mariadb: MariaDB: Privilege escalation via ACL cache key collision

A flaw was found in MariaDB. An issue in the Access Control List ACL cache causes identical privilege cache keys to be generated when a role and a local user share the same name. An attacker with user creation privileges can exploit this key collision by creating a matching account, allowing them...

Apprise forwards configured auth headers across cross-origin HTTP redirects

Summary Apprise's HTTP-based notification plugins and its HTTP attachment / config loaders apprise/attachment/http.py, apprise/config/http.py follow HTTP 3xx redirects by default and re-send the user-configured auth headers and query parameters on the redirected request. If an operator-configured...

CVE-2026-100413

SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml as stringData.seaweedfssftpsshprivatekey. A standalone deployment presented that...

CVE-2026-100413

The distributed storage system SeaweedFS versions 4.0.388 through 4.40 contain a vulnerability where the SFTP Helm chart embeds an unencrypted Ed25519 private host key in the sftp-secret.yaml template. Under specific configuration conditions—including sftp.enabled and sftp.enableAuth being true, ...

CVE-2026-100413 SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments

SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml as stringData.seaweedfssftpsshprivatekey. A standalone deployment presented that...

CVE-2026-100413 SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deployments

SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml as stringData.seaweedfssftpsshprivatekey. A standalone deployment presented that...

EUVD-2026-101519

SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml as stringData.seaweedfssftpsshprivatekey. A standalone deployment presented that...

CVE-2026-42093 Redash: SQL Injection via Query Results parameterized query substitution

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

EUVD-2026-101515

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...

CVE-2026-102068

A Stack-based Buffer Overflow vulnerability exists in the kernel of Juniper Networks Junos OS Evolved . An unauthenticated remote attacker can trigger a kernel panic by sending a crafted TCP packet when key-chain authentication is active for BGP or LDP . The CVSS v4.0 score is 9.2 (Critical). No ...

CVE-2026-102068 Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used

A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP...

Important: Red Hat Security Advisory: hplip security, bug fix, and enhancement update

An update for hplip is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Opsre Go Ldap Admin encryption vulnerability

OpsRe Go LDAP Admin versions prior to 0.6.2 have an encryption-related vulnerability. This vulnerability stems from the use of a hardcoded RSA private key embedded in the code, which is available from public repositories. Unauthenticated attackers can decrypt encrypted passwords offline by...

ValueCell.ai: Server-side request forgeing vulnerability

ValueCell.ai’s versions prior to 0.1.20 have a server-side request forgeing vulnerability. This vulnerability stems from unauthenticated server-side requests. Attackers can exploit this vulnerability by setting an unvalidated baseurl through the provider configuration endpoint. This allows them t...

EnergizeLab FirmwareUpdater has a cryptographic vulnerability

EnergizeLab FirmwareUpdater has a cryptographic vulnerability. This vulnerability stems from the use of a single hardcoded AES key shared across all installations. Attackers can retrieve this key from the update program, thereby decrypting and forging the firmware package...

Vulnerability related to encryption issues in Apache Airflow SSH provider

Versions prior to 7.0.0 of the Apache Airflow SSH provider and versions prior to 7.0.0 of the Apache Airflow SFTP provider contain an encryption vulnerability. This vulnerability arises because SSH host key validation is disabled by default; when no hostkey is configured or nohostkeycheck is...

CVE-2026-73804

Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scop...

CVE-2026-68964

Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents. A restricted account can retrieve public keys, key titles, fingerprints, and GPG-embedded email addresses belonging to Limited-visibility users. The disclosure concerns public key...

CVE-2026-110612

vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on...

CVE-2026-73804 Gitea API token scope escalation through HTTP signatures

Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key authenticate as that account through HTTP Signature without API token scope information, causing route-level token scop...