175301 matches found
CVE-2026-73519 WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the requireauth gate...
CVE-2026-19017
A flaw was found in Consul. A privileged attacker with operator:write permission can exploit a partial arbitrary file read vulnerability when Consul is configured to use the Vault Connect CA provider with JWT or AppRole authentication. This allows the attacker to direct Consul to read and forward...
undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation
A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure a...
CVE-2026-73305
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:26+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-j9fc-w3mr-x6mv 2026-08-14 01:01:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msyxhdipyh26...
CVE-2026-73308
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:15+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-gh4h-34gr-87r7...
CVE-2026-73406
creationtimestamp| type| source ---|---|--- 2026-08-12 20:35:13+00:00| published-proof-of-concept| https://github.com/Budibase/budibase/security/advisories/GHSA-hr66-5mqr-8mpx 2026-08-12 21:01:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvzmlg3ko22...
USN-8632-1 node-follow-redirects vulnerability
Dennis Sepede discovered that follow-redirects did not properly remove custom authentication headers when following cross-domain redirects. An attacker could possibly use this issue to obtain sensitive authentication information, resulting in credential disclosure...
CVE-2026-16723 vulnerabilities
Vulnerabilities for packages: seata...
CVE-2026-59845 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59847 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59848 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-JP6G-7MQJ-WJ53 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59843 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59849 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-FVWJ-J79Q-57V7 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59842 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-6J7F-8JJP-MM8C vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-X94W-CG8G-G593 vulnerabilities
Vulnerabilities for packages: libssh...