dk.grinn.keycloak:keycloak-migrate-resource (11.0.3.0), dk.grinn.keycloak:keycloak-migrate-spi (11.0.3.0) +3 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (11.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 11.0.3.0 - dk.grinn.keycloak:keycloak-migrate-spi...

org.keycloak:keycloak-dependencies-server-all (3.2.0.final), org.keycloak:keycloak-server-feature-pack (3.2.0.final) +1 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (3.2.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.0.final -...

org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1), org.keycloak:keycloak-server-feature-pack (3.4.1.cr1) +1 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (3.4.1.cr1)

org.keycloak:keycloak-model-jpa MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.1.cr1 -...

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-server-feature-pack (11.0.1) +1 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (11.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 - org.keycloak:keycloak-server-feature-pack...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +2 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (11.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 - org.keycloak:keycloak-server-feature-pack...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-server-feature-pack (3.2.1.final) +1 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (3.2.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

dk.grinn.keycloak:keycloak-migrate-resource (0.0.5), dk.grinn.keycloak:keycloak-migrate-spi (>=0.0.4, <=0.0.5) +4 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (5.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 0.0.5 - dk.grinn.keycloak:keycloak-migrate-spi =0.0.4...

org.keycloak:keycloak-authz-policy-drools (7.0.1), org.keycloak:keycloak-dependencies-server-all (7.0.1) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (7.0.1)

org.keycloak:keycloak-services MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 7.0.1 - org.keycloak:keycloak-dependencies-server-all 7.0...

com.github.vzakharchenko:keycloak-plugins (1.0.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.0.2) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (8.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.0.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

CVE-2026-21359

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have limited...

CVE-2026-32010

OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins. Attackers can invoke sort with the --compress-program flag to execute arbitrary external programs without operator approval in allowlist...

CVE-2026-27491

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a type coercion issue in a post actions API endpoint allowed non-staff users to issue warnings to other users. Warnings are a staff-only moderation feature. The vulnerability required the...

CVE-2026-24297

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-15540

"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application. Due to a lack of sandboxing or access restrictions, JavaScript code executed through Raytha’s “functions” feature can instantiate .NET components and perform arbitrary operations...

CVE-2026-1090

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user, when the markdownplaceholders feature flag was enabled, to inject JavaScript in a browser due to improper...

CVE-2026-4164

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function DeleteMaclist/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Executing a manipulation can lead to command injection. It is possible to launch the attack remotely. The exploit h...

org.keycloak:keycloak-authz-policy-drools (3.2.0.final), org.keycloak:keycloak-dependencies-server-all (3.2.0.final) +6 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (3.2.0.final)

org.keycloak:keycloak-services MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.2.0.final -...

The vulnerability of the do_feature_check_call() function in the drivers/firmware/xilinx/zynqmp.c file of the Linux kernel firmware driver allows a hacker to cause a system failure.

The vulnerability of the dofeaturecheckcall function in the drivers/firmware/xilinx/zynqmp.c file of the Linux kernel firmware driver is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause service...

The vulnerability of the cxl_feature_info() function in the drivers/cxl/core/features.c module of the CXL device driver framework for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cxlfeatureinfo function in the drivers/cxl/core/features.c module of the CXL device driver framework for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no

Impact When the Source Control feature is configured to use SSH, the SSH command used for git operations explicitly disabled host key verification. A network attacker positioned between the n8n instance and the remote Git server could intercept the connection and present a fraudulent host key,...