CVE-2026-86698

Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organization's private packages and their documentation tarballs via a retained refresh token. generaterefreshtoken/4 in...

CVE-2026-94456 Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

CVE-2026-94456 Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

EUVD-2026-84543

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

CVE-2026-94456

The Postiz application uses the cryptographically weak Math.random() function to generate security-sensitive credentials, including OAuth access tokens , authorization codes , client secrets , organization API keys , and PKCE verifiers . Because these credentials rely on V8’s deterministic xorshi...

EUVD-2026-84539

Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organization's private packages and their documentation tarballs via a retained refresh token. generaterefreshtoken/4 in...

CVE-2026-86698 Refresh tokens accepted as private repository credentials at the CDN

Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organization's private packages and their documentation tarballs via a retained refresh token. generaterefreshtoken/4 in...

CVE-2026-77637

Cloudreve , a self-hosted file management and sharing system, is affected by a privilege scope bypass prior to version 4.18.0 . The routes tool.GET("wopi") and tool.POST("mail") in routers/router.go inherit the ScopeAdminRead scope but omit the RequiredScopes(types.ScopeAdminWrite) middleware app...

CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...

CVE-2026-77637 Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET"wopi" and tool.POST"mail" in routers/router.go inherit ScopeAdminRead but omit the RequiredScopestypes.ScopeAdminWrite middleware applied to neighboring state-changing admin tool routes. An OAuth application ...

CVE-2026-94127

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth...

EUVD-2026-84427

When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution RCE. Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also...

CVE-2026-94127

F5 BIG-IP APM is affected by a heap-based buffer overflow (CWE-122) that allows an unauthenticated attacker to achieve remote code execution (RCE) . This vulnerability is specific to configurations where both an APM access policy and an OAuth profile are active on a virtual server, specifically w...

CVE-2026-94127 BIG-IP APM OAuth vulnerability

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth...

CVE-2026-94127 BIG-IP APM OAuth vulnerability

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth...

K000162605: BIG-IP APM vulnerability CVE-2026-94127

Security Advisory Description When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution RCE. This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments...

CVE-2026-94456: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

PT-2026-96829

Name of the Vulnerable Software and Affected Versions hex.pm versions 2025-10-10 through 2026-09-21 Description An insufficient session expiration issue in OAuth token issuance allows users whose organization membership or session has ended to continue reading private packages and documentation...

PT-2026-96953

Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The OAuth fallback token directory and JSON files are created without restrictive owner-only permissions, typically resulting in world-readable files mode 0644 on Linux and directories mode...

CVE-2026-96259: Server-Side Request Forgery (SSRF)

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the...