CVE-2026-86325

A stack-based buffer overflow vulnerability exists in the account management interface of protocol gateways . The root cause is insufficient length validation of the account_name parameter during account management requests. An attacker authenticated as a read-only user to the web management inte...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

CVE-2026-86325

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

CVE-2026-86325: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the accountname parameter when processing account management requests. An attacker authenticated as a read-only user to the...

PT-2026-104201

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A stack-based buffer overflow occurs in the account management interface of protocol gateways. This issue stems from insufficient length validation of the accou...

CVE-2026-102106

The Kiteworks Email Protection Gateway contains an improper authentication vulnerability within an administrative service. The root cause is that the service fails to consistently enforce administrator authentication, allowing a required password check to be bypassed. An attacker referencing a va...

Malicious Package

Overview @hrmony/account-management is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

Malicious code in @hrmony/account-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b699bc4a206505ba0cf224888996e37fe00dff5ffb737e3b95b9fd139b910f The main module executes on require/import via a top-level await. It queries the AWS IMDSv2 metadata service at 169.254.169.254 to retrieve instance...

MAL-2026-17249 Malicious code in @hrmony/account-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b699bc4a206505ba0cf224888996e37fe00dff5ffb737e3b95b9fd139b910f The main module executes on require/import via a top-level await. It queries the AWS IMDSv2 metadata service at 169.254.169.254 to retrieve instance...

CVE-2026-7884: Improper Neutralization of Input During Web Page Generation

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and views that user's permissions, the...

CVE-2026-73789: Improper Access Control

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...

CVE-2026-82452: Missing Authentication for Critical Function

rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated attackers can create, update, list, retrieve, and delete user accounts by directly accessing unprotected...

CVE-2026-38470

A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...

CVE-2026-38470

A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...

CVE-2026-38470: Improper Access Control

A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...

Mattermost Server 10.11.x < 10.11.22 / 11.7.x < 11.7.7 Multiple Vulnerabilities (MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704 advisories. - Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to prevent guest users from receiving Board Admin...

CVE-2026-16045

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 Mattermost failed to restrict OAuth deauthorization and personal access token management endpoints to direct user sessions, which allowed an OAuth app with a delegated user token to revoke the user's authorizations or tokens for other...