299436 matches found
CVE-2026-77285
A flaw was found in OpenBao Agent. The agent's exec rendering mode can incorrectly write secrets from envtemplate to standard output. This occurs when the template runner is re-created after repeated rendering failures, specifically when numretries is met. A local user, process supervisor, or log...
CVE-2026-82368
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches...
EUVD-2026-85550
Joomla Extension - joomshaper.com - Broken Access Control ACL Bypass in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The allowEdit method in ApiController.php hardcoded return true;, bypassing Joomla component-level and asset-level ACL permission checks. Any authenticated...
CVE-2026-90904 Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0
Joomla Extension - joomshaper.com - Broken Access Control ACL Bypass in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The allowEdit method in ApiController.php hardcoded return true;, bypassing Joomla component-level and asset-level ACL permission checks. Any authenticated...
EUVD-2026-85535
HostList.list catches bare Exception and returns stre verbatim. Via hostfilter, any authenticated user triggers Django FieldError leaking complete Host model relation graph including internal reverse accessors or PostgreSQL DataError leaking raw database error strings. Two primitives:...
CVE-2026-71461 Automation-controller: automation-controller-container: automation-controller: verbose internal exception disclosure via hostlist bare-exception handler
HostList.list catches bare Exception and returns stre verbatim. Via hostfilter, any authenticated user triggers Django FieldError leaking complete Host model relation graph including internal reverse accessors or PostgreSQL DataError leaking raw database error strings. Two primitives:...
CVE-2026-71461
The Red Hat Ansible Automation Platform 2.7 Container Release is affected by CVE-2026-71461, which involves a verbose internal exception disclosure in the HostList.list() function. The component catches a bare Exception and returns the error string verbatim. An authenticated user can trigger a Dj...
EUVD-2026-85494
Subscriber Arbitrary File Deletion in WP User Frontend = 4.3.11 versions...
CVE-2026-95525 WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in WP User Frontend = 4.3.11 versions...
CVE-2026-95525
The WP User Frontend plugin for WordPress, affecting versions
CVE-2026-95524 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WP User Frontend = 4.3.11 versions...
EUVD-2026-85492
Subscriber Bypass Vulnerability in WP User Frontend = 4.3.11 versions...
CVE-2026-95523 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Subscriber Bypass Vulnerability in WP User Frontend = 4.3.11 versions...
CVE-2026-95524
The WP User Frontend WordPress plugin, affecting versions
CVE-2026-95523 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Subscriber Bypass Vulnerability in WP User Frontend = 4.3.11 versions...
CVE-2026-95523
The WP User Frontend plugin for WordPress, versions
CVE-2026-95524 WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WP User Frontend = 4.3.11 versions...
EUVD-2026-85493
Unauthenticated Bypass Vulnerability in WP User Frontend = 4.3.11 versions...