EUVD-2026-117443

Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08...

CVE-2026-114277

Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz's optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08...

CVE-2026-114277

The Apache OFBiz ecommerce component contains an authentication bypass vulnerability in its optional Janrain Engage Social Login integration. The flaw arises because the system improperly binds authenticated external identities to local user accounts, categorized as an Assumed-Immutable data vuln...

Modification of Assumed-Immutable Data (MAID)

Overview i18next is an internationalization framework for browser or any other javascript environment eg. node.js. Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID via the deepExtend function in src/utils.js, which uses the in operator to check for...

Modification of Assumed-Immutable Data (MAID)

Overview org.webjars.npm:node-forge is a WebJar for node-forge. Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID in the pki.verifyCertificateChain function in lib/x509.js. An attacker can permanently disable verification against an affected trusted C...

Modification of Assumed-Immutable Data (MAID)

Overview node-forge is a JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities. Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID in the pki.verifyCertificateChain function in lib/x509.js...

Microsoft Identity Web Authorization Vulnerability

The Microsoft Identity Web component has an authorization issue. This vulnerability stems from the use of assumed-immutable data, which allows authentication bypasses. It may enable authorized attackers to escalate their privileges through the network...

Modification of Assumed-Immutable Data (MAID)

Overview org.webjars.npm:msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID via the readInt64BE function in lib/decoder.js, which mutates the input buffer...

Modification of Assumed-Immutable Data (MAID)

Overview msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID via the readInt64BE function in lib/decoder.js, which mutates the input buffer in-place when...

Modification of Assumed-Immutable Data (MAID)

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Modification of Assumed-Immutable Data MAID in the Object.getOwnPropertyDescriptor or lookupSetter process. An attacker can modify properties that we...

ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass

A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...

ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass

A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...

ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass

A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...

EUVD-2026-54315

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481: Modification of Assumed-Immutable Data (MAID)

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

Azure Active Directory Elevation of Privilege Vulnerability

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

PT-2026-68825

Name of the Vulnerable Software and Affected Versions Azure Active Directory affected versions not specified Description An authorized attacker can elevate privileges over a network by modifying assumed-immutable data maid within Azure Active Directory. Assumed-immutable data refers to attributes...

BIT-DOTNET-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

BIT-DOTNET-SDK-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...