USN-8090-1: OpenSSH vulnerabilities

Jeremy Brown discovered that the OpenSSH GSSAPI Key Exchange incorrectly handled disconnecting clients. In non-default configurations where the GSSAPIKeyExchange setting is enabled, a remote attacker could use this issue to cause OpenSSH to crash, resulting in a denial of service, or possibly...

GHSA-3Q28-QJRV-QR39 Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint

Summary The OIDC authorization endpoint allows users with a TOTP-pending session password verified, TOTP not yet completed to obtain authorization codes. An attacker who knows a user's password but not their TOTP secret can obtain valid OIDC tokens, completely bypassing the second factor. Details...

Tinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint

Summary The OIDC authorization endpoint allows users with a TOTP-pending session password verified, TOTP not yet completed to obtain authorization codes. An attacker who knows a user's password but not their TOTP secret can obtain valid OIDC tokens, completely bypassing the second factor. Details...

GHSA-XG2Q-62G2-CVCM Tinyauth's OIDC authorization codes are not bound to client on token exchange

Summary The OIDC token endpoint does not verify that the client exchanging an authorization code is the same client the code was issued to. A malicious OIDC client operator can exchange another client's authorization code using their own client credentials, obtaining tokens for users who never...

EUVD-2026-11679

Tinyauth's OIDC authorization codes are not bound to client on token exchange...

Tinyauth's OIDC authorization codes are not bound to client on token exchange

Summary The OIDC token endpoint does not verify that the client exchanging an authorization code is the same client the code was issued to. A malicious OIDC client operator can exchange another client's authorization code using their own client credentials, obtaining tokens for users who never...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

CVE-2026-31896

creationtimestamp| type| source ---|---|--- 2026-03-12 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116215030080166205 2026-03-12 07:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mgtux5aze32o...

CVE-2026-31957

creationtimestamp| type| source ---|---|--- 2026-03-12 06:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116214676048572168...

CVE-2026-27591

creationtimestamp| type| source ---|---|--- 2026-03-12 01:30:39+00:00| seen| https://infosec.exchange/users/offseq/statuses/116213614461031957 2026-03-12 12:48:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mgugq5rnq32h 2026-03-12 23:01:22+00:00| seen|...

CVE-2026-3936

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:17:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214269969549098 2026-03-12 20:02:08+00:00| seen|...

CVE-2026-3919

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:03:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214214929795362 2026-03-12 21:50:05+00:00| seen|...

CVE-2026-3934

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-13 03:54:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116219841835730721 2026-03-16 00:00:00+00:00| seen|...

CVE-2026-20046

creationtimestamp| type| source ---|---|--- 2026-03-11 23:50:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213220098846252 2026-03-12 03:00:08+00:00| seen| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W 2026-03-12...

CVE-2026-3978

creationtimestamp| type| source ---|---|--- 2026-03-11 23:37:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213168958136766 2026-03-12 03:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3978 2026-03-12 16:17:58+00:00| seen|...

CVE-2025-70244

creationtimestamp| type| source ---|---|--- 2026-03-11 23:10:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213062812879067 2026-03-12 08:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgtwm7ojre2u...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error in the token exchange endpoint /api/1.0/unity-control/auth/tokens that processes JWTs. An attacker can gain unauthorized access and impersonate any user by supplying a JWT with a malicious issuer, as the endpoint...

CVE-2026-27478

Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint /api/1.0/unity-control/auth/tokens. The endpoint extracts the issuer iss claim from incoming JWTs and uses it to...

CVE-2026-27478

CVE-2026-27478 relates to Unity Catalog (0.4.0 and earlier). The vulnerability is a critical authentication bypass in the token exchange endpoint at /api/1.0/unity-control/auth/tokens, where the issuer (iss) claim from incoming JWTs is used to dynamically fetch the JWKS endpoint for signature val...

CVE-2026-27478 Unity Catalog has a JWT Issuer Validation Bypass Allows Complete User Impersonation

Unity Catalog is an open, multi-modal Catalog for data and AI. In 0.4.0 and earlier, a critical authentication bypass vulnerability exists in the Unity Catalog token exchange endpoint /api/1.0/unity-control/auth/tokens. The endpoint extracts the issuer iss claim from incoming JWTs and uses it to...