Skip to content
Noroxi

tdjackey

104 credited records · 104 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for tdjackey

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-100559
    34Monitor

    OpenClaw before 2026.8.1 Command Injection via Escaped Newlines

    HighCVSS 8.6No exploitEPSS 0%

    openclaw · openclawSep 26, 2026

  • CVE-2026-43577
    28Monitor

    OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes

    HighCVSS 7.1No exploitEPSS 0%

    openclaw · openclawMay 6, 2026

  • CVE-2026-41387
    34Monitor

    OpenClaw < 2026.3.22 - Supply Chain Redirection via Incomplete Host Environment Sanitization

    HighCVSS 8.5No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41386
    36Monitor

    OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes

    CriticalCVSS 9.1No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41373
    23Monitor

    OpenClaw < 2026.3.31 - Compiler Binary Substitution via Environment Variable Override in Host Execution Policy

    MediumCVSS 5.8No exploitEPSS 0%

    openclaw · openclawApr 28, 2026

  • CVE-2026-41369
    28Monitor

    OpenClaw < 2026.3.31 - Insufficient Environment Variable Sanitization in Host Execution

    HighCVSS 7.1No exploitEPSS 0%

    openclaw · openclawApr 27, 2026

  • CVE-2026-41366
    24Monitor

    OpenClaw < 2026.3.31 - Arbitrary Host File Read via appendLocalMediaParentRoots Self-Whitelisting

    MediumCVSS 6.0No exploitEPSS 0%

    openclaw · openclawApr 27, 2026

  • CVE-2026-41355
    21Monitor

    OpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion

    MediumCVSS 5.4No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41350
    21Monitor

    OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations

    MediumCVSS 5.3No exploitEPSS 0%

    openclaw · openclawApr 23, 2026

  • CVE-2026-41303
    34Monitor

    OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands

    HighCVSS 8.7Proof of conceptEPSS 0%

    openclaw · openclawApr 21, 2026

  • CVE-2026-41302
    19Monitor

    OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download

    MediumCVSS 4.8No exploitEPSS 0%

    openclaw · openclawApr 21, 2026

  • CVE-2026-41294
    34Monitor

    OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File

    HighCVSS 8.5No exploitEPSS 0%

    openclaw · openclawApr 21, 2026

  • CVE-2026-35620
    21Monitor

    OpenClaw < 2026.3.24 - Missing Authorization in /send and /allowlist Chat Commands

    MediumCVSS 5.3No exploitEPSS 0%

    openclaw · openclawApr 10, 2026

  • CVE-2026-35653
    28Monitor

    OpenClaw < 2026.3.24 - Incorrect Authorization in POST /reset-profile via browser.request

    HighCVSS 7.2No exploitEPSS 0%

    openclaw · openclawApr 10, 2026

  • CVE-2026-35640
    27Monitor

    OpenClaw < 2026.3.25 - Denial of Service via Unauthenticated Webhook Request Parsing

    MediumCVSS 6.9No exploitEPSS 0%

    openclaw · openclawApr 9, 2026

  • CVE-2026-35635
    25Monitor

    OpenClaw < 2026.3.22 - Webhook Path Route Replacement Vulnerability in Synology Chat

    MediumCVSS 6.3No exploitEPSS 0%

    openclaw · openclawApr 9, 2026

  • CVE-2026-35631
    28Monitor

    OpenClaw < 2026.3.22 - Missing Authorization Enforcement in Internal ACP Chat Commands

    HighCVSS 7.1No exploitEPSS 0%

    openclaw · openclawApr 9, 2026

  • CVE-2026-32988
    23Monitor

    OpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation

    MediumCVSS 5.8No exploitEPSS 0%

    openclaw · openclawMar 31, 2026

  • CVE-2026-32976
    28Monitor

    OpenClaw < 2026.3.11 - Account-Scoped configWrites Policy Bypass via Channel Commands

    HighCVSS 7.1No exploitEPSS 0%

    openclaw · openclawMar 31, 2026

  • CVE-2026-32971
    29Monitor

    OpenClaw < 2026.3.11 - Node-Host Approval UI Mismatch Allows Execution of Unintended Commands

    HighCVSS 7.3No exploitEPSS 0%

    openclaw · openclawMar 31, 2026

  • CVE-2026-32970
    8Monitor

    OpenClaw < 2026.3.11 - Credential Fallback Logic Bypass via Unavailable Local Auth SecretRefs

    LowCVSS 2.0No exploitEPSS 0%

    openclaw · openclawMar 31, 2026

  • CVE-2026-32921
    21Monitor

    OpenClaw < 2026.3.8 - Script Content Modification via Mutable Operand Binding in system.run

    MediumCVSS 5.3No exploitEPSS 0%

    openclaw · openclawMar 31, 2026

  • CVE-2026-32916
    36Monitor

    OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes

    CriticalCVSS 9.2No exploitEPSS 0%

    openclaw · openclawMar 31, 2026

  • CVE-2026-33574
    23Monitor

    OpenClaw < 2026.3.8 - Path Traversal via Tools Root Rebinding in Skills Download

    MediumCVSS 5.8No exploitEPSS 0%

    openclaw · openclawMar 29, 2026

  • CVE-2026-33573
    34Monitor

    OpenClaw < 2026.3.11 - Workspace Boundary Bypass via Agent RPC Parameters

    HighCVSS 8.7No exploitEPSS 0%

    openclaw · openclawMar 29, 2026