104 matches found
@n8n/backend-module-insights (0.1.0), n8n (>=2.43.0, <=2.43.4) potentially affected by CVE-2026-118649 via @n8n/backend-services (>=1.3.0, <=1.3.2)
@n8n/backend-services NPM version =1.3.0, =2.43.0, =2.43.4 Source cves: CVE-2026-118649 Source advisory: MEND:CVE-2026-118649...
@n8n/backend-module-insights (0.2.0), n8n (2.44.0) potentially affected by CVE-2026-118649 via @n8n/backend-services (1.4.0)
@n8n/backend-services NPM version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/backend-services and may be impacted: - @n8n/backend-module-insights 0.2.0 - n8n 2.44.0 Source cves: CVE-2026-118649 Source advisory: MEND:CVE-2026-118649...
CVE-2026-102503
Missing Authentication for Critical Function CWE-306 and Missing Authorization CWE-862 in the /libp2p-http ingress server StartIngressServer in cmd/sam-node/node.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass...
CVE-2026-102503 Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)
Missing Authentication for Critical Function CWE-306 and Missing Authorization CWE-862 in the /libp2p-http ingress server StartIngressServer in cmd/sam-node/node.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass...
CVE-2026-102503 Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)
Missing Authentication for Critical Function CWE-306 and Missing Authorization CWE-862 in the /libp2p-http ingress server StartIngressServer in cmd/sam-node/node.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass...
CVE-2026-102503 Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)
Missing Authentication for Critical Function CWE-306 and Missing Authorization CWE-862 in the /libp2p-http ingress server StartIngressServer in cmd/sam-node/node.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass...
EUVD-2026-104049
Missing Authentication for Critical Function CWE-306 and Missing Authorization CWE-862 in the /libp2p-http ingress server StartIngressServer in cmd/sam-node/node.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass...
CVE-2026-102503
Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.2 are vulnerable to missing authentication and authorization in the /libp2p-http ingress server. Specifically, the StartIngressServer function in cmd/sam-node/node.go fails to verify Biscuit tokens or mesh enrollment, allowing...
CVE-2026-102503
Missing Authentication for Critical Function CWE-306 and Missing Authorization CWE-862 in the /libp2p-http ingress server StartIngressServer in cmd/sam-node/node.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 allow an unauthenticated remote libp2p peer to bypass...
PT-2026-117209
Name of the Vulnerable Software and Affected Versions Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha.2 Description Missing authentication and authorization in the /libp2p-http ingress server, specifically within the StartIngressServer function in cmd/sam-node/node.go, allow ...
Google Agent Mesh Authorization Vulnerability
The Google Agent Mesh version 0.1.0-alpha.1 to 0.1.0-alpha.2 contains an authorization vulnerability. This vulnerability stems from the lack of key functionality for authentication and authorization in the/libp2p-http entry server. Biscuit tokens or grid registrations are not verified, resulting ...
@n8n/backend-module-insights (0.1.0), n8n (>=2.43.0, <=2.43.4) potentially affected by unknown CVE via @n8n/backend-services (>=1.3.0, <=1.3.2)
@n8n/backend-services NPM version =1.3.0, =2.43.0, =2.43.4 Source cves: unknown CVE Source advisory: MEND:WS-2026-0168...
@n8n/backend-module-insights (0.2.0), n8n (2.44.0) potentially affected by unknown CVE via @n8n/backend-services (1.4.0)
@n8n/backend-services NPM version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/backend-services and may be impacted: - @n8n/backend-module-insights 0.2.0 - n8n 2.44.0 Source cves: unknown CVE Source advisory: MEND:WS-2026-0168...
CVE-2026-106486
A flaw was found in the Backstage Bitbucket Scaffolder backend modules. The Bitbucket pull request Scaffolder actions do not properly validate filesystem paths. An authenticated attacker who can execute an eligible template and influence an allowed repository can manipulate files outside the...
CVE-2026-89207
A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...
CVE-2026-89207
CVE-2026-89207 affects the web interfaces of the Siemens WTV676-HB6035 (all versions < V3.94) and WTV776-HB6035 (all versions
CVE-2026-89207
A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...
EUVD-2026-80250
A vulnerability has been identified in WTV676-HB6035 Web Interface All versions V3.94, WTV776-HB6035 Web Interface All versions V4.17. Affected devices do not properly validate input received from backend services. This could allow an unauthenticated remote attacker to force the device into...
CVE-2026-16581 Inclusion of sensitive information in source code in igloohome Smart Lock Mobile Application
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulnerability could allow an unauthorized actor to access functions or backend services that were not sufficiently protected by authentication controls...
CVE-2026-16581
In igloohome Smart Lock Mobile App versions 3.2.3 and earlier, the CVE-2026-16581 describes an Inclusion of Sensitive Information in Source Code that could allow an unauthorized actor to access functions or backend services not sufficiently protected by authentication controls. The affected softw...