Pinned Loading

1. CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-FieldCVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-FieldPublic

   Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover (openclaw-dashboard)

2. CVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-CrashCVE-2026-66729-Out-of-Bounds-Read-in-facil.io-MIME-Parser-leads-to-Server-CrashPublic

   Security Advisory: Out-of-Bounds Read in facil.io MIME Parser leads to Server crash

   Python

3. CVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-FieldCVE-2026-66748-Camaleon-CMS---Authenticated-RCE-via-select_eval-Custom-FieldPublic

   Security Advisory: Camaleon CMS - Authenticated RCE via `select_eval` Custom Field

   Python

4. CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-CVE-2026-67181-HTTP-Request-Smuggling-via-Transfer-Encoding-Desynchronization-rouille-Public

   Security Advisory: HTTP Request Smuggling via Transfer-Encoding Desynchronization (rouille)

5. CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-Public

   Security Advisory: Unauthenticated NULL Pointer Dereference Crashes the Server (TinyWeb)

6. CVE-2026-67185-Unauthenticated-Path-Traversal-Allows-Arbitrary-File-Read-TinyWeb-CVE-2026-67185-Unauthenticated-Path-Traversal-Allows-Arbitrary-File-Read-TinyWeb-Public

   Security Advisory: Unauthenticated Path Traversal Allows Arbitrary File Read (TinyWeb)