CVE-2026-60010 Gitea organization team policy bypass through repository API

Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changin...

[SECURITY] [DSA 6560-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6560-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 14, 2026 https://www.debian.org/security/faq -...

CVE-2026-110631 Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration

Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty corepublickeys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...

EUVD-2026-101259

Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty corepublickeys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...

CVE-2026-110631

Komodo versions through 2.3.3 contain an authentication bypass vulnerability in the Periphery agent . The root cause is that the core_public_keys and passkeys lists fail open by default when left empty. This allows unauthenticated attackers reaching port 8120 to present any generated keypair to c...

CVE-2026-110631 Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration

Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty corepublickeys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to...

CVE-2026-110620

Versions of Formbricks prior to 4.9.0 are vulnerable to a Cross-Organization IDOR (Insecure Direct Object Reference) flaw. The root cause is an authorization bypass where server actions, such as resetSurveyAction and updateSegmentAction, fail to verify if the provided organizationId owns the targ...

EUVD-2026-101248

Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify resource ownership against the supplied organizationId. Authenticated owners or managers of any organization can pair their own organization...

CVE-2026-110620 Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId

Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify resource ownership against the supplied organizationId. Authenticated owners or managers of any organization can pair their own organization...

CVE-2026-110620 Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId

Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify resource ownership against the supplied organizationId. Authenticated owners or managers of any organization can pair their own organization...

CVE-2026-110612

The vlife application (versions through 2.0.1 ) is vulnerable to an authentication bypass due to a hardcoded HS256 signing key located in the TokenUtil component. This flaw allows unauthenticated attackers to forge JWTs by injecting superUser=true and arbitrary groupIds claims, granting them supe...

EUVD-2026-101240

vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on...

CVE-2026-110612 vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil

vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on...

CVE-2026-110611

REBUILD through 4.5.0 contains an authorization bypass vulnerability within the AiBot2Controller /aibot2 endpoints. The application fails to verify ownership of a caller-supplied chatid , allowing authenticated low-privilege users to access unauthorized data. Attackers can target the chat-init, c...

CVE-2026-110611 REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid

REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or...

EUVD-2026-101239

REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or...

CVE-2026-110611 REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid

REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can supply another user's chatid to chat-init, chat-delete, chat-feedback, or...

EUVD-2026-101235

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request...

CVE-2026-110607 BizSpring Shop through commit cf22d39daaf1 Payment Bypass via test_post_pay Endpoint

BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request...

CVE-2026-110607

The BizSpring Shop (specifically through commit cf22d39daaf1 ) contains a payment verification bypass vulnerability. The flaw resides in the PaymentController.testPostPay handler, allowing authenticated buyers to mark orders as paid without actual payment. An attacker can generate a payment log v...