CVE-2026-106457 Backstage: Insufficient audience validation in the Cloudflare Access auth provider

Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-provider package is affected by insufficient audience validation in the cloudflare access auth provider. The Cloudflare Access auth provider verifies ...

DEBIAN-CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

EUVD-2026-93809

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106243

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incomplete cleanup in Proxy Auth . This flaw allows an adjacent attacker to obtain sensitive information by sending crafted network traffic. No specific exploit details or mitigation steps beyond the version update are provided in...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-44351-poc

CVE-2026-44351 — 빈 Secret을 통한 fast-jwt JWT 위조 fast-jwt6.2.4 이전 버전의 인증 우회auth bypass PoC로, 인증되지 않은 공격자가 임의의 JWT를 위조하여 대상 애플리케이션에서 정품으로 허용되도록 할 수 있습니다. | ---|--- CVE| CVE-2026-44351 Advisory| GHSA-gmvf-9v4p-v8jc CWE| CWE-1391 키 유효성 검증 오류 / CWE-287 부적절한 인증 / CWE-326 부적절한 암호화 강도 CVSS 3.1| 9.1 CRITICA...

Payload didn't enforce field-level password update restrictions

Impact When an auth collection defined a field-level access.update restriction on the password field, the restriction was not enforced on the server correctly. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...

Payload: Field access control bypass on auth collections

Impact Payload's duplicate operation copies field values from the source document even when a field is hidden, or its access.read or access.create rule would reject the value for that caller. The disableDuplicate collection setting, enabled by default on auth collections, did not stop this. Patch...

NPM: Payload: Field access control bypass on auth collections

NPM: Payload: Field access control bypass on auth collections vulnerability discovered by ? in WordPress Npm payload versions 3.0.0, 3.90.0...

CVE-2026-105851 Payload: Field access control bypass on auth collections

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation copies values from a source document even when a field is hidden or its access.read or access.create rule rejects that val...

grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default

A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation...

grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default

A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 스캐너 Kestra 인스턴스에서 endsWith"/configs" 인증 필터 우회를 검색합니다. Kestra의 AuthenticationFilter.java는 정확한 경로 /api/v1/configs 대신 request.getPath.endsWith"/configs"를 확인합니다. Kestra는 호출자가 선택한 경로 세그먼트네임스페이스, 플로우 ID를 통해 리소스를 주소 지정하므로 /configs로 끝나는 모든 경로가 Basic-Auth를 우회하여 인증되지 ...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Detection Artifact Generator for Citrix NetScaler CVE-2026-88772 See our blog post for technical details. Detection in Action / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 и CVE-2025-40553 SolarWinds Web Help Desk: цепочка Pre-Auth RCE Инструмент генерации детектирующих артефактов для цепочки Pre-Auth RCE в SolarWinds Web Help Desk Описание Этот генератор детектирующих артефактов проверяет, уязвим ли экземпляр SolarWinds Web Help Desk к CVE-2025-4055...

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo: RCE до аутентификации Неаутентифицированное удаленное выполнение кода в Marimo через WebSocket терминал 📌 Обзор CVE-2026-39987 — это критическая уязвимость удаленного выполнения кода до аутентификации , затрагивающая версии Marimo до 0.23.0. WebSocket-эндпоинт /terminal/w...

CVE-2026-36826

CVE-2026-36826: genesisQL = 1.1.1의 SQL 인젝션 요약 genesisQL 1.1.1은 checkPassword 함수에서 SQL 인젝션에 취약합니다. 사용자가 제공한 username 및 password 필드가 파라미터화 없이 SQL 쿼리 문자열에 직접 삽입되어, 로그인 폼을 통해 인증되지 않은 SQL 인젝션 및 인증 우회가 가능합니다. 영향을 받는 제품 공급업체 : Open Source Labs 제품 : genesisQL 버전 : 1.1.1 및 그 이전 버전 가능 취약점 세부 정보 CWE-89 : SQ...