EUVD-2026-115907

CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. Unauthenticated attackers can paginate GET requests to collect hidden registration data such as emails, phone numbers, and student IDs when...

CVE-2026-121562

The CTFd platform versions 3.1.0 before 3.8.7 is vulnerable to an information disclosure flaw within the /api/v1/teams list endpoint. The root cause is an incorrect authorization (CWE-863) that fails to protect non-public team custom field values. Unauthenticated attackers can exploit this by sen...

CVE-2026-121562: CTFd: CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that…

CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. Unauthenticated attackers can paginate GET requests to collect hidden registration data such as emails, phone numbers, and student IDs when...

ROS-20261102-73-0003

A vulnerability in Grafana related to insufficient protection of registration data. Exploitation of this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT Application Inspector Unauthorized Access

The software vulnerability identified by PT Application Inspector is related to insufficient protection of registration data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission reference implementations look up a target client from request-controlled clientid data a...

ROS-20261027-73-0025

The vulnerability in openssh is related to errors in handling registration data. Exploitation of this vulnerability can be carried out remotely...

ROS-20261026-73-0085

The vulnerability in openssh is related to errors in the management of registration data. Exploitation of this vulnerability can be carried out remotely...

ROS-20261026-73-0201

The vulnerability in rabbitmq-server is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ROS-20261022-73-0066

The vulnerability of the Portainer container management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Azure CycleCloud Insufficient Protection Unauthorized Access

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Cisco Identity Services Engine Unauthorized Access

The vulnerability of the Cisco Identity Services Engine ISE network policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to insufficient protection of registration data. Exploiting this vulnerability could allow a...

ROS-20260910-73-0123

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260908-73-0042

The vulnerability in mongodb-org is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Wazuh configuration file access modification

The vulnerability of the configuration file 4testintegrationfim-tier-0-1-win.yml of the security monitoring and threat detection platform Wazuh is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain read access and modify data...

ROS-20260902-73-0006

The vulnerability in mongodb-org is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Google Chrome Microsoft Edge Sensitive Data Access

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to insufficient protection of user credentials. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

LWP UserAgent Component XSS

The vulnerability in the lib/LWP/UserAgent.pm component of the LWP::UserAgent module set is related to insufficient protection of registration data. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive information...

ansible-collection-community-general Unauthorized Access

The vulnerability in the Ansible collection ansible-collection-community-general is related to insufficient protection of user registration data. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information...

Windows Kernel Information Disclosure

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose the protected information...