcription amplification (GHSA-hhff-fj5f-qg48)

VulDB Recent Entries
3 months 1 week ago
A vulnerability, which was classified as problematic, was found in OpenClaw up to 2026.3.30. Affected by this issue is some unknown functionality of the component Discord Audio Preflight Transcription. Executing a manipulation can lead to incorrect behavior order: early amplification. This vulnerability appears as CVE-2026-41374. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.
vuldb.com

MNT6

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

MNT6

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

CVE-2025-41658

CVE Trends
3 months 1 week ago
Currently trending CVE - Hype Score: 7 - CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.

CVE-2025-41659

CVE Trends
3 months 1 week ago
Currently trending CVE - Hype Score: 7 - A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only ...

CVE-2024-7399

CVE Trends
3 months 1 week ago
Currently trending CVE - Hype Score: 8 - Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

Managed ad