PT-2026-102365

Name of the Vulnerable Software and Affected Versions PyJWT versions 2.13.0 through 2.13.x Description The HMACAlgorithm.prepare key function is affected because the HMAC key guard only recognizes top-level public JSON Web Key JWK forms and fails to identify container representations. This occurs...

ipa security, bug fix, and enhancement update

4.13.4-1.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 - Add bind to ipa-server-common Requires Orabug: 36518596 4.13.4-1 - Resolves: RHEL-248199 CVE-2026-79678 ipa: freeipa: idp-add eval reachable before authorization check allows environment disclosure and denial of...

PT-2026-99756

Name of the Vulnerable Software and Affected Versions DevaslanPHP project-management versions 1.2.1 through 1.2.4 DevaslanPHP project-management version v2.0.0-beta1 Description In the Jira Import component, the updateJiraProjects function within the /jira-import file is susceptible to server-sid...

CVE-2026-102268: Improper Verification of Cryptographic Signature

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2026-102275: Insufficient Verification of Data Authenticity

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

PT-2026-108328

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is pem format in jwt/utils.py is affected because is pem format does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2026-59563: Authentication Bypass by Primary Weakness

Zscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an MCP client or agent to replay a token generated for one resource to affect another resource of the same type. This issue is fixed in version 0.7.2...

PT-2026-99847

Name of the Vulnerable Software and Affected Versions refly-ai refly versions prior to 1.1.1 Description An issue exists in the JWT Token Handler component within the file apps/api/src/modules/config/app.config.ts. Manipulation of the test input can lead to the exposure of hard-coded credentials,...

PT-2026-99963

Name of the Vulnerable Software and Affected Versions StreamsHub Console for Apache Kafka affected versions not specified Description A flaw exists where tenant-supplied Kafka client properties from the Console custom resource are copied into the console-api AdminClient configuration without...

PT-2026-102407

Name of the Vulnerable Software and Affected Versions mall4j versions prior to 4.1 Description The software fails to validate the sysType field within sa-token sessions. This allows storefront customers to authenticate as back-office users by reusing their session tokens. An attacker can register...

CVE-2026-101052: Use of Hard-coded Credentials

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to...

PT-2026-99929

Name of the Vulnerable Software and Affected Versions Network UPS Tools affected versions not specified Description A GitHub Actions script used to prepare tarballs and update GitHub Checks statuses and PR comments was mis-structured. The script mixed code running with higher privileges,...

PT-2026-99791

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description Incorrect authorization in the OAuth 1.0a authorization endpoint allows an unauthenticated remote attacker to bind an outstanding request token for a configured site-wide consumer to an arbitrary user...

PT-2026-99864

mH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible without authentication. An unauthenticated attacker on the LAN can query these endpoints, access system information, and send raw control commands to...

PT-2026-99800

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Description Cross-Site Request Forgery CSRF occurs when the CSRF validation filters accept requests that omit the required salt token, instead validating against a value generated by the server for that request. Thi...

PT-2026-108338

PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.prepare key is affected because asymmetric-key guard relies on textual markers that are absent from DER encoding. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2026-55156: Improper Limitation of a Pathname to a Restricted Directory

Token Optimizer MCP measures token savings per AI coding agent, optimizes context, and shares a live local knowledge graph across 16 CLI clients. Prior to version 5.1.0, the dashboard HTTP server in token-optimizer-mcp exposes /api/session-summary and /api/session-events with no authentication...

CVE-2026-101062

Obot before v0.23.0 affected versions = v0.22.1 running with OBOTSERVERENABLEAUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authorization flow auto-completes for an already...

CVE-2026-101062 Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration

Obot before v0.23.0 affected versions = v0.22.1 running with OBOTSERVERENABLEAUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authorization flow auto-completes for an already...

CVE-2026-101062 Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration

Obot before v0.23.0 affected versions = v0.22.1 running with OBOTSERVERENABLEAUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authorization flow auto-completes for an already...