50 matches found
CVE-2026-48021
In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...
CVE-2026-54342
The CVE affects epa4all prior to 2026-05-20, where TLS certificate verification is disabled on CXF transport clients. A network attacker can intercept connections between epa4all and backends (ePA Aktensystem, Konnektor, IDP, TSS) by presenting a self-signed certificate. For non-VAU backends (Kon...
CVE-2026-54342 TLS Certificate Verification Disabled on CXF Transport Clients in epa4all
In epa4all, prior to version 2026-05-20, an attacker on the network path between epa4all and any backend ePA Aktensystem, Konnektor, IDP, TSS can present a self-signed TLS certificate and intercept the connection. For non-VAU connections Konnektor, IDP, this allows direct read and modification of...
CVE-2026-49433
The DeepAI endpoint 'https://api.deepai.org/changeuseremail' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a malicious link, the attacker can change the user's email address and take over their account. Fixed on 2026-05-20...
CVE-2026-49433
The DeepAI endpoint 'https://api.deepai.org/changeuseremail' accepts POST requests without any CSRF protection. If an attacker can trick a logged-in user into clicking a malicious link, the attacker can change the user's email address and take over their account. Fixed on 2026-05-20...
DeepAI.org CSRF
RISK EVALUATION The DeepAI.org endpoint https://api.deepai.org/changeuseremail accepts POST requests without any CSRF protection. If a logged-in user is tricked into visiting a malicious HTML page, an attacker can change the user's email address to their own and take over the account via...
CVE-2026-40092
creationtimestamp| type| source ---|---|--- 2026-05-20 22:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcy7grcig2r...
CVE-2026-24218
creationtimestamp| type| source ---|---|--- 2026-05-20 20:52:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcrw542q32e 2026-05-22 22:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmhwoqlnxh2l 2026-07-23 15:37:06+00:00| seen|...
CVE-2026-5783
creationtimestamp| type| source ---|---|--- 2026-05-20 19:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmclqrsf4p2n 2026-07-23 12:21:04+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrct72wrim2y...
CVE-2026-20199
creationtimestamp| type| source ---|---|--- 2026-05-20 19:00:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmclofeilq2k 2026-07-23 12:16:40+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcsxagkhl2e...
CVE-2026-20238
creationtimestamp| type| source ---|---|--- 2026-05-20 18:54:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcle4nvvp2h...
CVE-2009-1537
creationtimestamp| type| source ---|---|--- 2026-05-20 18:00:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/675f3e40-1b20-4f43-8a01-57264171ed3f 2026-05-20 21:13:36+00:00| seen| https://infosec.exchange/users/secdb/statuses/116608677530202595 2026-05-2...
CVE-2026-34653
creationtimestamp| type| source ---|---|--- 2026-05-20 17:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmcfdp7xcn26...
GHSA-XX55-4RRG-8XG6
creationtimestamp| type| source ---|---|--- 2026-05-20 16:56:46+00:00| seen| https://bsky.app/profile/Whiskeyomega.cupoftea.social.ap.brid.gy/post/3mmceqyeaiq72...
GHSA-CRR4-7RM4-8GPW
creationtimestamp| type| source ---|---|--- 2026-05-20 16:56:46+00:00| seen| https://bsky.app/profile/Whiskeyomega.cupoftea.social.ap.brid.gy/post/3mmceqyeaiq72...
CVE-2026-35676
creationtimestamp| type| source ---|---|--- 2026-05-20 15:45:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9qv9-8xv6-5p35 2026-05-28 17:34:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwklaw3se2c...
CVE-2026-3985
creationtimestamp| type| source ---|---|--- 2026-05-20 15:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmc7zsxv322c...
CVE-2026-42383
creationtimestamp| type| source ---|---|--- 2026-05-20 15:08:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmc6q5qqsx2r...