CVE-2026-24062

The CVE-2026-24062 entry describes an issue in the MacOS Privileged Helper of Arturia Software Center where the Privileged Helper does not perform sufficient client code signature validation during XPC connections. This allows an attacker to connect to the helper and execute privileged actions, r...

CVE-2026-24062 Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center

The "Privileged Helper" component of the Arturia Software Center MacOS does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation...

Malicious code in wpt-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6928aebd6d492c4618abb9136b97cdf065cf37f91fab0e0a11a5688cd0e4f5f7 The package wpt-client was found to contain malicious code...

MAL-2026-1878 Malicious code in wpt-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6928aebd6d492c4618abb9136b97cdf065cf37f91fab0e0a11a5688cd0e4f5f7 The package wpt-client was found to contain malicious code...

Malicious code in proleis-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85952294cce10a5f7f25e077525b1d985ea33ce37974d44535fc894f5fcec749 The package proleis-rest-client was found to contain malicious code...

MAL-2026-1823 Malicious code in proleis-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85952294cce10a5f7f25e077525b1d985ea33ce37974d44535fc894f5fcec749 The package proleis-rest-client was found to contain malicious code...

MAL-2026-1641 Malicious code in @uc-platform/user-service-client-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b540186390d5c469d9b5de607c8d6b64fc0315e70c245ec70c16f1732058cc The package @uc-platform/user-service-client-ts was found to contain malicious code...

MAL-2026-1639 Malicious code in @uc-platform/advertisement-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b168c7f137b260fe9d6fa7c0962aa3ab273f66f1f5bfabe7f0daadeb79ef7323 The package @uc-platform/advertisement-service-client was found to contain malicious code...

Malicious code in @uc-platform/advertisement-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b168c7f137b260fe9d6fa7c0962aa3ab273f66f1f5bfabe7f0daadeb79ef7323 The package @uc-platform/advertisement-service-client was found to contain malicious code...

Malicious code in @polymarket-developers/clob-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345ca83f0d4f9589714459a50b08e9f733a7d56bbb131b029748ad244a2d447b The package @polymarket-developers/clob-client was found to contain malicious code...

MAL-2026-1635 Malicious code in @polymarket-developers/clob-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345ca83f0d4f9589714459a50b08e9f733a7d56bbb131b029748ad244a2d447b The package @polymarket-developers/clob-client was found to contain malicious code...

Malicious code in test6789.client (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-1890 Malicious code in test6789.client (NuGet)

--- -= Per source details. Do not edit below this line.=-...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

EUVD-2026-12762

A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources...

CVE-2026-4366

A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources...

CVE-2026-4366

A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources...

CVE-2026-4366 Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak

A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources...