EUVD-2026-9274

The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators...

CVE-2026-2628 All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass

The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators...

CVE-2026-2628

The CVE-2026-2628 concerns the All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress. Affected: all versions up to and including 2.2.5. Nature: authentication bypass, enabling unauthenticated users to log in as other users (including administrators). Impact: high (CVE metr...

This Week in Spring - March 3rd, 2026

Hi Spring fans! Welcome to another rip-roaring installment of This Week in Spring! I'm writing this in an Uber en route to the airport to get to awsome Atlanta, GA, for Devnexus 2026! Who's goin'? You goin'? We - the Spring team - will be there in force! Come say hi at the boothes or come see our...

WordPress plugin: All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-22830

Name of the Vulnerable Software and Affected Versions Devolutions Server versions 2025.3.15.0 and earlier Description An authentication bypass exists in the Microsoft Entra ID Azure AD authentication mode. An unauthenticated user can authenticate as an arbitrary Entra ID user by using a forged JS...

CVE-2026-2628: Authentication Bypass Using an Alternate Path or Channel

The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5. This makes it possible for unauthenticated attackers to bypass authentication and log in as other users, including administrators...

Security update for python-azure-core (important)

openSUSE security update: security update for python-azure-core ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20292-1 Rating: important References: bsc1257703 Cross-References: CVE-2026-21226 CVSS scores: CVE-2026-21226 SUSE : 7.5...

devops-security-pipeline-poc

DevOps Security Pipeline POC A security-integrated CI/CD pipe...

SUSE-SU-2026:20621-1 Security update for python-azure-core

This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. bsc1257703...

SUSE-SU-2026:20617-1 Security update for python-azure-core

This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. bsc1257703...

OPENSUSE-SU-2026:20292-1 Security update for python-azure-core

This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. bsc1257703...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: metrics-server-fips, kuma, livekit-server-fips, cosign, kaniko, terraform-provider-grafana, kaniko-fips, knative-net-istio-fips, rke2-cloud-provider-fips, ops-agent, docker-cli-buildx-fips, cluster-api-fips, ferretdb, flux-notification-controller-fips,...

Security Bulletin: IBM IBM Edge Data Collector uses azure_core-1.14.0-py2.py3-none-any.whl which is vulnerable to CVE-2026-21226.

Summary IBM IBM Edge Data Collector uses azurecore-1.14.0-py2.py3-none-any.whl which is vulnerable to CVE-2026-21226. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-21226 DESCRIPTION: Deserialization of untrusted data in Azure Core shared...

USN-8029-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2969 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

datapizza-ai-parsers-azure (0.0.2), datapizza-ai-parsers-docling (0.0.2) +1 more potentially affected by CVE-2026-2970 via datapizza-ai-core (0.0.1)

datapizza-ai-core PYPI version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on datapizza-ai-core and may be impacted: - datapizza-ai-parsers-azure 0.0.2 - datapizza-ai-parsers-docling 0.0.2 - datapizza-ai-tools-duckduckgo 0.0.2 Source cves:...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-27171)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-27171 advisory. - zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because...