211597 matches found
CVE-2026-115413
Missing token audience validation in the OAuth authentication mode of AWS API MCP Server before version 1.6.0 might allow local users to run AWS operations with the server's configured AWS credentials via an access token issued to another application by the same identity provider. To remediate th...
CVE-2026-118176
Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...
UBUNTU-CVE-2026-118176
Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...
CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116684
The Model Context Protocol Python SDK versions 1.10.0 through 1.30.0 and 2.2.0 are vulnerable to a resource-confusion flaw in the server-side bearer authentication. When configured via AuthSettings with token_verifier, the TokenVerifier fails to independently validate the aud audience , causing t...
CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
EUVD-2026-111369
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116684
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with tokenverifier accepts a valid token issued for another service when the...
CVE-2026-102814
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...
CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
CVE-2026-118176
Thunderbird on Windows is vulnerable to a bypass of remote UNC path restrictions in mailbox: URLs . An attacker can use extended-length UNC paths to bypass security checks by displaying a specially crafted email. This causes Thunderbird to connect to an SMB server chosen by the attacker, potentia...
EUVD-2026-111353
Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...
grafana: SSO secrets readable by low-privileged users when an experimental feature is enabled
A flaw was found in Grafana. When the experimental Kubernetes Single Sign-On SSO settings Application Programming Interface API feature toggle is enabled, the service fails to enforce proper authorization checks. An authenticated user with low-privilege Viewer permissions can exploit this...
CVE-2026-102814 Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...
CVE-2026-102814 Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...
EUVD-2026-111273
An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an unauthenticated attacker on the same local network to forge protocol packets and access privileged TDDP operations, including functionalit...
CVE-2026-102814
The TP-Link RE305 V3 is vulnerable to an authentication weakness in the TDDP v2 service . The service utilizes a fixed and derivable cryptographic key, which allows an unauthenticated attacker on the same local network to forge protocol packets. By accessing privileged TDDP operations, an attacke...
CVE-2026-102813
An authentication flaw exists in the password-recovery functionality of the TP-Link RE305 V3 . The vulnerability resides in the verification-code interface , which allows an unauthenticated attacker on the same local network to trigger the generation of an administrator password-reset code. The f...
EUVD-2026-111272
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-reset verification code. Because the interface lacks an effecti...