74381 matches found
CVE-2026-48533
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-65696 Overseerr 1.35.0 Authorization Bypass via pushSubscriptions API
Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...
CVE-2026-15617
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...
CVE-2026-65917
CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference IDOR vulnerability in the IncBackups application's incremental-backup handlers deleteBackup, fetchRestorePoints, and restorePoint that allows authenticated panel users to access or manipulate other...
ECHO-7A9E-A9FB-A110
Bulletin has no description...
EUVD-2026-48300
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...
CVE-2026-15617
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...
CVE-2026-15617
Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...
ECHO-5D9D-AAA9-D093
Bulletin has no description...
ECHO-76FC-8CCD-D030
Bulletin has no description...
ECHO-6C3C-D0B8-5068
Bulletin has no description...
ECHO-D974-573E-7A5B
Bulletin has no description...
CVE-2026-59933
creationtimestamp| type| source ---|---|--- 2026-07-23 15:31:30+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrd5tmlace2i 2026-07-23 16:35:05+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-xh5m-36r6-47m3 2026-07-28 19:00:29+00:00|...
MINI-2CVG-2PFM-G4CR
Bulletin has no description...
MINI-MWH8-24W6-RM59
Bulletin has no description...
MINI-QXV6-GQGR-73HX
Bulletin has no description...
MINI-F7VM-R7CX-28JV
Bulletin has no description...
CVE-2026-65912
DOMPurify before 3.3.2 contains a URI validation bypass vulnerability when ADDATTR is provided as a predicate function via EXTRAELEMENTHANDLING.attributeCheck. Attackers can supply a predicate that accepts specific attribute and tag combinations to bypass URI-safe validation, allowing unsafe...