611 matches found
CVE-2026-7765
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
UBUNTU-CVE-2026-7765
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
CVE-2026-7765 User Messages widget leaked issuer messages on shared dashboards
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
CVE-2026-7765 User Messages widget leaked issuer messages on shared dashboards
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
CVE-2026-7765
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
EUVD-2026-35051
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
CVE-2026-7765
Checkmk
CVE-2026-7765 User Messages widget leaked issuer messages on shared dashboards
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
PT-2026-47285
Incorrect authorization in the User Messages dashboard widget in Checkmk 2.5.0p5 causes the message-fetching endpoints to return the dashboard creator's messages rather than the viewer's, allowing an attacker who knows a valid public dashboard share token to read the issuer's personal messages by...
OESA-2026-2561 glib-networking security update
glib-networking contains the implementations of certain GLib networking features that cannot be implemented directly in GLib itself because of their dependencies. Security Fixes: A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafte...
CVE-2026-25681 vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
CVE-2026-25680 vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
CVE-2026-42506 vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
GHSA-M9X8-M34X-FJ9Q vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
GHSA-WRH2-89VG-4J9G vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
GHSA-W9P8-PVXH-RXPJ vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
CVE-2026-27136 vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
GHSA-CG87-VWWH-XVGJ vulnerabilities
Vulnerabilities for packages: kine, snyk-cli, kubernetes-dashboard, karpenter, zot, telegraf, kots, gptscript, gitea, prometheus-operator, grafana-pyroscope, terraform-provider-acme, kyverno, kubernetes, crossplane-provider-azure-authorization, istio, traefik, hubble, fq, step-issuer, glab,...
Non-CA certificate accepted as intermediate issuer in public_key path validation
...
SUSE CVE-2026-48526
PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...