authentik 授权问题漏洞

Authentik is an open-source identity provisioning application. Versions of Authentik before 2025.12.6, 2026.2.4, and 2026.5.1 have vulnerabilities related to authorization. These vulnerabilities stem from the possibility of sending empty POST requests, which may bypass the authentication phase...

PT-2026-45711

Name of the Vulnerable Software and Affected Versions JTL-Connector for WooCommerce versions prior to 2.4.2 Description The plugin contains missing authorization due to a lack of capability checks and nonce verification. This allows authenticated attackers with Subscriber-level access or higher t...

Vivotek VIVOTEK FD8136-VVTK 安全漏洞

Vivotek VIVOTEK FD8136-VVTK is a super-miniature fixed dome network camera firmware developed by Vivotek Corporation. The Vivotek VIVOTEK FD8136-VVTK 0300a version contains a security vulnerability. This vulnerability stems from a stack buffer overflow in the motionprivacy.cgi binary file. When t...

EUVD-2026-33967

A post-authentication remote buffer overflow vulnerability exists in the /cgi-bin/admin/eventtask.cgi endpoint of the admin interface of Vivotek FD8136 cameras running firmware version FD8136-VVTK-0300a. This flaw allows an authenticated attacker to execute arbitrary code as root on the device...

PT-2026-45859

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2025.12.6 authentik versions prior to 2026.2.4 authentik versions prior to 2026.5.1 Description authentik is an open-source identity provider. The Source stage can be bypassed by sending an empty POST request...

CVE-2026-35716

CVE-2026-35716 describes a stack-based buffer overflow in the motion_privacy.cgi binary of VIVOTEK FD8136 firmware (FD8136-VVTK-0300a). The issue occurs when an oversized n1 parameter in a POST request to endpoints /cgi-bin/admin/setpm.cgi, /cgi-bin/admin/setmd.cgi, or /cgi-bin/admin/setmd_profil...

CVE-2018-25427

creationtimestamp| type| source ---|---|--- 2026-06-01 23:28:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbaawxpqt2w 2026-06-02 09:13:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mncawkjpq62y...

CVE-2026-24751

creationtimestamp| type| source ---|---|--- 2026-06-01 22:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnb3cs4tlb27 2026-06-01 23:23:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnb7ycx5452v...

CVE-2026-49136

creationtimestamp| type| source ---|---|--- 2026-06-01 22:00:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnb3cknu7j2r...

CVE-2026-10287

creationtimestamp| type| source ---|---|--- 2026-06-01 21:19:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnayzhmdgk2t...

CVE-2026-45729

creationtimestamp| type| source ---|---|--- 2026-06-01 20:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnax3vobbu2z 2026-07-22 17:00:04+00:00| seen| Telegram/tTAffE3ecNhvRTBphw7K5bpufit0HCKjFX6WbbNQmiqRs00 2026-07-23 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-10286

creationtimestamp| type| source ---|---|--- 2026-06-01 20:39:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnawsjmsdr26...

CVE-2026-10259

creationtimestamp| type| source ---|---|--- 2026-06-01 19:52:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnau6kq2zp2w...

CVE-2026-48839

creationtimestamp| type| source ---|---|--- 2026-06-01 17:03:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnakqabqqm2p...

CVE-2026-48865

creationtimestamp| type| source ---|---|--- 2026-06-01 16:52:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnak3ugcll2k 2026-06-23 06:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mowqr5zjf52v...

CVE-2026-9311

creationtimestamp| type| source ---|---|--- 2026-06-01 16:50:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3mnajyao5gy26 2026-06-01 19:38:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnatesuvou2c 2026-06-04 18:37:07+00:00| seen|...

CVE-2026-10261

creationtimestamp| type| source ---|---|--- 2026-06-01 16:49:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnajwfxeag2k...

CVE-2026-8382

The Advanced Custom Fields ACF® plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrit...

CVE-2026-0826

creationtimestamp| type| source ---|---|--- 2026-06-01 15:53:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnagtc27vi26 2026-06-02 02:10:54+00:00| seen| https://bsky.app/profile/vritrasecnews.bsky.social/post/3mnbjd3riw42f 2026-06-02 14:45:24+00:00| seen|...

CVE-2026-39828

creationtimestamp| type| source ---|---|--- 2026-06-01 15:36:36+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnafjazque2y 2026-06-26 09:43:16+00:00| seen| https://gist.github.com/alon710/0c57746e41348ce39fa4a70a8b089dd8 2026-06-26 09:44:13+00:00| seen|...