GO-2026-6046 Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories in code.gitea.io/gitea

Gitea: LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories in code.gitea.io/gitea...

CVE-2026-64829

Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode field in qa-include/app/users-edit.php...

UBUNTU-CVE-2026-13057

An issue in the server’s Atlas Search integration allows an authenticated user to bypass per-user access controls. In sharded topologies, the $search and $searchMeta aggregation stages use internal routing that is normally populated only by the trusted router during sharded search planning. Due t...

CVE-2026-3482

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request...

CVE-2026-3482

IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0–6.2.0.5_2; 6.2.1.0–6.2.1.1_2; and 6.2.2.0–6.2.2.0_1 are affected by CVE-2026-3482, a CWE-639 authorization bypass. An unauthenticated user can read sensitive information by bypassing authentication via a specially crafted ...

USN-8589-1 apache2 vulnerabilities

It was discovered that Apache HTTP Server's modldap module incorrectly handled memory when processing per-directory configurations. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-29167 It was discovered that Apache HTTP Server's...

Vulnerabilities in Oracle Analytics

Oracle has identified several vulnerabilities in Oracle BI Publisher versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 and Oracle Business Intelligence Enterprise Edition versions 8.2.0.0.0 and 26.01.0.0.0. The vulnerabilities in Oracle BI Publisher and Oracle Business Intelligence Enterprise Editi...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager Base Platform versions 13.5 and 24.1. These vulnerabilities enable attackers to perform unauthorized read, write, create, delete, and modify actions on sensitive data via network access via HTTPS or HTTP, either without...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the ServeHTTP function in pkg/middlewares/replacepathregex/replacepathregex.go, which forwards the post-substitution path to the backend without checking whether it normalizes to a different route. An attacker can...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the ServeHTTP function in pkg/middlewares/replacepathregex/replacepathregex.go, which forwards the post-substitution path to the backend without checking whether it normalizes to a different route. An attacker can...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the ServeHTTP function in pkg/middlewares/replacepathregex/replacepathregex.go, which forwards the post-substitution path to the backend without checking whether it normalizes to a different route. An attacker can...

CVE-2026-62144

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...

CVE-2026-62144 Management Authentication Bypass and Privilege Escalation

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...

EUVD-2026-47701

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security...

CVE-2026-62144

CVE-2026-62144 describes an authentication bypass in Check Point’s Security Management and Multi-Domain Security Management Server. An unauthenticated attacker can run administrative commands on the Management Server, with possible command execution on connected Security Gateways. Exploitation re...

CVE-2026-16232 Authentication Bypass in the SmartConsole Login Process Using an Application Token

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security polici...

CVE-2026-16232

CVE-2026-16232 concerns an authentication bypass in Check Point SmartConsole login. An unauthenticated remote attacker can obtain an application login token and authenticate with full administrative privileges, enabling changes to security policies/configurations. Exploitation requires internet a...

EUVD-2026-47700

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security polici...

CVE-2026-16232 Authentication Bypass in the SmartConsole Login Process Using an Application Token

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security polici...

GHSA-RHG6-2VJH-J5QC Duplicate Advisory: Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cxjq-mrr5-89rv. This link is maintained to preserve external references. Original Description Traefik versions = v3.6.0 = v3.7.0 = v3.7.6 contain an authentication bypass via path traversal in the ReplacePathReg...