CVE-2026-89326

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-102589

Independent Grafana instances are vulnerable to cross-instance user impersonation due to an origin validation error . When instances share the same renderer_token, an image renderer key issued by one instance is accepted by others, allowing a user on one instance to act as a user with the same ID...

EUVD-2026-123545

When independent Grafana instances share the same rendering renderertoken, an image renderer key issued by one instance is accepted by the others, so a user on one instance could act as the user with the same ID on another origin validation error. This affects instances with the renderAuthJWT...

CVE-2026-89326 Apache XML Graphics Batik: Check url protocol when loading document

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

EUVD-2026-123535

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-89326

The Apache XML Graphics Batik library is affected by an Origin Validation Error (CWE-346) in versions through 1.19 . The root cause is that the external resource same-origin check fails to compare the URL protocol . This vulnerability could allow for improper resource loading or security bypasses...

CVE-2026-121529

A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code...

CVE-2026-121529

An origin validation error vulnerability exists in several versions of Fortinet FortiClient , specifically FortiClientMac (7.4.0 through 7.4.7), FortiClientWindows (7.4.0 through 7.4.7, 7.2.0 through 7.2.14), and FortiClientWindowsPAM (7.4.7, 7.2.14). This flaw may allow an unauthorized remote at...

CVE-2026-121529

A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code...

EUVD-2026-122823

A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code...

CVE-2026-121291

A vulnerability in EOS allows an attacker to send a crafted Error Report that causes the system to become stuck in a state where it believes a cache reset is currently in progress. This condition prevents critical operations, including ROA publication , withdrawal reconciliation , and BGP origin-...

EUVD-2026-122548

Origin validation error in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-118111

A CWE-346 Origin Validation Error in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. The vulnerability has a CVSS v3.1 score of 8.0 (High severity) and is exploitable with low complexity. Microsoft has released security updates to address this and other vu...

EUVD-2026-121983

Origin validation error in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server WebSocket Arbitrary File Read Batch Detection Disclaimer: This tool is intended for authorized security testing and educational research only. Users must comply with local laws and regulations; unauthorized scanning or attacking others' systems is illegal. The...

CVE-2026-108187

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

EUVD-2026-120521

Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation vulnerability in the HostLink class of its passthrough example mods that allows remote attackers to execute Minecraft commands. Any web page open in the player's browser can...

CVE-2026-125358

Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation vulnerability in the HostLink class of its passthrough example mods that allows remote attackers to execute Minecraft commands. Any web page open in the player's browser can...

PT-2026-144642

A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication, withdrawal reconciliation, and BGP origin-validation updates...

PT-2026-144652

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientMac versions 7.4.0 through 7.4.7 Fortinet FortiClientWindows versions 7.4.0 through 7.4.7 Fortinet FortiClientWindows versions 7.2.0 through 7.2.14 Fortinet FortiClientWindowsPAM version 7.4.7 Fortinet FortiClientWindowsPAM...