cve-2026-59270 - CRITICAL - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces

cve-2026-59270 - CRITICAL - Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces...

CVE-2026-71098

creationtimestamp| type| source ---|---|--- 2026-08-19 17:53:03+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

EUVD-2026-62100

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

EUVD-2026-61644

Vulnerability in Oracle Essbase component: Infrastructure. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in...

PT-2026-78143

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

BIT-DOTNET-SDK-2026-62900 .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-73268

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-73277

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-73267

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-73266

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

LightRAG <= 1.5.4 - Missing Authentication

LightRAG through version 1.5.4 contains a broken access control vulnerability caused by the API server binding to all network interfaces with authentication disabled, letting unauthenticated network attackers fully control indexed documents and resources, exploit requires network access. id:...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: apache-pulsar, keycloak-config-cli, akhq, zipkin, infinispan, flink, sonarqube, wavefront-proxy, thingsboard, neo4j, opensearch, apache-tika, kafka, druid, kserve-modelmesh, strimzi-kafka-operator, solr, celeborn, spdx-tools-java, wildfly, apache-activemq-artemis,...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: kafbat-ui, wazuh-indexer, sonarqube, cruise-control, opensearch, ghidra, kafka, kafbat-ui-fips, strimzi-kafka-operator-fips, traccar, kafka-bridge, cruise-control-fips, pinot-fips, flink-kubernetes-operator, kafka-bridge-fips, wavefront-proxy, apache-hop-fips,...

CVE-2026-72817

go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP Request.RemoteAddr using the first IP in the X-Forwarded-For header without validating trusted proxies. A malicious client can prepend a forged IP as the fir...

GHSA-QM8R-Q3H4-C3VW

creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...

EUVD-2026-58240

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...

CVE-2026-73669

The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker v2.0.22 that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights...