CVE-2026-34486

CVE-2026-34486 Apache Tomcat Tribes 클러스터링의 EncryptInterceptor fail-open 우회로 인한 Java 역직렬화를 통한 비인증 RCE. 영향: 11.0.19+, 10.1.53+, 9.0.116+. 수정 버전: 11.0.21, 10.1.54, 9.0.117. Bartlomiej Dmitrukstriga.ai가 발견 및 보고했습니다. 상세 분석: https://striga.ai/research/tomcat-tribes-unauth-rce 요구 사항 Docker Java 21 Pytho...

Dolibarr <=22.0.4 - Local File Inclusion

Dolibarr = 22.0.4 contains a local file inclusion caused by manipulation of the objectdesc parameter and a fail-open logic flaw in restrictedArea in /core/ajax/selectobject.php, letting authenticated users with no specific privileges read arbitrary non-PHP files. id: CVE-2026-34036 info: name:...

CVE-2026-105127

LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...

ams-failopen

AppleMediaServices의 Fail-Open 서명 제로데이 공개 요약 이 문제는 실제 제로데이 취약점으로, 특정 버전의 회귀 버그라기보다는 AppleMediaServices.framework의 구조적 설계 결함을 반영합니다. Apple의 AppleMediaServices 프레임워크에 있는 심각한 fail-open 결함으로 인해 원격 구성 파일"Bag"을 로드하지 못하면 요청 서명이 자동으로 비활성화될 수 있습니다. 이는 iOS, macOS, tvOS 및 watchOS에 영향을 미칩니다. DNS 조작, 시간 초과 또는...

CVE-2026-104002

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...

CVE-2026-1357-POC

CVE-2026-1357 — WPvivid Backup & Migration RCE CVE クレジット: Lucas Montes NiRoX ツール作成者: CyberTechAjju CVSS: 9.8 Critical | 影響を受けるバージョン: ≤ 0.9.123 | 修正済み: 0.9.124 ⚠️ 免責事項 許可されたセキュリティテスト専用 です。システムへの不正アクセスは違法です。 概要 WPvivid Backup & Migration における、2つの連鎖するバグによる認証なし RCE: 1. Crypto Fail-Open —...

POC-CVE-2026-1357

CVE-2026-1357 WPvivid Backup & Migration RCE PoC 発見者: Lucas Montes NiRoX 脆弱性: 認証不要の任意ファイルアップロードによるリモートコード実行（RCE） CVE ID: CVE-2026-1357 CVSS: Critical9.8 ステータス: バージョン 0.9.124 でパッチ適用済み 概要 このリポジトリには、WPvivid Backup & Migration WordPressプラグイン（バージョン = 0.9.123）における重大な脆弱性の分析と概念実証（PoC）が含まれています。...

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

CVE-2026-34486 Apache Tomcat Tribes クラスタリングにおける EncryptInterceptor の fail-open バイパスにより、Java デシリアライゼーションを介した認証不要の RCE に繋がります。 影響を受けるバージョン: 11.0.19+, 10.1.53+, 9.0.116+。 修正版: 11.0.21, 10.1.54, 9.0.117。 Bartlomiej Dmitruk 氏によって発見・報告されました striga.ai。 解説:...

CVE-2026-53913

CVE-2026-53913 — camel-keycloak Fail-Open 인증 우회 동일한 Apache Camel 취약점에 대한 실행 가능한 개념 증명PoC 재현 코드로, 런타임별로 하나씩 제공됩니다: 런타임| 디렉터리| 스택 ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Camel Quarkus 3.36.0 Came...

PT-2026-104018

Name of the Vulnerable Software and Affected Versions Powertools for AWS Lambda Python versions prior to 3.35.0 Description A fail-open error handling issue exists within the data masking utility. This flaw may allow actors to read sensitive field values that the application intended to mask...

CVE-2026-86259

CVE-2026-86259 - OpenMAIC 1.0.0: Fail-Openミドルウェアと環境変数で制御された検証バイパスによる、クラウドメタデータサービスへの未認証アウトバウンドSSRF 概要 検証済み。OpenMAICの認証ミドルウェアとアウトバウンドプロバイダーリクエスト層には、2段階のエクスプロイトチェーンが存在し、未認証のリモート攻撃者が一切の認証情報を持たずに、アプリケーションサーバーに任意のアウトバウンドHTTPリクエスト（169.254.169.254のクラウドInstance Metadata...

CVE-2026-70376

CVE-2026-70376 — Pluck CMS サイト全体のCSRF → RCE フェイルオープンのRefererチェック + CSRFトークンなし + 二重拡張子アップロード 管理者のページ訪問1回で、コンテンツの削除、ページの注入、Webシェルの配置が行われる 概要 · 要約 · 根本原因 · 攻撃チェーン · エクスプロイト · 対策 · タイムライン 📋 概要 | ---|--- CVE ID| CVE-2026-70376 トラッキングID| PT-2026-68036 製品| pluck-cms/pluck — Pluck CMS（フラットファイルPHP）...

BIT-ENVOY-2026-73552 Envoy: HTTP RBAC safe_regex can fail open on RFC-valid obs-text header values

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts RFC-valid opaque header bytes but evaluates saferegex values with RE2's UTF-8 subject semantics. A downstream client can preserve a prohibit...

busybox: busybox: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients...

CVE-2026-100304 TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check

TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open when a form does not exist, allowing authenticated users to access deleted form submissions. Attackers can read orphaned submission data including personal information by providin...

Linux Distros Unpatched Vulnerability : CVE-2026-88831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients. CVE-2026-88831 No...

SUSE CVE-2026-88831

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients...

AZL-105131 CVE-2026-88831 affecting package busybox 1.36.1-27

BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients...