24h | 7d | 30d

Overview

  • Bitwarden
  • Bitwarden CLI

01 May 2026
Published
01 May 2026
Updated

CVSS v4.0
HIGH (8.8)
EPSS
Pending

KEV

Description

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident.

Statistics

  • 1 Post

Last activity: 6 hours ago

Fediverse

Profile picture fallback

🚩 CVE-2026-42994: Bitwarden CLI v2026.4.0 (npm, Apr 2026) has a HIGH severity OS Command Injection (CVSS 8.8) due to a supply chain compromise. No patch yet. Avoid this version & verify installs. More info: radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 6h ago

Overview

  • Totolink
  • A8000RU

01 May 2026
Published
01 May 2026
Updated

CVSS v4.0
CRITICAL (9.3)
EPSS
Pending

KEV

Description

A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function Vulnerability of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument proto leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Statistics

  • 1 Post

Last activity: 9 hours ago

Fediverse

Profile picture fallback

🚨 CVE-2026-7538 (CRITICAL, CVSS 9.3): Totolink A8000RU 7.1cu.643_b20200521 OS command injection in CGI handler allows unauthenticated remote code execution. No patch — restrict access & monitor vendor updates. radar.offseq.com/threat/cve-20

  • 0
  • 0
  • 0
  • 9h ago

Overview

  • Progress Software
  • MOVEit Automation

30 Apr 2026
Published
01 May 2026
Updated

CVSS v3.1
HIGH (7.7)
EPSS
Pending

KEV

Description

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0.

Statistics

  • 1 Post

Last activity: 6 hours ago

Bluesky

Profile picture fallback
MOVEit Automation Critical Security Alert Bulletin – April 2026 – (CVE-2026-4670, CVE-2026-5174) URL: community.progress.com/s/article/MO... Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8
  • 0
  • 0
  • 0
  • 6h ago

Overview

  • openemr
  • openemr

25 Feb 2026
Published
26 Feb 2026
Updated

CVSS v4.0
MEDIUM (5.7)
EPSS
0.09%

KEV

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an authorization bypass vulnerability in the FHIR CareTeam resource endpoint allows patient-scoped FHIR tokens to access care team data for all patients instead of being restricted to only the authenticated patient's data. This could potentially lead to unauthorized disclosure of Protected Health Information (PHI), including patient-provider relationships and care team structures across the entire system. The issue occurs because the `FhirCareTeamService` does not implement the `IPatientCompartmentResourceService` interface and does not pass the patient binding parameter to the underlying service, bypassing the patient compartment filtering mechanism. Version 8.0.0 contains a patch for this issue.

Statistics

  • 1 Post

Last activity: 23 hours ago

Fediverse

Profile picture fallback

OpenEMR vulnerability analysis: AI uncovered 38 flaws including CVE-2026-23627 (immunization module SQL injection), CVE-2026-24487 (FHIR CareTeam broken authorization), and CVE-2026-24908 (Patient REST API database takeover)....

captechgroup.com/about-us/thre

  • 0
  • 0
  • 0
  • 23h ago

Overview

  • openemr
  • openemr

25 Feb 2026
Published
26 Feb 2026
Updated

CVSS v3.1
CRITICAL (10.0)
EPSS
0.00%

KEV

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Patient REST API endpoint allows authenticated users with API access to execute arbitrary SQL queries through the `_sort` parameter. This could potentially lead to database access, PHI (Protected Health Information) exposure, and credential compromise. The issue occurs when user-supplied sort field names are used in ORDER BY clauses without proper validation or identifier escaping. Version 8.0.0 fixes the issue.

Statistics

  • 1 Post

Last activity: 23 hours ago

Fediverse

Profile picture fallback

OpenEMR vulnerability analysis: AI uncovered 38 flaws including CVE-2026-23627 (immunization module SQL injection), CVE-2026-24487 (FHIR CareTeam broken authorization), and CVE-2026-24908 (Patient REST API database takeover)....

captechgroup.com/about-us/thre

  • 0
  • 0
  • 0
  • 23h ago

Overview

  • openemr
  • openemr

25 Feb 2026
Published
26 Feb 2026
Updated

CVSS v4.0
HIGH (7.4)
EPSS
0.01%

KEV

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Immunization module allows any authenticated user to execute arbitrary SQL queries, leading to complete database compromise, PHI exfiltration, credential theft, and potential remote code execution. The vulnerability exists because user-supplied `patient_id` values are directly concatenated into SQL WHERE clauses without parameterization or escaping. Version 8.0.0 patches the issue.

Statistics

  • 1 Post

Last activity: 23 hours ago

Fediverse

Profile picture fallback

OpenEMR vulnerability analysis: AI uncovered 38 flaws including CVE-2026-23627 (immunization module SQL injection), CVE-2026-24487 (FHIR CareTeam broken authorization), and CVE-2026-24908 (Patient REST API database takeover)....

captechgroup.com/about-us/thre

  • 0
  • 0
  • 0
  • 23h ago
Showing 21 to 26 of 26 CVEs