CVE-2026-31968

creationtimestamp| type| source ---|---|--- 2026-03-18 19:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-31968 2026-03-19 21:58:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgypxws6x2h...

CVE-2026-3708

creationtimestamp| type| source ---|---|--- 2026-03-08 04:16:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3708...

CVE-2020-26214

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

Khan Academy: Access to alerta.khanacademy.org leak sensitive data

Hi , I found to access https://alerta.khanacademy.org/ using signup bypass.That leak access to sensitive data of khanacademy.org Step To Reproduce: 1. Go to https://alerta.khanacademy.org//signup 2. Inspect Q and remove ng-hide F1121291 3. You got Signup Form. Signup account using...

LDAP Authentication Bypass

alerta is vulnerable to LDAP authentication bypass. An attacker is able to bypass LDAP authentication by providing an empty password when the server is configured to use LDAP as the authentication provider...

Alerta Authentication Bypass Vulnerability

Alerta is a monitoring system written in Python by an individual developer. An authentication bypass vulnerability exists in Alerta versions prior to 8.1.0, which stems from a user supplying an empty password when configuring the Alerta server to use LDAP as the authorization provider, then they...

CVE-2020-26214

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

CVE-2020-26214

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

PYSEC-2020-159

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

Authentication flaw

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

PYSEC-2020-159

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

CVE-2020-26214 LDAP authentication bypass in Alerta

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated authentication mechanism for...

CVE-2020-26214

Summary (CVE-2020-26214) : Alerta prior to version 8.1.0 is vulnerable to an LDAP authentication bypass when LDAP is used as the authorization provider and the LDAP server allows unauthenticated binds. An attacker can bypass authentication by providing an empty password. The issue affects deploym...

LDAP authentication bypass with empty password

Impact Users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider. Only deployments where LDAP servers are configured to allow unauthenticated binds eg. default on Active Directory are affected. Patch...

coracaoalerta.com.br XSS vulnerability

Open Bug Bounty ID: OBB-606668 Description| Value ---|--- Affected Website:| coracaoalerta.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...