624 matches found
CVE-2026-8381
A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...
CVE-2026-8381
A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...
CVE-2026-8381 Broken Access Control in TeamViewer DEX Platform (On Premises)
A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...
CVE-2026-8381 Broken Access Control in TeamViewer DEX Platform (On Premises)
A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...
EUVD-2026-31420
A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...
TeamViewer DEX Platform On-Premises 安全漏洞
The TeamViewer DEX Platform On-Premises is a locally deployed digital employee experience management platform by the German company TeamViewer. Prior to version 9.2 of the TeamViewer DEX Platform On-Premises, there were security vulnerabilities. These vulnerabilities stemmed from incorrect...
PT-2026-42736
A broken access control vulnerability exists in the TeamViewer DEX Platform On‑Premises prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an authenticated user with low privileges to perform actions and access resources intended only for...
EUVD-2026-30056
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...
CVE-2026-2695
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...
CVE-2026-2695 Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...
CVE-2026-2695
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...
CVE-2026-2695 Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)
A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises former 1E DEX Platform On-Premises prior to version 9.2. Improper input validation allows authenticated users with at least questioner privileges to inject commands in specific instructions. Exploitation could...
Argo Affected by SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
Summary A nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization causes a panic denial of service for SSO users whose claims match a namespace-level RBAC rule but not an SSO-namespace rule, when SSODELEGATERBACTONAMESPACE=true. Details When getServiceAccountclaims, ssoNamespace...
GHSA-MH2Q-Q3FH-2475 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3-fips, kuma, cloudflared, crossplane-provider-aws-firehose, knative-kafka-broker, crossplane-provider-aws-ec2-fips, gitlab-kas-fips, consul-fips, crossplane-provider-aws-cloudsearch, external-dns-fips, crossplane-provider-aws-memorydb,...
CVE-2026-29181 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-s3-fips, kuma, cloudflared, crossplane-provider-aws-firehose, knative-kafka-broker, crossplane-provider-aws-ec2-fips, gitlab-kas-fips, consul-fips, crossplane-provider-aws-cloudsearch, external-dns-fips, crossplane-provider-aws-memorydb,...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: rancher-agent, teleport, minio, dex, zot, gitlab-runner, xeol, rancher, cert-manager-csi-driver, kyverno-notation-aws, telegraf, flux-source-controller, harbor, openbao, rancher-webhook, flux, k6, frp, yunikorn-k8shim, terraform, gitea, external-secrets-operator,...
GHSA-PJCQ-XVWQ-HHPJ vulnerabilities
Vulnerabilities for packages: rancher-agent, teleport, minio, dex, zot, gitlab-runner, xeol, rancher, cert-manager-csi-driver, kyverno-notation-aws, telegraf, flux-source-controller, harbor, openbao, rancher-webhook, flux, k6, frp, yunikorn-k8shim, terraform, gitea, external-secrets-operator,...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-auth, trufflehog, flux-source-controller, agentbeat-fips, cert-manager-google-cas-issuer, cert-manager-fips, cert-manager-istio-csr, flux-source-controller-fips, neuvector-fips, cert-manager-csi-driver, telegraf, bento-fips,...