CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud not validated Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-main embedded HTTP server builds its JWT authenticator from a keystore alone when neither jwtIssuer nor jwtAudience is configured, so inbound...

CVE-2023-36845

Automation for Juniper CVE:2023-36845 by Asbawy - Modified by Ak1t4 Overview is a bash script designed to check for the CVE-2023-36845 vulnerability. This script processes a list of Juniper URLS addresses, sends a request to each & determines whether the system is vulnerable based on the response...

CVE-2019-1388

CVE-2019-1388 CVE-2019-1388 Abuse UAC Windows Certificate Dialog Description: This CVE exploit tend to abuse the UAC windows Certificate Dialog to execute the certificate issuer link as an NT Authority User and open a browser that is under NT Authority User. Then we can use that to prompt a shell...

CVE-2026-50338

CVE-2026-50338 Spring Cloud Azure B2C Resource Server Cross-Issuer Authentication Bypass Description AadB2cResourceServerAutoConfiguration in spring-cloud-azure-autoconfigure builds a JwtDecoder that trusts six AAD-line issuers login.microsoftonline.com, sts.windows.net, sts.chinacloudapi.cn, v1...

CVE-2025-30144

Summary The fast-jwt library does not properly validate the iss claim based on the RFC https://datatracker.ietf.org/doc/html/rfc7519page-9. Details The iss issuer claim validation within the fast-jwt library permits an array of strings as a valid iss value. This design flaw enables a potential...

CVE-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak Overview Apache Camel's KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. This means a token issued by one Keycloak realm is silently accepted by a policy configured for a...

CVE-2026-85301

The Apache Camel Keycloak component contains an Improper Authentication vulnerability (CWE-287) in versions 4.15.0 before 4.18.5 and 4.19.0 before 4.22.1. The security processor incorrectly skipped issuer validation when an introspection response omitted the iss claim, instead of treating the abs...

CVE-2026-85301 Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim

Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.1. The security processor validated the issuer of an introspected token only when the introspection response actually carried an iss claim...

CVE-2026-85301 Apache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim

Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.1. The security processor validated the issuer of an introspected token only when the introspection response actually carried an iss claim...

Astra Linux – Vulnerability in OpenLDAP

In OpenLDAP versions 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function due to a malicious packet. This leads to a denial of service daemon exits caused by a short timestamp. This issue is related to the schemainit.c file and the...

Astra Linux – Vulnerability in curl

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse, if one of them matches the setup. Due to errors in the logic, the config matching function did not take ‘issuercert’ into account, and it compared the involved paths case insensitively, which could...

CVE-2026-110863

The @better-auth/sso library (versions 1.7.0-rc.2 before 1.7.3 ) contains an authentication bypass vulnerability. The root cause is that the account lookup mechanism ignores the providerId , allowing an authenticated attacker to register a personal SSO provider using a legitimate provider's OIDC ...

CVE-2026-110863: Improper Authentication

Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim'...

PT-2026-109326

Name of the Vulnerable Software and Affected Versions Enclave OS Virtual versions prior to tdx-v0.2.43 Enclave OS Virtual versions prior to tdx-gpu-v0.6.27 Description The TDX/GPU RA-TLS certificate issuer places the certificate public-key hash and client nonce in the quote ReportData but fails t...

Apache Configuration Injection via Unsanitized IdP Issuer Setting in Brocade Fabric OS Web Service Interface

: An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication FA, the system fails to sanitize the Identity Provider IdP issuer parameter. An authenticated administrator—or an...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: buf, tkn-fips, step-fips, telegraf, kyverno-policy-reporter-ui-fips, rclone, kyverno-policy-reporter-ui, step, sftpgo, dapr, dapr-fips, step-ca-fips, caddy-fips, caddy, gogatekeeper, gitness, step-ca, step-issuer-fips, tkn, rclone-fips, karma, cloudflared, step-issue...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: tkn, karma, step-issuer, step-ca, rclone, cloudflared, caddy, sftpgo, gogatekeeper, buf, kyverno-policy-reporter-ui, gitness, step...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: tkn, karma, step-issuer, step-ca, rclone, cloudflared, caddy, sftpgo, gogatekeeper, buf, kyverno-policy-reporter-ui, gitness, step...

CVE-2026-63570 Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links

Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS12 file to an application that loads it and requests a key entry's certificate chain to cause a denial of service, in...

CVE-2026-63570 Pkcs12Store.GetCertificateChain loops forever on cyclic issuer links

Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS12 file to an application that loads it and requests a key entry's certificate chain to cause a denial of service, in...