Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-08 | 1 | Disclosure1 |
| 2026-05-13 | 4 | Disclosure1General3 |
| 2026-05-26 | 1 | Patch1 |
https://lyrie.ai/research/research/cve-2026-41588-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The provided text only contains a link to an advisory for CVE-2026-41588, with no further details on exploitation, patching, or technical specifics.
References CVE: CVE-2026-41588 CVSS: 9 (3.1) — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The note announces CVE-2026-41588 as a critical vulnerability with a CVSS score of 9.0, yet it provides no PoC, exploit, patch, or detailed technical description beyond the severity classification.
CVE: CVE-2026-41588 CVSS: 9 (3.1) — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory RELATE is a web-based courseware package.
Post summary
The text announces CVE-2026-41588 with a high severity rating but provides no details on exploitation, mitigation, or technical aspects.
CRITICAL: CVE-2026-41588 (CVSS 9) — multiple products. CVE: CVE-2026-41588 CVSS: 9 (3.1) — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The passage specifies CVE-2026-41588, its CVSS score, severity, and status as a critical advisory, but offers no proof of concept, exploit details, patch information, or indication of active exploitation.
🚨 CRITICAL: CVE-2026-41588 (CVSS 9.0) Timing attack vulnerability in RELATE web-based courseware (course/auth[.]py). Allows remote exploitation with high impact on confidentiality, integrity & availability. Patch: commit 2f68e16 #CVE #Vulnerability #PatchNow https://t.co/XdrQ3z1fPf
Post summary
The tweet announces the critical CVE-2026-41588, a timing attack in RELATE web-based courseware, and directs users to a patch commit that resolves the issue.
CVE-2026-41588 RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been… https://www.cve.org/CVERecord?id=CVE-2026-41588
Post summary
The text announces a timing‑attack vulnerability in the RELATE courseware package (course/auth.py) and links to the CVE record.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | inducer | relate | - | - | - |