570 matches found
PT-2026-70109
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...
CVE-2026-72537: Improper Privilege Management
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
CVE-2026-53878 vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1, authentik, openstack-horizon-2026.1-fips...
GHSA-CRHF-3PFG-W68W vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1, authentik, openstack-horizon-2026.1-fips...
GHSA-3H9F-R86X-QVJX vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1, authentik, openstack-horizon-2026.1-fips...
CVE-2026-48588 vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1, authentik, openstack-horizon-2026.1-fips...
GHSA-8QCX-XF44-272X vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1, authentik, openstack-horizon-2026.1-fips...
CVE-2026-53877 vulnerabilities
Vulnerabilities for packages: authentik-fips, openstack-horizon-2026.1, authentik, openstack-horizon-2026.1-fips...
GHSA-6HR6-W5QG-QMWG vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, prefect-fips, airflow, mitmproxy, open-webui, apache-beam-python-3.14-sdk, localstack, jupyter-all-spark-notebook...
CVE-2026-71554 vulnerabilities
Vulnerabilities for packages: authentik-fips, authentik, prefect-fips, airflow, mitmproxy, open-webui, apache-beam-python-3.14-sdk, localstack, jupyter-all-spark-notebook...
GHSA-5P4M-2WFM-XMQJ vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, gitlab-rails-ce-fips, mongod, homepage, pulumi, gitlab-rails-ce, unleash, awx, lerna, ts-patch, saf, percona-server-mongodb, code-server, arangodb, jitsucom-jitsu, wazuh-dashboard, kibana, eslint, langfuse-fips, vitess, foxx-cli,...
CVE-2026-69153 vulnerabilities
Vulnerabilities for packages: authentik-fips, vitess, arangodb, authentik, gitlab-rails-ce-fips, kubeflow-pipelines, cadence-web, semaphore, gitlab-rails-ce, keep, keep-fips, langfuse-fips, pelias-api, nextcloud-server, langfuse, renovate, saf...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: authentik-fips, vitess, arangodb, authentik, gitlab-rails-ce-fips, kubeflow-pipelines, cadence-web, semaphore, gitlab-rails-ce, keep, keep-fips, langfuse-fips, pelias-api, nextcloud-server, langfuse, renovate, saf...
GHSA-RGW5-RVV9-X895 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, gitlab-rails-ce-fips, pulumi, dotstatsuite-supercore, gitlab-rails-ce, unleash, gemini-cli, opentelemetry-auto-instrumentations-node, ts-patch, graalvm, saf, arangodb, wazuh-dashboard, rancher-api-ui, langfuse-fips, actions-runner,...
CVE-2026-69152 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, gitlab-rails-ce-fips, pulumi, dotstatsuite-supercore, gitlab-rails-ce, unleash, gemini-cli, opentelemetry-auto-instrumentations-node, ts-patch, graalvm, saf, arangodb, wazuh-dashboard, rancher-api-ui, langfuse-fips, actions-runner,...
GHSA-6G55-P6WH-862Q vulnerabilities
Vulnerabilities for packages: authentik-fips, vitess, arangodb, authentik, gitlab-rails-ce-fips, cadence-web, semaphore, gitlab-rails-ce, keep, keep-fips, langfuse-fips, pelias-api, nextcloud-server, langfuse...
GHSA-PM4M-PH32-GHV5 vulnerabilities
Vulnerabilities for packages: authentik-fips, renovate, kubeflow-pipelines...
GHSA-R28C-9Q8G-F849 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, homepage, gitlab-rails-ce, unleash, arangodb, jitsucom-jitsu, cadence-web, librechat, keep, langfuse-fips, vitess, pelias-api, semaphore, langfuse, authentik, keep-fips, unleash-fips, nextcloud-server, authentik-fips...
CVE-2026-45623 vulnerabilities
Vulnerabilities for packages: authentik-fips, vitess, arangodb, authentik, gitlab-rails-ce-fips, cadence-web, semaphore, gitlab-rails-ce, keep, keep-fips, langfuse-fips, pelias-api, nextcloud-server, langfuse...