CVE-2026-46745: Improper Neutralization of Special Elements used in an LDAP Query

Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability CWE-90 that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP...

GHSA-RV5F-CCPM-XJJ4 Apache Airflow AWS Auth Manager has Host Header Injection Leading to SAML Authentication Bypass

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You...

CVE-2026-25604 Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You...

CVE-2026-25604

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You...

PT-2026-24054

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 9.22.0 Description The AWS Auth Manager in Apache Airflow did not verify the origin of SAML authentication against the actual instance URL, relying instead on information provided by the client. This allowed fo...

CVE-2026-25604: Origin Validation Error

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You...

CVE-2025-6592

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...

CVE-2025-6592 Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...

EUVD-2018-18101

Malware in sbrugna...

EUVD-2022-27122

Malicious code in bioql PyPI...

MAL-2025-6656 Malicious code in simple-auth-manager-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Xbox Live Auth Manager Privilege Escalation

The vulnerability of the Xbox Live Auth Manager service for Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-21967

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability...

CVE-2022-21967

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability...

Privilege escalation

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability...

CVE-2022-21967

Technical details about CVE-2022-21967 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation information.

CVE-2022-21967: Undefined Security Weakness

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability...

Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability

...

PT-2021-6387 · Microsoft · Xbox Live Auth Manager For Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Xbox Live Auth Manager for Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Xbox Live Auth Manager service for Microsoft Windows,...

PT-2018-17491 · Facebook · Proxygen

Name of the Vulnerable Software and Affected Versions: Proxygen versions v2018.10.29.00 through v2018.11.19.00 Description: The issue is related to the failure of Proxygen to validate that a secondary auth manager is set before dereferencing it, which can cause a denial of service issue. This...