CVE-2026-100252

A flaw was found in Apache ZooKeeper. When Simple Authentication and Security Layer SASL authentication is enabled, the server fails to properly validate the authorization identity requested by a client against its authenticated credentials. An authenticated remote client can exploit this flaw by...

CVE-2026-117681

A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatically disables Transport Layer Security TLS certificate verification for connections to internal backend services in environments lacking a default service certificate authority...

Forescout Technologies SecureConnector encryption issue vulnerability

Forescout Technologies SecureConnector versions 11.3.20 and earlier contain an encryption vulnerability. This vulnerability arises when the “Additional Appliance Connections” setting is enabled and the proxy configuration file contains more than three entries for trusted servers; in such cases,...

CVE-2026-63244

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

CVE-2026-63244 Authentication Bypass Vulnerability

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

CVE-2026-63244

An authentication bypass vulnerability exists in WizLearn Technologies' Learning Management System (LMS) . An unauthenticated remote attacker can bypass both password authentication and the OAuth authentication flow by sending a specially crafted POST request . Successful exploitation could lead ...

CVE-2026-63244 Authentication Bypass Vulnerability

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

EUVD-2026-108611

An authentication bypass vulnerability in WizLearn Technologies' Learning Management System LMS could allow an unauthenticated remote attacker to bypass password authentication and the OAuth authentication flow by sending a specially crafted POST request, potentially resulting in unauthorised...

PT-2026-121787

Name of the Vulnerable Software and Affected Versions WizLearn Technologies' Learning Management System affected versions not specified Description An authentication bypass allows an unauthenticated remote attacker to circumvent password authentication and the OAuth authentication flow. This is...

WizLearn Technologies Learning Management System security vulnerability

The WizLearn Technologies Learning Management System contains a security vulnerability stemming from an authentication bypass issue. Remote attackers can exploit this by sending specially crafted POST requests, thereby bypassing both password and OAuth authentication mechanisms. This could result...

CVE-2026-110744

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744

A vulnerability exists in multicluster-global-hub-operator-bundle due to overly broad role-based access control (RBAC) permissions. This flaw allows for unrestricted, cluster-wide impersonation of arbitrary users, groups, and service accounts. An attacker who successfully compromises the operator...

CVE-2026-110744 Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

EUVD-2026-107418

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

CVE-2026-110744

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

PT-2026-120727

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control RBAC permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator...

Vulnerability related to permission and access control issues in Red Hat Multicluster Global Hub

The Red Hat Multicluster Global Hub contains a vulnerability related to permission and access control issues. This vulnerability arises because an operator has configured overly permissive Role-Based Access Control RBAC settings. As a result, it is possible to impersonate any user, group, or...

CVE-2026-111690

Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign a JWT with the public secret and roleId claim 001 to gain fu...

CVE-2026-111641

FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login endpoints. Attackers can list users via /api/v1/auth/auto-login/users, mint a superuser auto-login token, and exchange i...

CVE-2026-97712

A flaw was found in Sonatype Nexus Repository. This vulnerability allows an authenticated remote user with permissions to create or update roles to assign roles and privileges that their own account does not possess. By exploiting this issue, an attacker can achieve privilege escalation,...