CVE-2026-52886

Path Traversal: elusione del controllo del prefisso startswith Notepad++ — Lettura arbitraria di file tramite traversal dibackupFilePath in session.xml Advisory GHSA: GHSA-rqfm-pw34-r7j6 CVE: CVE-2026-52886 Gravità: Moderata Versioni interessate: v8.9.6.4 Versione corretta: v8.9.7 Commit della...

CVE-2026-41569

authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check rather than proper URL parsing. An attacker who can craft a login link can supply a wreply value on a different origin...