NPM: Payload authentication token field handling issue

NPM: Payload authentication token field handling issue vulnerability discovered by ? in WordPress Npm payload versions = 3.0.0, 3.90.0...

GHSA-29GX-H2M3-XW44 Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback

Impact Scaffolder actions that interact with source control systems may not consistently enforce the intended credential boundaries under certain configurations. An authenticated user could perform operations with broader access than intended. Patches - @backstage/plugin-scaffolder-backend versio...

Backstage's scaffolder credential handling may allow unintended GitHub authentication fallback

Impact Scaffolder actions that interact with source control systems may not consistently enforce the intended credential boundaries under certain configurations. An authenticated user could perform operations with broader access than intended. Patches - @backstage/plugin-scaffolder-backend versio...

CVE-2026-76458 Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Handling of Exceptional Conditions Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76458

The Cisco NX-OS Software is affected by vulnerabilities involving the improper handling of exceptional conditions (CWE-703), as identified during a proactive internal security review. The high-severity issue (CVSS 3.1: 8.6) primarily impacts availability and can be triggered over a network with l...

CVE-2026-106016

Mitigation bypass in the File Handling component. This vulnerability w...

PT-2026-107511

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally...

Apple IOKit DriverKit Race Condition

Apple IOKit contains a race condition that may allow an app to cause unexpected system termination or write kernel memory. The supplied analysis includes a sanitizer-checked proof of concept model of the reported DriverKit RPC state-handling flaw...

CVE-2026-105242

Improper Handling of Exceptional Conditions vulnerability in the aspne...

CVE-2026-76458: Improper Check or Handling of Exceptional Conditions

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

Apache Ratis 3.3.1 Java Deserialization

Summary Apache Ratis is a highly customizable Raft protocol implementation in Java. Raft is a easily understandable consensus algorithm to manage replicated state. Apache Ratis could be used in any Java application where state should be replicated between multiple instances. Description Apache...

UBUNTU-CVE-2026-106016

Mitigation bypass in the File Handling component. This vulnerability w...

CVE-2026-105922

A flaw was found in vLLM. A remote attacker can exploit this vulnerability by sending manipulated input processed by the penalty handling mechanism. This triggers an unhandled failure in the token bin counting routine gettokenbincountsandmask, crashing the service and resulting in a Denial of...

Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling

Root Cause File: internal/bodyprocessors/multipart.go since commit 3347961b, PR 1453 "feat: ignore unexpected EOF in MIME multipart request body processor", merged 2026-03-06, first shipped in v3.4.0. The multipart body processor treats io.ErrUnexpectedEOF as a benign condition. Three sites are...

CVE-2026-106462 Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operation...

CVE-2026-106462

The Backstage open framework for building developer portals is vulnerable in versions prior to 1.54.6 . The scaffolder source-control actions may fail to consistently enforce intended credential boundaries, potentially allowing an authenticated user to trigger an action that falls back to broader...

CVE-2026-106462 Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operation...

DEBIAN-CVE-2026-105242

Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...

CVE-2026-102413

Uncaught Exception CWE-248 in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations including Chinese, Japanese, and Korean locales on Windows, an unhandle...

CVE-2026-105242 Apache log4net: Request validation failure drops the event in the aspnet-request converter

Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation, so a request carrying content such as markup made the layout throw and the appender discarded the whole event. A...