CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...

MINI-9XV6-MF37-53HJ

Bulletin has no description...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: flink-kubernetes-operator, ranger, kayenta-fips, apache-camel-karavan-devmode, apache-activemq-artemis-fips, spdx-tools-java, wazuh-indexer, zipkin, druid, apache-jena-fuseki, apache-hop, cruise-control-fips, airbyte-platform, ghidra, nuxeo, opensearch-fips,...

CVE-2026-71311 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-8V25-V8P6-QF7V vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-54572 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-73643 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, renovate...

CVE-2026-73569 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...

CVE-2026-64887

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...

CVE-2026-19908

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The...

CVE-2026-17182

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...

CVE-2026-17175

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

CVE-2026-16905

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

MINI-3WW8-2QHG-W6RM

Bulletin has no description...

CVE-2026-71571

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-19910

CVE-2026-19910 affects PAX Technology Q80, specifically the Application Installer. The flaw is a signature verification bypass in the installer, allowing a network-adjacent attacker (no authentication, high attack complexity) to execute arbitrary code with root privileges by installing a signed-b...

CVE-2026-19910

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

CVE-2026-19910 PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

CVE-2026-19908

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The...