14 matches found
EUVD-2026-66813
The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...
CVE-2026-75340
The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...
CVE-2026-75340
The device metadata import interface at /device/instance/{productId}/property-metadata/import in jetlinks community 2.11 is vulnerable to Server-side Request Forgery (SSRF) , allowing an unauthenticated network attacker to forge server-side requests. The vulnerability is rated CVSS 3.1 9.1 (CRITI...
CVE-2026-75340
The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...
PT-2026-82339
Name of the Vulnerable Software and Affected Versions jetlinks community version 2.11 Description The device metadata import interface '/device/instance/productId/property-metadata/import' is susceptible to Server-side request forgery SSRF, a flaw that allows an attacker to induce the server-side...
keycloak-services: keycloak-services: SAML broker metadata import disables response signature validation
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
keycloak-services: keycloak-services: SAML broker metadata import disables response signature validation
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
CVE-2026-16443
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
CVE-2026-16443 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
CVE-2026-16443 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
EUVD-2026-53343
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
CVE-2026-16443
CVE-2026-16443 affects Red Hat build of Keycloak: the keycloak-services SAML broker metadata import feature incorrectly disables signature validation for SAML responses when provider metadata lacks certain key usage attributes, even if a signing certificate is supplied. This enables an unauthenti...
CVE-2026-16443
A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak. When importing identity provider metadata that lacks specific usage attributes for keys, the system incorrectly disables...
Security Bulletin: IBM Watson Query (Data Virtualization) does not govern all of the columns of a published object
Summary IBM Watson Query Data Virtualization on Cloud Pak for Data integrates with IBM Knowledge Catalog IKC - formerly Watson Knowledge Catalog WKC - to enforce data protection rules on governed objects. When you publish objects from Watson Query to catalogs or projects, only the first n where...