Lucene search
+L

172688 matches found

CVE
CVE
added 2026/08/06 5:32 p.m.60 views

CVE-2025-12317

Technical details are not publicly available in the provided documents. Monitor for updates.

5CVSS5.5AI score0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/06 5:32 p.m.32 views

CVE-2025-12317 Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access Privileges

When internal roles are removed from a user within the WSO2 product, the system fails to invalidate any previously issued authentication tokens associated with that user. This vulnerability could allow users to retain their previous access privileges even after their roles have been revoked. As a...

5CVSS0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/06 5:31 p.m.34 views

CVE-2024-6541 Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products

The Class Mediator fails to correctly validate or sanitize messageContext properties when they are used to populate dynamic values. This allows authenticated users to potentially access or modify data across different system invocations that should be isolated. This weakness can lead to the...

6.8CVSS0.00256EPSS
SaveExploits0References1
Fedora
Fedora
added 2026/08/06 5:17 p.m.13 views

[SECURITY] Fedora 44 Update: freeipa-4.13.2-1.fc44

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

8.8CVSS5.5AI score0.0062EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/06 4:54 p.m.35 views

CVE-2026-70635 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

7.1CVSS0.00359EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/06 4:53 p.m.32 views

EUVD-2026-41940

Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth...

10CVSS5.4AI score0.00208EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/06 4:53 p.m.7 views

GHSA-X677-9FXG-V5C5 Traefik: Incomplete fix for CVE-2026-33433 + CVE-2026-39858 cross-cohort: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth

Summary There is a high severity vulnerability in Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares. The fix for CVE-2026-33433 stripped canonical-cased spoofed identity headers e.g. X-Auth-User before writing Traefik's own value, but did not account for underscore-variant header names...

7.8CVSS5.6AI score0.00208EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/06 4:51 p.m.17 views

EUVD-2026-47644

Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware...

7.8CVSS5.4AI score0.00412EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/06 4:51 p.m.8 views

GHSA-CXJQ-MRR5-89RV Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware

Summary There is a critical authentication-bypass vulnerability in Traefik's ReplacePathRegex middleware. When it is configured with a regular expression that captures user-controlled path segments without a mandatory separator for example regex: "^/api.", replacement: "/$1", a crafted request ca...

9.1CVSS5.6AI score0.00412EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
added 2026/08/06 4:45 p.m.23 views

Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass

Summary There is a high severity vulnerability in Traefik's Kubernetes Ingress NGINX provider. When an Ingress uses the nginx.ingress.kubernetes.io/rewrite-target annotation with a regular expression that captures attacker-controlled text without requiring a path separator for example path /api...

7.8CVSS5.7AI score0.00492EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/08/06 4:45 p.m.17 views

EUVD-2026-51815

Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass...

7.8CVSS5.4AI score0.00492EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/06 4:45 p.m.9 views

GHSA-8RXV-JG7P-WVG3 Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass

Summary There is a high severity vulnerability in Traefik's Kubernetes Ingress NGINX provider. When an Ingress uses the nginx.ingress.kubernetes.io/rewrite-target annotation with a regular expression that captures attacker-controlled text without requiring a path separator for example path /api...

7.8CVSS5.7AI score0.00492EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/06 4:34 p.m.8 views

CVE-2026-71326 Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

2.1CVSS5.2AI score0.00356EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/06 4:34 p.m.14 views

EUVD-2026-54297

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

2.1CVSS5.5AI score0.00356EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/06 4:34 p.m.17 views

CVE-2026-71326 Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

2.1CVSS5.3AI score
SaveExploits0References7
NVD
NVD
added 2026/08/06 4:16 p.m.27 views

CVE-2026-5423

@neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a client-supplied, pre-decoded JWT object passed through GraphQL subscription connectionParams. As a result, any unauthenticated remote client that can open a GraphQL-over-WebSocket connection can forge arbitrary JW...

8.2CVSS0.00357EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/06 4:16 p.m.12 views

CVE-2026-53977

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler...

8.7CVSS0.00521EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/08/06 3:56 p.m.18 views

Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

Summary There is a critical vulnerability in Traefik's default HTTP reverse proxy that leads to unauthenticated cross-user response poisoning. When a client opens an HTTP/2 or HTTP/3 CONNECT request, Traefik forwards it — body included — to an HTTP/1.1 upstream over a shared net/http.Transport. I...

7CVSS5.4AI score0.00551EPSS
SaveExploits0References11Affected Software3
Vulnrichment
Vulnrichment
added 2026/08/06 3:56 p.m.17 views

CVE-2026-71324 Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream through a shared net/http.Transport. When the upstream answers the CONNE...

7CVSS5.3AI score0.00551EPSS
SaveExploits0References10
CVE
CVE
added 2026/08/06 3:38 p.m.57 views

CVE-2026-53983

The CVE concerns Ground Station prior to 0.6.0, exposing an unauthenticated blind SSRF via the orbital-source URL path. An unauthenticated Socket.IO client can connect on port 7000 (credentials not required, wildcard CORS) and submit a data_submission with submit-orbital-sources to store an attac...

9.2CVSS5.5AI score0.00325EPSS
SaveExploits0References3
Rows per page
Query Builder