Lucene search
+L

6 matches found

EUVD
EUVD
added 2026/09/08 3:48 p.m.5 views

EUVD-2026-72877

In affected Snowflake drivers, WORKLOADIDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a...

8.2CVSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/09/08 3:48 p.m.9 views

CVE-2026-86600 Workload identity attestation generated before login host validation in Snowflake drivers

In affected Snowflake drivers, WORKLOADIDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying that the configured host is a Snowflake endpoint. An attacker who can modify the connection configuration can cause the driver to mint a...

8.2CVSS
SaveExploits0References8
CVE
CVE
added 2026/09/08 3:48 p.m.8 views

CVE-2026-86600

Snowflake drivers (PHP PDO, .NET, Go, Python, ODBC, libsnowflakeclient, JDBC, Node.js) are affected by a flaw in WORKLOAD_IDENTITY authentication: the driver mints a cloud workload-identity token and attaches it to the login request without verifying the configured host is a Snowflake endpoint . ...

8.2CVSS
SaveExploits0References8
CVE
CVE
added 2026/06/25 4:07 p.m.29 views

CVE-2026-55412

ToolJet (open-source platform) Vulnerability: SSRF in the RestAPI data source component allows authenticated users to induce server-side HTTP requests that bypass its private IP filter via DNS trickery (169.254.169.254.nip.io), potentially stealing Azure managed identity tokens for the AKS produc...

8.3CVSS5.9AI score0.00319EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/25 4:07 p.m.18 views

CVE-2026-55412

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...

8.3CVSS5.9AI score0.00319EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/25 4:07 p.m.11 views

CVE-2026-55412 ToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromise

ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents. Prior to 3.20.178-lts, there's an SSRF in the RestAPI data source component. The RestAPI data source executes HTTP requests server-side, and its private IP filter only...

8.3CVSS5.9AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder