263420 matches found
GHSA-7VG8-29QX-JGJ8 Payload: Client uploads could overwrite S3 objects
Impact An authenticated user could overwrite an existing S3 object belonging to another upload collection, bypassing that collection’s access controls and prior file validation. You are affected if ALL of these are true: - Client uploads are enabled for multiple collections that share an S3 bucke...
EUVD-2026-93503
Payload: Unauthorized update to collection documents...
Payload: Unauthorized update to collection documents
Impact An attacker can submit a request to a specific endpoint that permits collection documents to be updated regardless of access control and field level access control. You are affected if: - You are configuring orderable: true with any collection or join field. Patches In the patched version...
GHSA-F7HX-52Q9-HCRF Payload: Unauthorized update to collection documents
Impact An attacker can submit a request to a specific endpoint that permits collection documents to be updated regardless of access control and field level access control. You are affected if: - You are configuring orderable: true with any collection or join field. Patches In the patched version...
Exploit for CVE-2026-105844
CVE-2026-105844 — Payload CMS import-export prototype pollutio...
CVE-2026-96335
Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2...
Exploit for CVE-2026-102253
CVE-2026-102253-POC DOS infinite-loop Vulnerability POC Su...
EUVD-2026-93999
Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback...
Backstage: Scaffolder action input authorization bypass
Impact An authenticated user with access to affected Scaffolder templates could bypass configured action restrictions. Depending on integration credentials, this could grant unauthorized access to repositories and related source-control resources. Patches Patched in...
EUVD-2026-94068
Backstage: Scaffolder action input authorization bypass...
GHSA-HMP2-4M7G-22CV Backstage: Scaffolder action input authorization bypass
Impact An authenticated user with access to affected Scaffolder templates could bypass configured action restrictions. Depending on integration credentials, this could grant unauthorized access to repositories and related source-control resources. Patches Patched in...
CVE-2026-106579
A flaw was found in ImageMagick. This issue allows an attacker to bypass access controls and read restricted files, leading to unauthorized information disclosure. By supplying a specially crafted image to a system configured with security policies that restrict image decoders the coder domain, t...
CVE-2026-106503
A flaw was found in the Backstage plugin-scaffolder-backend component. An authorization bypass allows an authenticated user with access to Scaffolder templates to circumvent configured action restrictions. By manipulating action inputs, an attacker can leverage integration credentials to gain...
CVE-2026-76488
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. Th...
CVE-2026-76498
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller APIC engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internall...
CVE-2026-76467
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-76469
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-76463
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-76455
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...