Lucene search
+L

24554 matches found

Vulnrichment
Vulnrichment
added 2026/04/21 11:20 p.m.6 views

CVE-2026-40575 OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied X-Forwarded-Uri header when --reverse-proxy is enabled and --skip-auth-regex or --skip-auth-route is configured. An attacker can spoof this header so OAut...

9.1CVSS5.8AI score0.00477EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/21 11:20 p.m.40 views

CVE-2026-40575 OAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied X-Forwarded-Uri header when --reverse-proxy is enabled and --skip-auth-regex or --skip-auth-route is configured. An attacker can spoof this header so OAut...

9.1CVSS0.00477EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/21 11:20 p.m.10 views

CVE-2026-40575

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 may trust a client-supplied X-Forwarded-Uri header when --reverse-proxy is enabled and --skip-auth-regex or --skip-auth-route is configured. An attacker can spoof this header so OAut...

9.1CVSS5.8AI score0.00477EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/04/21 11:17 p.m.11 views

EUVD-2026-24559

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments are affected when all of the following are true: Use of skipauthroutes or the legacy skipauthregex; use of patterns...

8.2CVSS5.7AI score0.00275EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/21 11:17 p.m.37 views

CVE-2026-41059 OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments are affected when all of the following are true: Use of skipauthroutes or the legacy skipauthregex; use of patterns...

8.2CVSS0.00275EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/21 11:17 p.m.100 views

CVE-2026-41059

The CVE concerns OAuth2 Proxy (versions 7.5.0–7.15.1) where a configuration-driven authentication bypass can occur due to patterns in skip_auth_routes or legacy skip_auth_regex. Attacks are possible when attacker-controlled suffixes widen patterns (for example, ^/foo/.*/bar$) so that a # in the p...

8.2CVSS5.7AI score0.00275EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/21 11:17 p.m.12 views

CVE-2026-41059

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments are affected when all of the following are true: Use of skipauthroutes or the legacy skipauthregex; use of patterns...

8.2CVSS5.7AI score0.00275EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/04/21 11:17 p.m.10 views

CVE-2026-41059 OAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex

OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. Versions 7.5.0 through 7.15.1 have a configuration-dependent authentication bypass. Deployments are affected when all of the following are true: Use of skipauthroutes or the legacy skipauthregex; use of patterns...

8.2CVSS5.9AI score
SaveExploits0References3
NVD
NVD
added 2026/04/21 11:16 p.m.20 views

CVE-2026-4821

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it was published in error...

0.00014EPSS
SaveExploits0
NVD
NVD
added 2026/04/21 11:16 p.m.12 views

CVE-2026-41055

WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SSRF fix in AVideo's LiveLinks proxy adds isSSRFSafeURL validation but leaves DNS TOCTOU vulnerabilities where DNS rebinding between validation and the actual HTTP request redirects traffic to internal...

8.6CVSS0.00377EPSS
SaveExploits2References4
EUVD
EUVD
added 2026/04/21 10:25 p.m.10 views

EUVD-2026-24529

WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SSRF fix in AVideo's LiveLinks proxy adds isSSRFSafeURL validation but leaves DNS TOCTOU vulnerabilities where DNS rebinding between validation and the actual HTTP request redirects traffic to internal...

8.6CVSS5.8AI score0.00377EPSS
SaveExploits2References4
CVE
CVE
added 2026/04/21 10:25 p.m.32 views

CVE-2026-41055

Summary: CVE-2026-41055 (and related CVE-2026-33039) affect WWBN AVideo’s LiveLinks proxy. In versions ≤ 29.0, an incomplete fix to SSRF validation uses isSSRFSafeURL() for the initial URL but does not re-validate after DNS resolution or redirects, enabling DNS TOCTOU/ DNS rebinding between valid...

8.6CVSS5.7AI score0.00453EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2026/04/21 10:25 p.m.42 views

CVE-2026-41055 AVideo has an incomplete fix for CVE-2026-33039 (SSRF)

WWBN AVideo is an open source video platform. In versions 29.0 and below, an incomplete SSRF fix in AVideo's LiveLinks proxy adds isSSRFSafeURL validation but leaves DNS TOCTOU vulnerabilities where DNS rebinding between validation and the actual HTTP request redirects traffic to internal...

8.6CVSS0.00377EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2026/04/21 10:12 p.m.41 views

CVE-2026-4821

...

0.00014EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/04/21 10:12 p.m.10 views

CVE-2026-4821

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Management Console administrator to execute arbitrary OS commands via shell metacharacter injection in proxy configuration fields such as httpproxy. Exploitation o...

8.1CVSS6AI score0.00014EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/21 10:12 p.m.5 views

CVE-2026-4821 Proxy configuration command injection vulnerability found in GitHub Enterprise Server Management Console configuration API

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Management Console administrator to execute arbitrary OS commands via shell metacharacter injection in proxy configuration fields such as httpproxy. Exploitation o...

8.1CVSS6AI score0.00014EPSS
SaveExploits0References7
CVE
CVE
added 2026/04/21 10:12 p.m.34 views

CVE-2026-4821

The CVE-2026-4821 entry describes an improper neutralization of special elements vulnerability in GitHub Enterprise Server . It allows an authenticated Management Console administrator to execute arbitrary OS commands via shell metacharacter injection in proxy configuration fields (e.g., http_pro...

8.1CVSS6AI score0.00014EPSS
SaveExploits0
Snyk
Snyk
added 2026/04/21 10:00 p.m.7 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that target Kubernetes environments by install a full LLM proxy service on the victim's machine, allowing the attacker to route LLM traffic through the compromised server. Remediation Avoid using kube-node-health...

9.8CVSS5.5AI score
SaveExploits0References2
Snyk
Snyk
added 2026/04/21 10:00 p.m.8 views

Embedded Malicious Code

Overview kube-health-tools is a Lightweight Kubernetes node health diagnostics Affected versions of this package are vulnerable to Embedded Malicious Code that target Kubernetes environments by install a full LLM proxy service on the victim's machine, allowing the attacker to route LLM traffic...

9.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/04/21 8:09 p.m.16 views

EUVD-2026-24477

frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In proxy-style requests, the routing logic uses the username from Proxy-Authorization to select the routeByHTTPUser...

6.5CVSS5.8AI score0.00269EPSS
SaveExploits1References1
Rows per page
Query Builder