356 matches found
CVE-2026-34486
CVE-2026-34486 EncryptInterceptor fail-open bypass in Apache Tomcat Tribes clustering leading to unauthenticated RCE via Java deserialization. Affected: 11.0.19+, 10.1.53+, 9.0.116+. Fixed in: 11.0.21, 10.1.54, 9.0.117. Found and reported by Bartlomiej Dmitruk striga.ai. Writeup:...
ams-failopen
Fail-Open Signing in AppleMediaServices Zero-Day Disclosure Summary This issue constitutes a live Zero-Day vulnerability and reflects a systemic design flaw in AppleMediaServices.framework, rather than a regression or version-specific bug. A critical fail-open flaw in Apple’s AppleMediaServices...
Dolibarr <=22.0.4 - Local File Inclusion
Dolibarr = 22.0.4 contains a local file inclusion caused by manipulation of the objectdesc parameter and a fail-open logic flaw in restrictedArea in /core/ajax/selectobject.php, letting authenticated users with no specific privileges read arbitrary non-PHP files. id: CVE-2026-34036 info: name:...
CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...
CVE-2026-104002
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
CVE-2026-104002 Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda Python might allow actors to read sensitive field values that the application intended to mask. To remediate this issue, users should upgrade to version 3.35.0...
CVE-2026-1357-POC
CVE-2026-1357 — WPvivid Backup & Migration RCE CVE Credit: Lucas Montes NiRoX Tool By: CyberTechAjju CVSS: 9.8 Critical | Affected: ≤ 0.9.123 | Patched: 0.9.124 ⚠️ Disclaimer For authorized security testing only. Unauthorized access to systems is illegal. Overview Unauthenticated RCE in WPvivid...
POC-CVE-2026-1357
CVE-2026-1357 WPvivid Backup & Migration RCE PoC 発見者: Lucas Montes NiRoX 脆弱性: 認証不要の任意ファイルアップロードによるリモートコード実行（RCE） CVE ID: CVE-2026-1357 CVSS: Critical9.8 ステータス: バージョン 0.9.124 でパッチ適用済み 概要 このリポジトリには、WPvivid Backup & Migration WordPressプラグイン（バージョン = 0.9.123）における重大な脆弱性の分析と概念実証（PoC）が含まれています。...
CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization
CVE-2026-34486 Apache Tomcat Tribes クラスタリングにおける EncryptInterceptor の fail-open バイパスにより、Java デシリアライゼーションを介した認証不要の RCE に繋がります。 影響を受けるバージョン: 11.0.19+, 10.1.53+, 9.0.116+。 修正版: 11.0.21, 10.1.54, 9.0.117。 Bartlomiej Dmitruk 氏によって発見・報告されました striga.ai。 解説:...
CVE-2026-53913
CVE-2026-53913 — camel-keycloak Fail-Open Authentication Bypass Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...
PT-2026-104018
Name of the Vulnerable Software and Affected Versions Powertools for AWS Lambda Python versions prior to 3.35.0 Description A fail-open error handling issue exists within the data masking utility. This flaw may allow actors to read sensitive field values that the application intended to mask...
CVE-2026-86259
CVE-2026-86259 - OpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass Overview Verified. A two-leg exploit chain exists in OpenMAIC's authentication middleware and outbound provider request layer that allows an...
CVE-2026-70376
CVE-2026-70376 — Pluck CMS Site-wide CSRF → RCE Fail-open Referer check + no CSRF tokens + double-extension upload A single admin page-visit deletes content, injects pages, and drops a webshell At a glance · Summary · Root cause · Attack chain · Exploit · Remediation · Timeline 📋 At a glance |...
BIT-ENVOY-2026-73552 Envoy: HTTP RBAC safe_regex can fail open on RFC-valid obs-text header values
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts RFC-valid opaque header bytes but evaluates saferegex values with RE2's UTF-8 subject semantics. A downstream client can preserve a prohibit...
busybox: busybox: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths
BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients...
CVE-2026-100304 TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check
TDuck survey form 6.0 contains an information disclosure vulnerability in FormAuthUtils.hasPermission that fails open when a form does not exist, allowing authenticated users to access deleted form submissions. Attackers can read orphaned submission data including personal information by providin...
Linux Distros Unpatched Vulnerability : CVE-2026-88831
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients. CVE-2026-88831 No...
