CVE-2026-81915

Concrete CMS below 9.5.3 has a missing object-level authorization check in the Types::submit() dashboard controller. When updating a Page Type, the controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType(), allowing a signed-in dashboard user a...

CVE-2026-68526 Concrete CMS before 9.5.3 is vulnerable to CSRF in the Calendar event duplicate dialog controller

Concrete CMS before 9.5.3 did not validate an anti-CSRF token in the Calendar event duplicate dialog controller concrete/controllers/dialog/event/duplicate.php submit action, which duplicated a calendar event after checking only canAccess and the per-resource canAddCalendarEvent permission, so a...

EUVD-2026-75890

An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...

CVE-2026-84941

An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...

PT-2026-90151

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.3 Description An object-level authorization failure occurs when updating a Page Type. The Types::submit dashboard controller processes the ptID variable provided by the user to load and save a Page Type witho...

PT-2026-90186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The cros usbpd-charger driver probe iterates based on the raw charger port count provided by the embedded controller. Because the driver only checks against the number of USB PD ports...

PT-2026-90505

Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross-site scripting XSS vulnerability in the public, unauthenticated shared-folder image gallery. A file's name is fully attacker-controlled and is never...

CVE-2026-84941: Improper Restriction of XML External Entity Reference

An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...

CVE-2026-89470: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: crosusbpd: Limit port counts to ECUSBPDMAXPORTS Currently the crosusbpd-charger driver probe iterates based on raw charger port count returned by the embedded controller. The only check is against the number of USB...

PT-2026-90335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The function quickspi hid raw request receives a buffer length via the len variable, but this...

CVE-2026-84941

CVE-2026-84941 is an XML External Entity (XXE) injection vulnerability in the SAML IdP Metadata Parsing of Omada Controller . An authenticated user with SAML configuration privileges can exploit insufficient validation of user-supplied SAML metadata to read arbitrary local files, leading to infor...

CVE-2026-84941 Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read

An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...

CVE-2026-84941 Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read

An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...

Exploit for Stack-based Buffer Overflow in Microsoft

🛡️ AI Security Tool Module CVE-2026-4...

CLEANSTART-2026-WZ31386 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the ingress-nginx-controller package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

PT-2026-89658

An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the store and update functions of the API user controller, where user records are saved before verifying that the submitted company identifiers ar...

CVE-2026-86740

Snipe-IT before 8.7.0 fails to check the return value of Storage::delete in UploadedFilesController::destroy and Api\UploadedFilesController::destroy, allowing deletion requests to report success while files remain on disk. Administrators performing attachment deletions receive success responses...

CVE-2026-86760

Snipe-IT versions 8.2.0 through 8.6.x (fixed in 8.7.0 ) contain an incorrect authorization flaw in the single-user edit controller (UsersController::update). The activated field was assigned from the request payload before the canEditAuthFields authorization gate was evaluated. An authenticated n...

EUVD-2026-74924

Snipe-IT is an open source IT asset management system. In versions up to and including 8.6.3, the report acceptance endpoints POST /reports/unacceptedassets/sentreminder ReportsController::sentAssetAcceptanceReminder and DELETE /reports/unacceptedassets/acceptanceId/delete...