11557 matches found
Security Advisory 0197
Security Advisory 0197 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-102167 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSSv4.0 Base Score: 9.0...
PT-2026-115981
Summary Before Langflow 1.10.3, several built-in components sent server-side HTTP requests to URLs the flow author controls, with no SSRF enforcement. An authenticated user who can build or run flows could make the Langflow server reach loopback, RFC 1918 / private networks, link-local addresses...
CVE-2026-94293: Missing Authentication for Critical Function
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...
PT-2026-107152
Name of the Vulnerable Software and Affected Versions Arista Wi-Fi access points affected versions not specified Description A memory corruption issue exists in the wired uplink network endpoints of the access point. This flaw allows an unauthenticated attacker located on the same network segment...
CVE-2026-105762 Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...
CVE-2026-105762 Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...
CVE-2026-71299
A flaw was discovered in Maestro where its REST API write endpoints were registered without proper authentication middleware . This vulnerability allows a remote attacker to perform unauthorized write operations, specifically creating, modifying, or deleting consumers and resource bundles . Such ...
CVE-2026-104975
The open-source project management tool Plane contains a cross-tenant asset authorization bypass in the Spaces app . Specifically, the EntityAssetEndpoint and AssetRestoreEndpoint within plane/space/views/asset.py serve public-board operations under /api/public/ but fail to implement necessary me...
OpenAM Pre-Auth Deserialization RCE (CVE-2026-33439)
Exploits CVE-2026-33439 in OpenAM = 16.0.5: unsafe Java deserialization of jato.clientSession on password reset endpoints bypasses the WhitelistObjectInputStream mitigation applied to jato.pageSession. !/usr/bin/env python3 -- coding: utf-8 -- """OpenAM jato.clientSession deserialization RCE...
Citrix Bleed Session Token Steal (CVE-2023-4966)
Auxiliary module for CVE-2023-4966 Citrix Bleed: sends an oversized Host header to NetScaler OAuth endpoints to trigger an out-of-bounds memory read and capture leaked session cookies/tokens from the response body. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix Bleed session token leak...
Cisco Secure FMC Authentication Bypass (CVE-2026-20079)
Exploits CVE-2026-20079 in Cisco Secure Firewall Management Center: crafted CGISESSID=csmprocesses cookie bypasses authentication on CGI endpoints, exposing FMC system information and privileged management surfaces. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco Secure Firewall FMC boot-time...
NVIDIA Triton Inference Server Auth Bypass (CVE-2026-24207)
Exploits CVE-2026-24207 in NVIDIA Triton Inference Server = 26.02: unauthenticated access to restricted HTTP APIs including /models and model management endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """NVIDIA Triton Inference Server auth bypass CVE-2026-24207.""" import json from kittysplo...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fixed the issue of duplicate endpoints by clearing the reserved bits in the descriptor. Syzbot has identified a bug in usbcore see the Closes tag below. The bug is caused by our assumption that the reserved bits in the...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: carl9170 – added a proper sanity check for endpoints. Syzkaller reports that a warning was triggered due to the presence of an incorrect endpoint type during the URB processing stage. Although a check was performed for a...
PT-2026-106274
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote files.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 - Joomla Improper Access Check An issue has be...
EUVD-2026-91824
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead t...
EUVD-2026-91832
Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints...
CVE-2026-95102
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead t...