6097 matches found
CVE-2026-90942: Incorrect Authorization
Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/get-cert endpoints, allowing organization administrators to retrieve it. Attackers can use the exposed private key to forge JWT tokens for any user in any organization,...
CVE-2026-89176
creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:23+00:00| seen| https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html 2026-09-11 09:51:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6n3dhk4jkjj5m 2026-09-11 11:00:49+00:00| seen|...
CVE-2026-89174
creationtimestamp| type| source ---|---|--- 2026-09-11 08:45:20+00:00| seen| https://www.twcert.org.tw/en/cp-139-11199-38e1e-2.html 2026-09-11 11:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvafzfoddg2o 2026-09-11 12:01:56+00:00| seen|...
BIT-TOMCAT-2026-68569 Apache Tomcat: Principal lookup can fail open in some cases
Improper Authentication vulnerability in Apache Tomcat meant that in some circumstances e.g. CLIENT-CERT, SPNEGO that a user would be authenticated even if the user did not exist in the DataSourceRealm. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, fr...
CERTFR-2026-ALE-010
creationtimestamp| type| source ---|---|--- 2026-09-10 16:04:28+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117247591357513667 2026-09-11 05:56:55+00:00| seen| https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv7v2aa4gf2p 2026-09-12 05:59:52+00:00| seen|...
Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to cert-manager ( CVE-2026-25518 )
Summary Potential vulnerabilities in cert-manager package CVE-2026-25518 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-25518 DESCRIPTION: cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and...
CVE-2026-17038
creationtimestamp| type| source ---|---|--- 2026-09-10 12:15:12+00:00| seen| https://cert.pl/en/posts/2026/09/CVE-2026-17038...
CLEANSTART-2026-HR50080 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the cert-manager package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
PT-2026-89521
passport-saml-encrypted through 0.1.13 makes SAML signature verification conditional on an optional cert option, allowing attackers to bypass authentication by submitting unsigned SAML responses. Attackers can post forged SAML responses with arbitrary NameID and attributes to the assertion consum...
AZL-100914 CVE-2026-83530 affecting package cert-manager for versions less than 1.12.15-14
A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit configured on the CEL environment, and a memory allocation would occur proportional to the size of the input before the limit would be checked / enforced...
CVE-2026-86853
creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86853 2026-09-09 13:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv3okv6hgh2l...
CVE-2026-86736
creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86736...
CVE-2026-86737
creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86737...
CVE-2026-86731
creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86731...
CVE-2026-86734
creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86734...
CVE-2026-86733
creationtimestamp| type| source ---|---|--- 2026-09-08 17:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2klradhbvva6i 2026-09-08 20:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86733 2026-09-11 05:00:06+00:00| seen|...
CVE-2026-86732
creationtimestamp| type| source ---|---|--- 2026-09-08 17:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzirvtrwu2o 2026-09-08 17:52:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a3rrx67pj2usq 2026-09-08 20:15:07+00:00| seen|...
CLEANSTART-2026-TF85238 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Multiple security vulnerabilities affect the cert-manager package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CERTFR-2026-ACT-038
creationtimestamp| type| source ---|---|--- 2026-09-07 13:16:34+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3muwlqpl73d2v 2026-09-07 13:16:41+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117229944394912620...