CVE-2026-56766 Hydra - Stack Buffer Overflow in NTLM Authentication Handler

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-56766 Hydra - Stack Buffer Overflow in NTLM Authentication Handler

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-56766: Stack-based Buffer Overflow

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-42675

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

CVE-2026-42502 vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-operator, kine, caddy, telegraf, hubble, traefik, kubernetes-dashboard, istio, step-issuer, falco-no-driver, ingress-nginx-controller, crossplane-provider-azure-authorization, k3s, grafana-pyroscope, kubernetes, helm, flux, prometheus, glab, val...

CVE-2026-42675

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

EUVD-2026-33688

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

CVE-2026-42675 WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

CVE-2026-42675 WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

CVE-2026-42675

CVE-2026-42675 affects the WordPress Hydra Booking plugin (versions

PT-2026-45462

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...