CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

EUVD-2026-51556

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

The CVE-2026-18141 entry concerns aap-gateway in Ansible Automation Platform’s Event-Driven Ansible (EDA). Affected component: aap-gateway. Vulnerability: an unauthenticated remote attacker can bypass mutual TLS on event streams by manipulating the event stream URL and forging the HTTP Subject he...

CVE-2026-18141 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-18141

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

CVE-2026-65310

creationtimestamp| type| source ---|---|--- 2026-07-31 09:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7a4bpwbxcymga 2026-07-31 14:34:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrx6em7wg22g...

GHSA-XC5W-4V5W-7X65

creationtimestamp| type| source ---|---|--- 2026-07-31 08:32:20+00:00| seen| https://gist.github.com/alon710/006ebdb624799640fa8e05feb88f3b11...

CVE-2026-14483

creationtimestamp| type| source ---|---|--- 2026-07-31 07:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwfyokgir24 2026-07-31 08:01:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gjlyfysyioviq 2026-08-01 21:00:04+00:00| seen|...

GHSA-52JP-GJ8W-J6XH

creationtimestamp| type| source ---|---|--- 2026-07-31 04:31:56+00:00| seen| https://gist.github.com/alon710/2fc91b89bbac8024e4e2b03ecca2ce62...

CVE-2026-55499

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

CVE-2026-55499 Cloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

EUVD-2026-51393

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

CVE-2026-55499

CVE-2026-55499 (Cloudreve) Prior to version 4.17.0, an authenticated recipient of a single-file share can receive real-time events for files in the owner’s parent folder, not just the shared item. The mechanism subscribes to the owner’s parent ID for a single-file share root, and the event hub fa...

CVE-2026-55499 Cloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

GHSA-H669-8M4G-R2HC

creationtimestamp| type| source ---|---|--- 2026-07-31 03:34:09+00:00| seen| https://gist.github.com/alon710/0adfedd2017833afe3a395108d8a9b0f...

PT-2026-66778

A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...

GHSA-QQ9Q-XGM3-XV9G

creationtimestamp| type| source ---|---|--- 2026-07-30 22:32:21+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47 2026-07-31 00:01:11+00:00| seen| https://gist.github.com/alon710/118a4cdb35451ca1b82ac84f2659aa47...

CVE-2026-67206

creationtimestamp| type| source ---|---|--- 2026-07-30 21:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvdihpl222o 2026-08-02 08:02:13+00:00| seen| https://t.me/GithubRedTeam/96249 2026-08-03 02:07:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96...