CVE-2026-123782

ChatWiki versions prior to 2.10.0 are vulnerable to an insecure direct object reference (IDOR) within the SaveFormField and UpdateFormRequired functions. This vulnerability allows authenticated users to modify form fields belonging to other tenants by providing their own form_id to pass ownership...

CVE-2026-123624

ChatWiki versions prior to 2.10.0 are susceptible to an insecure direct object reference (IDOR) vulnerability. This flaw allows authenticated users to modify fast commands belonging to other tenants by providing arbitrary sequential IDs to the POST /manage/saveFastCommand endpoint. An attacker ca...

CVE-2026-123624 ChatWiki before 2.10.0 Cross-Tenant Fast Command Modification via saveFastCommand

ChatWiki before 2.10.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify other tenants' fast commands by supplying arbitrary sequential ids to POST /manage/saveFastCommand. Attackers can overwrite another tenant's command title, type, content and...

CVE-2026-116677

A flaw was found in openwisp-controller. An authorization bypass vulnerability in the certificate revocation list CRL download endpoint allows an authenticated user with Certificate Authority CA view permissions to retrieve CRL data belonging to other organizations by specifying their sequential ...

CVE-2026-122320

A flaw was found in Kyverno. An authenticated user with permission to create namespaced policies can bypass authorization controls by templating target namespace values within clone generation rules. By triggering the background controller to copy resources from restricted namespaces into an...

CVE-2026-58273

The Rucio scientific data management framework is vulnerable to an authorization bypass in the /credentials/signurl endpoint. The application incorrectly trusts the client-supplied X-Rucio-Account HTTP header instead of the account identity verified by the authentication token. Consequently, any ...

CVE-2026-84728

Apache OFBiz versions 24.09 before 24.09.08 on all platforms are vulnerable to an Incorrect Authorization flaw when multitenancy is enabled. A remote authenticated attacker with low-privilege access to one tenant can read or write data from a different tenant. This occurs because the LoginWorker ...

CVE-2026-84728 Apache OFBiz: Cross-tenant authorization bypass in mapped-domain login

Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms, when documented multitenancy is enabled, allows a remote authenticated attacker holding only a valid low-privilege account in one tenant to read and write data belonging to a different tenant, by submitting their own...

CVE-2026-122320

Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim...

EUVD-2026-117230

Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim...

PT-2026-137341

Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the background-controller copies a victim...

CVE-2026-97693

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A low-privileged authenticated user who can execute...

CVE-2026-57565 Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled...

CVE-2026-57565 Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user's identifier and a client-controlled...

CVE-2026-57565

The Readest ebook reader (versions prior to 0.11.10 ) is vulnerable to a path traversal flaw in the apps/readest-app/src/pages/api/storage/upload.ts route. The application constructs an object key using a client-controlled fileName without rejecting path separators. Because the R2 backend (apps/r...

CVE-2026-97693 Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A low-privileged authenticated user who can execute...

CVE-2026-97693

The Yuxi platform (versions 0.6.0.beta1 through 0.7.1) suffers from an isolation failure between Docker sandboxes and trusted application services. A low-privileged authenticated user can bypass sandbox boundaries to access other tenants' APIs, files, and secrets, or manipulate the unauthenticate...

PT-2026-137183

Name of the Vulnerable Software and Affected Versions Yuxi versions 0.6.0.beta1 through 0.7.0 Description Insufficient isolation between execution-capable Docker sandboxes and trusted application services allows a low-privileged authenticated user to access other tenants' sandbox APIs, files, and...

Important: Red Hat Security Advisory: Red Hat Edge Manager Version 1.2.2 Security Update

Red Hat Edge Manager Version 1.2.2 Security Update Red Hat Edge Manager RHEM provides simple, scalable, and security-focused management of edge devices and applications. It supports image-mode RHEL and container workloads that run on Podman/Docker or Kubernetes. RHEM is now available as a...

CVE-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak Overview Apache Camel's KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. This means a token issued by one Keycloak realm is silently accepted by a policy configured for a...