74301 matches found
EUVD-2026-50214
A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a...
CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....
CVE-2026-5626
creationtimestamp| type| source ---|---|--- 2026-07-29 08:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5626...
MINI-MF52-V926-3VPJ
Bulletin has no description...
CVE-2026-63232
creationtimestamp| type| source ---|---|--- 2026-07-29 06:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdmem3gi2k...
CVE-2026-64544
In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - fix OOB read in pefiledigestpecontents pefiledigestpecontents computes the trailing-data hash length as pelen - hashedbytes + certssize. A crafted PE can make the addition exceed pelen, causing the unsign...
CVE-2026-63238 Authentication bypass vulnerability
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint...
CVE-2026-63238
CVE-2026-63238 describes an authentication bypass in Koollab LMS where an unauthenticated attacker can take over any account (including administrator) by supplying a valid user UUID to the 2FA validation endpoint. The connected records reiterate this access path but do not provide version, patch,...
CVE-2026-63238
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint...
CVE-2026-63236 Improper access control vulnerability
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another user's name, internal identifier, scores, lesson status, lesson position, and cached lesson state via the SCORM API endpoint...
BELL-CVE-2026-64509
Bulletin has no description...
BELL-CVE-2026-64491
Bulletin has no description...
BELL-CVE-2026-64302 CVE-2026-64302 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64339
Bulletin has no description...
BELL-CVE-2026-64257 CVE-2026-64257 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64533
Bulletin has no description...
BELL-CVE-2026-64411
Bulletin has no description...
BELL-CVE-2026-64408
Bulletin has no description...