CVE-2026-25534

creationtimestamp| type| source ---|---|--- 2026-03-17 19:58:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhbr3krzdq2x 2026-03-18 01:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116247588300935274 2026-03-18 01:30:32+00:00| seen|...

CVE-2026-25534 Spinnaker clouddriver and orca URL validation bypass via underscores in hostnames

Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver. However, they missed that Java URL objects do not correctly handle underscores on parsing. This led to a bypass of the previous CVE CVE-2025-61916 through the use of carefully...

CVE-2026-25534

Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver. However, they missed that Java URL objects do not correctly handle underscores on parsing. This led to a bypass of the previous CVE CVE-2025-61916 through the use of carefully...

CVE-2019-25534

CVE-2019-25534 affects Netartmedia PHP Car Dealer. An SQL injection allows unauthenticated attackers to submit crafted SQL via the features[] parameter in POST requests to index.php, enabling extraction of sensitive database information or manipulation of queries. CVSS scores indicate high severi...

io.spinnaker.clouddriver:clouddriver-api-tck (5.76.3), io.spinnaker.clouddriver:clouddriver-appengine (5.76.3) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.76.3)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.76.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.76.3 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.77.0), io.spinnaker.clouddriver:clouddriver-appengine (5.77.0) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.77.0)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.77.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.77.0 -...

io.spinnaker.clouddriver:clouddriver-api-tck (main-289), io.spinnaker.clouddriver:clouddriver-appengine (main-289) +22 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (main-289)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version main-289 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck main-289 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.80.0), io.spinnaker.clouddriver:clouddriver-appengine (5.80.0) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.80.0)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.80.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.80.0 -...

io.spinnaker.clouddriver:clouddriver-api-tck (main-297), io.spinnaker.clouddriver:clouddriver-appengine (main-297) +22 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (main-297)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version main-297 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck main-297 -...

io.spinnaker.clouddriver:clouddriver-appengine (main-303), io.spinnaker.clouddriver:clouddriver-artifacts-bitbucket (main-303) +21 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (main-303)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version main-303 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-appengine main-303 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.85.3), io.spinnaker.clouddriver:clouddriver-appengine (5.85.3) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.85.3)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.85.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.85.3 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.87.0), io.spinnaker.clouddriver:clouddriver-appengine (5.87.0) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.87.0)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.87.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.87.0 -...

io.spinnaker.clouddriver:clouddriver-api-tck (main-332), io.spinnaker.clouddriver:clouddriver-appengine (main-332) +24 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (main-332)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version main-332 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck main-332 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.90.0), io.spinnaker.clouddriver:clouddriver-appengine (5.90.0) +9 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.90.0)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.90.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.90.0 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.88.0), io.spinnaker.clouddriver:clouddriver-appengine (5.88.0) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.88.0)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.88.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.88.0 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.74.3), io.spinnaker.clouddriver:clouddriver-appengine (5.74.3) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.74.3)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.74.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.74.3 -...

io.spinnaker.clouddriver:clouddriver-appengine (main-300), io.spinnaker.clouddriver:clouddriver-artifacts-bitbucket (main-300) +21 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (main-300)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version main-300 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-appengine main-300 -...

io.spinnaker.clouddriver:clouddriver-api-tck (5.80.4), io.spinnaker.clouddriver:clouddriver-appengine (5.80.4) +6 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (5.80.4)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version 5.80.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-api-tck 5.80.4 -...

io.spinnaker.clouddriver:clouddriver-appengine (main-310), io.spinnaker.clouddriver:clouddriver-artifacts-bitbucket (main-310) +21 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (main-310)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version main-310 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-appengine main-310 -...

io.spinnaker.clouddriver:clouddriver-appengine (main-324), io.spinnaker.clouddriver:clouddriver-artifacts-bitbucket (main-324) +20 more potentially affected by CVE-2025-61916 +1 more via io.spinnaker.clouddriver:clouddriver-artifacts (main-324)

io.spinnaker.clouddriver:clouddriver-artifacts MAVEN version main-324 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.clouddriver:clouddriver-artifacts and may be impacted: - io.spinnaker.clouddriver:clouddriver-appengine main-324 -...