PT-2026-95105

Name of the Vulnerable Software and Affected Versions Caddy Proxy Manager versions prior to 1.5.1 Description Caddy Proxy Manager allows unauthenticated remote actors to create active accounts with the user role without administrator approval. This occurs because email and password...

CVE-2026-90106: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address...

PT-2026-94356

Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions prior to 0.17.1 Description In DistServe prefill/decode disaggregation mode, the proxy uses user-facing session IDs instead of internal scheduler keys, which prevents the release of scheduler sessions. Unauthenticate...

PT-2026-94454

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bridge network component regarding the ARP/ND proxy. The system reads the neighbor hardware address directly, which can lead to torn or partial reads if the neighb...

Rclone 1.64.x < 1.75.1 FTP Auth-Proxy Cross-Session Backend Confusion (CVE-2026-88017)

The version of Rclone installed on the remote host is 1.64.x prior to 1.75.1. It is, therefore, affected by a cross-session backend confusion vulnerability: - The FTP auth-proxy driver stores one obscured password per username in a server-wide map and does not bind the credential or the returned...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109824)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109824 advisory. FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109811)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109811 advisory. FreeRDP before 3.29.0 affected versions = 3.28.0 does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This...

CVE-2026-69399: Unintended Proxy or Intermediary

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-54907: Initialization of a Resource with an Insecure Default

Caddy Proxy Manager is a web interface for managing Caddy Server reverse proxies and certificates. Prior to 1.5.1, Caddy Proxy Manager enables email and password self-registration by default at /api/auth/sign-up/email, allowing an unauthenticated remote actor to create an active account with the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109805)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109805 advisory. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. Tenable has extracted the preceding description block directly from the Unity Linux securi...

PT-2026-94395

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.0.0 through 2.16.0 AsyncHttpClient versions 3.0.0 through 3.0.11 Description When using an HTTP proxy to reach an HTTPS origin, the library may expose preemptive origin credentials. This occurs because...

PT-2026-94385

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.1.0 through 2.16.0 AsyncHttpClient versions 3.0.1 through 3.0.11 Description Requests using an authenticated SOCKS proxy can expose proxy credentials to the origin server. This occurs because NettyRequestFactory and...

CVE-2026-85720: Cleartext Transmission of Sensitive Information

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a request using an HTTP proxy to reach an HTTPS origin can expose preemptive origin credentials because NettyRequestFactory and...

CVE-2026-85719: Cleartext Transmission of Sensitive Information

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

SUSE CVE-2023-54397

Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain...

CVE-2026-92812 decap-server Path Traversal via Sibling Directory Prefix Matching

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

CVE-2026-92804 Nango through 0.70.4 Server-Side Request Forgery via Configuration

Nango through 0.70.4 fails to validate caller-supplied connection configuration values interpolated into provider token and proxy URL templates. Authenticated attackers can supply malicious configuration values to direct server requests at internal addresses or cloud metadata endpoints, potential...

CVE-2026-59823 LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place apibase inside the userconfig request body to bypass isrequestbodysafe, which blocks top-level apibase and baseurl but...

CVE-2026-59823

LiteLLM is a proxy server (AI Gateway) for calling LLM APIs. Prior to version 1.83.9 , an authenticated caller holding a valid virtual key could place api_base inside the user_config request body, bypassing the is_request_body_safe check that blocks top-level api_base and base_url but did not ins...

CVE-2026-59944

A flaw was found in Composer, a dependency manager for PHP. A malicious or compromised dependency can bypass existing security measures designed to prevent unauthorized binary path execution. This can occur when Composer processes untrusted cached data or older build artifacts, allowing it to...