CVE-2026-119764

Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator downloads the file and clicks Preview Media, content-sniffed...

CVE-2026-119764

Mythic versions 3.2.16 through 3.4.0.61 are vulnerable to a stored cross-site scripting (XSS) flaw. Attackers who control files on a target endpoint can plant HTML within .pdf-named files . If an operator downloads such a file and selects Preview Media , the system renders content-sniffed HTML fr...

EUVD-2026-114241

Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator downloads the file and clicks Preview Media, content-sniffed...

CVE-2026-119764 Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview

Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator downloads the file and clicks Preview Media, content-sniffed...

CVE-2026-119764 Mythic 3.2.16 through 3.4.0.61 Stored XSS via Agent-Downloaded File Preview

Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator downloads the file and clicks Preview Media, content-sniffed...

CVE-2026-119764: its-a-feature Mythic: Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling…

Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target endpoint files to run JavaScript in the Mythic UI origin by planting HTML in .pdf-named files. When an operator downloads the file and clicks Preview Media, content-sniffed...

Astra Linux - vulnerability in ceph

Ceph is a distributed object, block, and file storage platform. In versions 19.2.3 and earlier, it is possible to send a JWT with “none” as the JWT algorithm. Doing so results in the JWT signature being ignored. The vulnerability is most likely present in the RadosGW OIDC provider. At the time of...

PT-2026-115307

Name of the Vulnerable Software and Affected Versions BillionMail versions prior to 5.0 Description An issue exists where a hard-coded cryptographic key allows unauthenticated attackers to forge JSON Web Tokens JWTs by calculating the key from provided configuration constants. Attackers can use...

NPM: fast-jwt: Verifier cache accepts expired JWTs without iat.

NPM: fast-jwt: Verifier cache accepts expired JWTs without iat. vulnerability discovered by ? in WordPress Npm fast-jwt versions = 6.3.3...

NPM: fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set

NPM: fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set vulnerability discovered by ? in WordPress Npm fast-jwt versions = 6.3.0...

EUVD-2026-95344

fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.3.1, fast-jwt createVerifier accepts an unsigned JWT when key is an empty string or null and algorithms is a non-empty allowlist. Falsy synchronous keys bypass prepareKeyOrSecret, allowedAlgorithms remains active, hasKey is fals...

CVE-2026-67404

A flaw was found in rabbitmq-server. When the OAuth2 plugin fetches JWKS and no CA bundle is available, TLS verification silently falls back to verifynone. A man-in-the-middle attacker can forge the JWKS response, causing the broker to accept arbitrary JWTs. Mitigation Mitigation for this issue i...

BIT-RABBITMQ-2026-67404 RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssloptions/1 falls back to verify, verifynone with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the broker...

EUVD-2026-87827

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...

CVE-2026-100862 heym before 0.0.91 Multiple Secrets Plaintext Storage

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...

CVE-2026-100862: Cleartext Storage of Sensitive Information

heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...

SUSE CVE-2026-67404

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssloptions/1 falls back to verify, verifynone with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the broker...

rabbitmq-server: rabbitmq-server: OAuth2 silent verify_none fallback for JWKS fetch

A flaw was found in rabbitmq-server. When the OAuth2 plugin fetches JWKS and no CA bundle is available, TLS verification silently falls back to verifynone. A man-in-the-middle attacker can forge the JWKS response, causing the broker to accept arbitrary JWTs...

PT-2026-80449

Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner...

NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs

NPM: n8n: Privilege Escalation and Code Execution via Full Public API Key Scope Assignment to Token Exchange JWTs vulnerability discovered by ? in WordPress Npm n8n versions 2.29.8...