CVE-2026-106493

The Backstage developer portal framework is vulnerable to a path validation issue in its cloud storage catalog providers prior to version 1.54.6 . Specifically, the framework failed to sufficiently validate object paths, allowing a principal with permissions to create or rename objects in Azure B...

CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106490 Backstage: Improper input validation in TechDocs static content requests

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

CVE-2026-106490

The Backstage framework is vulnerable to an improper input validation flaw in the @backstage/plugin-techdocs-backend package prior to version 2.2.4 . When utilizing the Azure Blob Storage provider , an authenticated user may be able to access restricted TechDocs content if entity-level permission...

CVE-2026-106490 Backstage: Improper input validation in TechDocs static content requests

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

CVE-2026-106490 Backstage: Improper input validation in TechDocs static content requests

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

CVE-2026-9226

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

EUVD-2026-93779

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

CVE-2026-9226

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

CVE-2026-9226

An authentication bypass vulnerability exists in the Azure AD external login flow of Devolutions Server version 2026.3.7.0 and earlier . A remote attacker can exploit this by capturing and replaying a login-session token exposed in a redirect URL, potentially leading to full account takeover . No...

CVE-2025-54914-PoC

CVE-2025-54914 Azure 경로 익스플로잇 개요 이것은 CVE-2025-54914 Azure Networking 경로 익스플로잇의 개선된 구현입니다. 이 버전은 핵심 CVE 기능을 유지하면서 지속성, 회피, 다중 대상 스캐닝 및 오류 처리와 같은 추가 기능을 제공합니다. 기능 핵심 CVE 기능 경로 생성 : Azure 가상 네트워크에 악성 경로를 생성합니다. 경로 삭제 : 생성된 경로를 정리하기 위해 제거합니다. API 호환성 : Azure Management API 2025-09-01과 함께 작동합니다. 인증 :...

CVE-2025-1242

CVE-2025-1242: IoT Hub 관리자 자격 증명 노출 권고 필드| 값 ---|--- CVE| CVE-2025-1242 ICSA| ICSA-26-055-03 CVSS 3.1| 9.1 치명적 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE| CWE-798 하드코딩된 자격 증명 사용 연구자| Michael Groberman — Gr0m 게시일| 2026-02-24 제품 필드| 값 ---|--- 공급업체| Gardyn 제품| Gardyn Home Kit 1.0, 2.0, 3.0...

CVE-2025-10681

CVE-2025-10681: 하드코딩된 Azure Blob Storage 계정 키 권고 항목| 값 ---|--- CVE| CVE-2025-10681 ICSA| ICSA-26-055-03 CVSS 3.1| 8.6 높음 벡터| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L CWE| CWE-798 하드코딩된 자격 증명 사용 연구자| Michael Groberman — Gr0m 게시일| 2026-02-24 제품 항목| 값 ---|--- 공급업체| Gardyn 제품| Gardyn Home Kit 1.0...

CVE-2026-50338

CVE-2026-50338 Spring Cloud Azure B2C 리소스 서버 교차 발급자 인증 우회 설명 spring-cloud-azure-autoconfigure의 AadB2cResourceServerAutoConfiguration은 AadB2cTrustedIssuerRepository.java:30을 통해 AadTrustedIssuerRepository에서 상속된 6개의 AAD 계열 발급자login.microsoftonline.com, sts.windows.net, sts.chinacloudapi.cn, 각각 v1 및...

CVE-2026-13768

CVE-2026-13768 - Gardyn IoT Hub 소유자 키 노출 !WARNING 이 저장소는 고심각도 IoT 취약점에 대한 완전한 기능의 개념 증명PoC을 포함하고 있습니다. 이 코드는 교육 목적, 승인된 보안 연구, 방어적 테스트를 위해 엄격히 제공 됩니다. 무단 사용은 불법입니다. 소유자의 명시적인 서면 허가 없이 시스템을 테스트하거나 악용하는 것은 컴퓨터 사기 및 남용 법률CFAA, EU 사이버 복원력 법Cyber Resilience Act 및 해당 관할권의 기타 관련 법률을 위반합니다. 저자는 이 코드로 인한...

PT-2026-107110

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

PT-2026-107271

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper input validation during static content requests. When the Azure Blob Storage provider is utilized and entity-level permissions are...

PT-2026-107278

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.54.6 Description Cloud storage catalog providers do not sufficiently validate object paths. A principal with permissions to create or rename objects in a configured AWS S3 or Azure Blob Storage catalog source can...