Microsoft Exchange Online 授权问题漏洞

Microsoft Exchange Online is an enterprise-level cloud email and calendar service open source by Microsoft. There is an authorization issue vulnerability in Microsoft Exchange Online; this vulnerability stems from improper authorization, which may allow unauthorized attackers to disclose...

CVE-2026-50751 - User Authentication bypass on VPN Remote Access and Mobile Access in deprecated IKEv1 key exchange

Symptoms - An attacker can bypass user authentication by exploiting a logic flow weakness in the Remote Access and Mobile Access certificate validation and establish a remote access VPN connection without a valid user password. Check Point is aware of this vulnerability being exploited in the wil...

PT-2026-46406

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no...

CVE-2026-46270

creationtimestamp| type| source ---|---|--- 2026-06-03 20:16:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116688012686345151 2026-07-02 06:53:05+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 08:00:58+00:00|...

CVE-2026-46273

creationtimestamp| type| source ---|---|--- 2026-06-03 20:02:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116687957214915029 2026-07-02 07:18:05+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702 2026-07-06 06:22:37+00:00| see...

CVE-2026-31942

creationtimestamp| type| source ---|---|--- 2026-06-03 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116684647649200501...

CVE-2026-32625

creationtimestamp| type| source ---|---|--- 2026-06-03 00:00:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116683232788673466 2026-06-03 00:00:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mndsj3gb3q24 2026-06-03 00:01:18+00:00| seen|...

Email item data export from EWS failed

Challenge Exchange Online backup jobs in Veeam Backup for Microsoft 365 and Veeam Data Cloud for Microsoft 365 may fail to process mailboxes, returning one of the following errors: Processing mailbox failed with error: Email item data export from EWS failed item IDs: .... The operation has timed...

CVE-2026-9097

Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active. The GetTokenExchangeToken function in object/tokenoauth.go validates the JWT signature and parses its claims, but never queries the Token table to verify whether the subject token has been revok...

CVE-2026-9094

Casdoor versions 2.362.0 and earlier contain a vulnerability enabling cross-organization token exchange. The GetTokenExchangeToken function in object/tokenoauth.go validates JWT signatures but does not verify that the token's user belongs to the same organization as the target application. This c...

CVE-2026-10629

creationtimestamp| type| source ---|---|--- 2026-06-02 21:23:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116682615290341234 2026-06-02 21:23:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116682616422398554 2026-06-03 00:02:33+00:00| seen|...

CVE-2026-48132

The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used 4500/UDP. As a result, a specially crafted or malformed packet can cause the VPN processing service to terminate unexpectedly, leading to denial of service temporary interruption of VPN...

CVE-2026-8293

creationtimestamp| type| source ---|---|--- 2026-06-02 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116679339265385389 2026-06-02 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnc36jcnba2k 2026-06-02 09:43:15+00:00| seen|...

CVE-2026-0072

creationtimestamp| type| source ---|---|--- 2026-06-01 19:26:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116676491126128421 2026-07-17 22:12:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mqurgci5en2o...

CVE-2026-0095

creationtimestamp| type| source ---|---|--- 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260602 2026-06-02 06:41:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116679145256764752 2026-06-02 20:00:00+00:00| seen|...

CVE-2025-48595

creationtimestamp| type| source ---|---|--- 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260602 2026-06-01 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1895 2026-06-02 06:28:12+00:00| seen|...

CVE-2026-46243

creationtimestamp| type| source ---|---|--- 2026-06-01 17:51:47+00:00| seen| https://infosec.exchange/users/wdormann/statuses/116676120156561133 2026-06-01 17:57:16+00:00| seen| https://bsky.app/profile/ifin-intel.org/post/3mnanqg7sy22p 2026-06-02 09:16:28+00:00| seen|...

PYSEC-2026-185

A bug in Apache Airflow's XCom PATCH endpoint PATCH /api/v2/xcomEntries/key allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names e.g. returnvalue that the matching POST endpoint already validated against FORBIDDENXCOMKEYS. The...

Apache Airflow 安全漏洞

Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. Versions of Apache Airflow prior to 3.2.2 contained security vulnerabilities. These vulnerabilities stemmed from the XCom PATCH...

CVE-2026-10270

creationtimestamp| type| source ---|---|--- 2026-05-31 14:28:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116669649537496666 2026-06-03 23:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mng7ycwb2v2e...