42 matches found
CVE-2026-26828
creationtimestamp| type| source ---|---|--- 2026-03-23 16:16:47+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-26828...
CVE-2026-4083
creationtimestamp| type| source ---|---|--- 2026-03-20 23:16:29+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4083...
CVE-2026-3350
creationtimestamp| type| source ---|---|--- 2026-03-20 23:16:27+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3350...
CVE-2026-31968
creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31968 2026-03-19 21:58:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgypxws6x2h...
CVE-2026-3708
creationtimestamp| type| source ---|---|--- 2026-03-08 04:16:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3708...
CVE-2020-26214
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
WS-2022-0299
In Alerta, versions v7.0.0 through v8.7.0 are vulnerable to Stored Cross-Site Scripting XSS, in the full name field. When an admin clicks on the groups page the XSS payload will trigger and send authorization token to the attacker’s server which leads to admin account takeover...
Khan Academy: Access to alerta.khanacademy.org leak sensitive data
Hi , I found to access https://alerta.khanacademy.org/ using signup bypass.That leak access to sensitive data of khanacademy.org Step To Reproduce: 1. Go to https://alerta.khanacademy.org//signup 2. Inspect Q and remove ng-hide F1121291 3. You got Signup Form. Signup account using...
LDAP Authentication Bypass
alerta is vulnerable to LDAP authentication bypass. An attacker is able to bypass LDAP authentication by providing an empty password when the server is configured to use LDAP as the authentication provider...
Alerta Authentication Bypass Vulnerability
Alerta is a monitoring system written in Python by an individual developer. An authentication bypass vulnerability exists in Alerta versions prior to 8.1.0, which stems from a user supplying an empty password when configuring the Alerta server to use LDAP as the authorization provider, then they...
CVE-2020-26214
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
CVE-2020-26214
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
Authentication flaw
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
PYSEC-2020-159
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
PYSEC-2020-159
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
CVE-2020-26214 LDAP authentication bypass in Alerta
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
CVE-2020-26214
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...
CVE-2020-26214
Summary (CVE-2020-26214) : Alerta prior to version 8.1.0 is vulnerable to an LDAP authentication bypass when LDAP is used as the authorization provider and the LDAP server allows unauthenticated binds. An attacker can bypass authentication by providing an empty password. The issue affects deploym...
LDAP authentication bypass with empty password
Impact Users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated binds eg. default on Active Directory are affected. Patch...
CVE-2020-26214: Improper Authentication
In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...