CLEANSTART-2026-QY26018 When audit logging is enabled (zookeeper

CVE-2026-84439 affects multiple packages. When audit logging is enabled zookeeper. See references for individual vulnerability details...

gryph

AI coding agents have no security boundaries. Gryph is building one. Everyone runs YOLO mode. Gryph enforces guardrails and keeps the audit trail. Quick Start · Demo · Supported Agents · Use Cases · Security Policy AI coding agents Claude Code, Cursor, Windsurf, Gemini CLI, OpenCode can read any...

CVE-2026-41504

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes attacker-influenced request and response fields without neutralizing carriage returns or line feeds. When...

EUVD-2026-97826

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes attacker-influenced request and response fields without neutralizing carriage returns or line feeds. When...

CVE-2026-41504

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes attacker-influenced request and response fields without neutralizing carriage returns or line feeds. When...

CVE-2026-85959

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse...

EUVD-2026-97673

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse...

CVE-2026-85959

The Progress MarkLogic Server is impacted by CVE-2026-85959 , where versions 12.x before 12.1.0 and 11.x before 11.3.7 fail to consistently record successful authentication events in audit logs. This insufficient logging (CWE-778) can hinder the ability to detect or investigate unauthorized acces...

CVE-2026-85959 Insufficient authentication logging in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse...

CVE-2026-109183

jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved bills by setting status in POST /depotHead/addDepotHeadAndDetail requests. Attackers can supply a status of 1 to skip audit permission checks and multi-level approval workflows...

CVE-2026-109178

jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to forge, modify, or delete audit log entries. Low-privilege users can call /log/add, /log/update, /log/delete, and /log/deleteBatch to fabricate entries, rewrite user and IP...

CVE-2026-109179

jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation audit log. Low-privilege users can send GET requests to /log/list or /log/info to view other users' login names, client IP addresses, and actions...

CVE-2026-109179

The jshERP software (through version 3.6 ) is affected by a missing authorization vulnerability within the LogController component. This flaw allows any authenticated user to access the tenant's operation audit logs. Specifically, low-privilege users can perform GET requests to the /log/list or /...

EUVD-2026-97383

jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation audit log. Low-privilege users can send GET requests to /log/list or /log/info to view other users' login names, client IP addresses, and actions...

CVE-2026-109179 jshERP through 3.6 Missing Authorization via /log/list and /log/info

jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation audit log. Low-privilege users can send GET requests to /log/list or /log/info to view other users' login names, client IP addresses, and actions...

CVE-2026-109178

Versions of jshERP through 3.6 are impacted by a missing authorization vulnerability within the LogController . This flaw allows any authenticated user, including those with low privileges, to access endpoints such as /log/add, /log/update, /log/delete, and /log/deleteBatch. Attackers can exploit...

CVE-2026-109178 jshERP through 3.6 Missing Authorization via /log Audit Endpoints

jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to forge, modify, or delete audit log entries. Low-privilege users can call /log/add, /log/update, /log/delete, and /log/deleteBatch to fabricate entries, rewrite user and IP...

CVE-2026-85959: Insufficient Logging

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse...

CVE-2026-109178: Missing Authorization

jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to forge, modify, or delete audit log entries. Low-privilege users can call /log/add, /log/update, /log/delete, and /log/deleteBatch to fabricate entries, rewrite user and IP...

PT-2026-110791

🚨 CVE-2026-85959 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse. 🎖@cveNotify...