CVE-2026-19785: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4. This vulnerability affects unknown code of the file modules/Students/includes/Medical.inc.php of the component Student Medical Module. Such manipulation of the argument table leads to sql injection. The attack may be...

UBUNTU-CVE-2026-56864

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

EUVD-2026-58514

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

CVE-2026-56865

A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that...

CVE-2026-56864

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

CVE-2026-73530

Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked IPv6 address :: which the kernel routes to loopback identically to 0.0.0.0. Attackers can submit requests or trigger 3...

CVE-2026-73530 Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()

Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked IPv6 address :: which the kernel routes to loopback identically to 0.0.0.0. Attackers can submit requests or trigger 3...

CVE-2026-73530 Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()

Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked IPv6 address :: which the kernel routes to loopback identically to 0.0.0.0. Attackers can submit requests or trigger 3...

CVE-2026-70463

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...

PT-2026-76037

A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if...

GHSA-2QJV-P2GC-MJG2 Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default alloweddeserializationclasses allow-list, so tightening that...

CVE-2026-47233

Admidio is an open-source user management solution. Version 5.0.9 added a missing "isAdministratorInventory" gate to "case 'itemdelete':" in "modules/inventory.php". The same fix was not applied to the sibling "case 'fielddelete':" handler, which destroys an entire inventory field definition,...

CVE-2026-47232

Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive "mode=export" action in "modules/sso/keys.php" exports a PKCS12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an...

CVE-2026-47231

Admidio is an open-source user management solution. Prior to version 5.0.10, "modules/documents-files.php" gates state-changing modes by checking that the actor has "hasUploadRight" on the URL parameter "folderuuid". The "movesave" handler then operates on a separate URL parameter "fileuuid" and...

CVE-2026-47230

Admidio is an open-source user management solution. Prior to version 5.0.10, "modules/documents-files.php" mode "filerenamesave" shares the same root-cause shape as the cross-folder move bug "05-documents-cross-folder-move-idor.md": the top-level rights check at lines 79-89 validates...

CVE-2026-47229

Admidio is an open-source user management solution. Prior to version 5.0.10, "modules/sso/clients.php" validates an "admcsrftoken" on every state-changing branch except "enable". The "enable" case loads the SAML or OIDC client by UUID, calls "$client-enable$enabled", and persists the new state wi...

CVE-2026-47228

Admidio is an open-source user management solution. "modules/registration.php" mode "sendlogin" regenerates a random password for "useruuidassigned", stores its bcrypt hash in "admusers.usrpassword", and emails the cleartext to that user. Every other state-changing mode in the same file...

CVE-2026-47227

Admidio is an open-source user management solution. "modules/categories.php" checks that the supplied "type" parameter "ANN", "EVT", "ROL", "USF", … corresponds to a module the actor administers. The follow-up "is this specific category editable by me" check at lines 56-61 is dead code because it...

CVE-2026-47226

Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of "modules/documents-files.php" evaluat...

CVE-2026-47226: Authorization Bypass Through User-Controlled Key

Admidio is an open-source user management solution. Prior to version 5.0.10, an authenticated Admidio member with upload rights on any one folder can permanently delete files from folders where they have only view access. The authorization check at the top of modules/documents-files.php evaluates...