CVE-2026-111492

A flaw was found in MatchPoint. The application's push notification handler constructs database queries by concatenating untrusted input received from push notification messages, resulting in a SQL Structured Query Language injection vulnerability. An attacker capable of sending crafted messages ...

EUVD-2026-117816

SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate queries and access sensitive...

CVE-2026-111492

SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase Cloud Messaging and constructs queries by concatenating untrusted data. An attacker capable of interacting with the component could manipulate queries and access sensitive...

CVE-2026-111492

The MatchPoint Android app is vulnerable to SQL injection within its push notification handler. The application processes messages from Firebase Cloud Messaging and insecurely constructs database queries by concatenating untrusted data. An attacker capable of interacting with this component can m...

CVE-2026-71569 Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name

Server-Side Request Forgery SSRF vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from 4.21.0 before 4.22.2. WebhookUrlValidator classified a push notification webhook host in two places that did not agree. A host written as an IP literal was matched against a list of...

CVE-2026-82332 Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking

An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a specially crafted request and convincing the victim user to...

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506

A weakness in the Push Notification Config Store component of a2aproject a2a-java (versions up to 1.2.0.Final ) allows for remote resource consumption. The vulnerability exists within the InMemoryPushNotificationConfigStore.setInfo function of the JpaDatabasePushNotificationConfigStore.java file....

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

org.a2aproject.sdk:a2a-java-sdk-examples-cloud-deployment-server (>=1.0.0.alpha4, <=1.2.0.final) potentially affected by CVE-2026-117506 via org.a2aproject.sdk:a2a-java-extras-push-notification-config-store-database-jpa (>=1.0.0.alpha4, <=1.2.0.final)

org.a2aproject.sdk:a2a-java-extras-push-notification-config-store-database-jpa MAVEN version =1.0.0.alpha4, =1.0.0.alpha4, =1.2.0.final Source cves: CVE-2026-117506 Source advisory: MEND:CVE-2026-117506...

EUVD-2026-110929

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

PT-2026-126612

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

Agent2Agent A2A Java SDK resource management error vulnerability

Agent2Agent A2A Java SDK versions 1.2.0.Final and earlier contain a resource management error vulnerability. This vulnerability stems from improper handling in the InMemoryPushNotificationConfigStore.setInfo function within the Push Notification Config Store component. Specifically, it involves...

CVE-2026-116478

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

CVE-2026-116478

The a2aproject a2a-go software (versions up to 2.4.0 ) contains a vulnerability in the Push Notification Handler component. Specifically, the CreateExecutor function within the file a2asrv/agentexec.go is susceptible to a flaw that allows for information exposure through error messages. This vuln...

CVE-2026-116478 a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...

CVE-2026-116478 a2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure

A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the file a2asrv/agentexec.go of the component Push Notification Handler. The manipulation results in information exposure through error message. It is possible to launch the attack remotely...