75364 matches found
CVE-2026-55670 ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers
ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to be provisioned under the original...
CVE-2026-55670 ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers
ZITADEL is an open source identity management platform. Prior to 4.15.1, ZITADEL's event store validation can retain the original resource owner for a deleted user identifier, causing a later user recreated with the same identifier in another organization to be provisioned under the original...
CVE-2026-33382
creationtimestamp| type| source ---|---|--- 2026-07-10 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqcmrjabny2r 2026-07-10 22:29:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd75hwwav2i 2026-07-11 00:20:09+00:00| seen|...
CVE-2026-59796
creationtimestamp| type| source ---|---|--- 2026-07-10 16:12:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqck3iudxm2x 2026-07-10 20:22:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcy2mf6472z 2026-07-12 06:00:48+00:00| seen|...
CVE-2026-61455
creationtimestamp| type| source ---|---|--- 2026-07-10 16:04:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjml5p5g2q 2026-07-10 20:20:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcxvm3lsn26 2026-07-10 20:20:06+00:00| seen|...
GHSA-HJR6-G723-HMFM
creationtimestamp| type| source ---|---|--- 2026-07-10 16:01:02+00:00| seen| https://thehackernews.com/2026/07/researcher-details-whatsapp-to-host.html 2026-07-10 20:00:23+00:00| seen| https://bsky.app/profile/iberianm.bsky.social/post/3mqcwsfxjof2i 2026-07-11 01:00:51+00:00| seen|...
CVE-2026-56676
creationtimestamp| type| source ---|---|--- 2026-07-10 15:59:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjdljext2l 2026-07-10 22:30:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd77cxr6b2w 2026-07-10 23:28:35+00:00| seen|...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-48139
creationtimestamp| type| source ---|---|--- 2026-07-10 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqcgg25mu22f...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible...
CVE-2026-59792
CVE-2026-59792 affects JetBrains IntelliJ IDEA prior to 2026.1.4, with a path-traversal weakness in project workspace ID handling that could enable code execution. The connected sources corroborate a 2026.2-era code execution claim tied to this path traversal issue. The available documents do not...
CVE-2026-38059 ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function
The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication. An unauthenticated attacker with network access can retrieve sensitive device information including the serial number, Device ID DID, Terminal Private Key identifier TPK, MAC address, and exact firmwa...
EUVD-2026-42908
The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication. An unauthenticated attacker with network access can retrieve sensitive device information including the serial number, Device ID DID, Terminal Private Key identifier TPK, MAC address, and exact firmwa...
MINI-JP24-44R5-PG2H
Bulletin has no description...
CVE-2026-57229
creationtimestamp| type| source ---|---|--- 2026-07-10 14:00:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqccon2eyw25 2026-09-27 04:40:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117341159545623437 2026-09-27 05:00:04+00:00| seen|...
MINI-R87P-83F3-9HVX
Bulletin has no description...
MINI-CP8M-CRQ7-QWXF
Bulletin has no description...