CVE-2026-56766

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

UBUNTU-CVE-2026-56766

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-56766

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-56766

Hydra before 9.7 contains a stack buffer overflow in the NTLM authentication handler used by SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing crafted NTLM Type-2 challenges. A malicious server can send a long domain in NTLM Type-2, overflowing a 500-byte st...

CVE-2026-56766 Hydra - Stack Buffer Overflow in NTLM Authentication Handler

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-56766

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-56766 Hydra - Stack Buffer Overflow in NTLM Authentication Handler

Hydra through 9.7, fixed in commit 9cc84c2, contains a stack buffer overflow in NTLM authentication across SMTP, POP3, IMAP, NNTP, HTTP, HTTP-Proxy, and HTTP-Proxy-Urlenum modules when processing malicious NTLM Type-2 challenges. A malicious server can send a crafted NTLM Type-2 challenge with an...

CVE-2026-42675

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

CVE-2026-42502 vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

GHSA-5CV4-JP36-H3MW vulnerabilities

Vulnerabilities for packages: grafana-pyroscope, telegraf, kyverno, prometheus, prometheus-operator, flux, external-secrets-operator, cilium, opentelemetry-collector, k3s, kots, terraform-provider-acme, kine, crossplane-provider-aws-elasticache, caddy, hydra, fq, traefik, gitea, vale,...

CVE-2026-42675

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...

CVE-2026-42675 WordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Hydra Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hydra Booking: from n/a through 1.1.41...