CVE-2026-30244: Improper Access Control

Plane is an an open-source project management tool. Prior to version 1.2.2, unauthenticated attackers can enumerate workspace members and extract sensitive information including email addresses, user roles, and internal identifiers. The vulnerability stems from Django REST Framework permission...

CVE-2025-70363: Improper Access Control

Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerating object IDs...

CVE-2026-2330: Files or Directories Accessible to External Parties

An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal testing were not covered by the whitelist and are accessible without authentication. An unauthenticated attacker could...

GHSA-87X4-J8VH-P5QF Plane is Vulnerable to Unauthenticated Workspace Member Information Disclosure

Executive Summary A security vulnerability exists in the Plane project management platform that allows unauthenticated attackers to enumerate workspace members and extract sensitive information including email addresses, user roles, and internal identifiers. The vulnerability stems from Django RE...

ap-rest-client (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-28277 via langgraph (0.3.2)

langgraph PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ap-rest-client =0.0.1, =0.0.5 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ap-rest-client (>=0.0.6, <=0.0.7), mcp-hybrid-search (>=1.1.2, <=1.1.7) potentially affected by CVE-2026-28277 via langgraph (0.3.11)

langgraph PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ap-rest-client =0.0.6, =1.1.2, =1.1.7 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

ap-rest-client (>=0.0.1, <=0.0.5) potentially affected by CVE-2026-28277 via langgraph (0.3.2)

langgraph PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ap-rest-client =0.0.1, =0.0.5 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

ap-rest-client (>=0.0.6, <=0.0.7), mcp-hybrid-search (>=1.1.2, <=1.1.7) potentially affected by CVE-2026-28277 via langgraph (0.3.11)

langgraph PYPI version 0.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - ap-rest-client =0.0.6, =1.1.2, =1.1.7 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...

CVE-2026-20003

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

CVE-2026-20001

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

Vulnerabilities fixed in Cisco Secure Firewall systems

Cisco has fixed several vulnerabilities in Cisco Secure Firewall including ASA and FTD software. The vulnerabilities include SQL injection, privilege escalation, denial-of-service, cross-site scripting, and improper management of entries in various Cisco Secure Firewall components. Authenticated...

CVE-2026-2025

The Mail Mint WordPress plugin before 1.19.5 does not have authorization in one of its REST API endpoint, allowing unauthenticated users to call it and retrieve the email addresses of users on the blog...

dj-rest-auth-mfa (>=0.0.2, <=0.0.3), dj-rest-auth-saml (>=0.0.1, <=0.0.5) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.57.0)

django-allauth PYPI version 0.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-rest-auth-mfa =0.0.2, =0.0.1, =0.28.0, =0.35.0 Source cves: CVE-2026-27982 Source advisory: OSV:GHSA-2JPR-83RG-V67J...

dj-rest-auth-mfa (>=0.0.2, <=0.0.3), dj-rest-auth-saml (>=0.0.1, <=0.0.5) +1 more potentially affected by CVE-2026-27982 via django-allauth (0.57.0)

django-allauth PYPI version 0.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - dj-rest-auth-mfa =0.0.2, =0.0.1, =0.28.0, =0.35.0 Source cves: CVE-2026-27982 Source advisory: OSV:PYSEC-2026-56...

EUVD-2026-9424

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

CVE-2026-20003

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

CVE-2026-20003

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

CVE-2026-20001

A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to inadequate validation of user-supplied input. An attacker could exploit this vulnerability by sending...

CVE-2026-3103 Deletion of passwords via RestApi

A logic error in the removepassword function in Checkmk GmbH's Checkmk versions 2.4.0p23, 2.3.0p43, and 2.2.0 EOL allows a low-privileged user to cause data loss...

CVE-2026-3103 Deletion of passwords via RestApi

A logic error in the removepassword function in Checkmk GmbH's Checkmk versions 2.4.0p23, 2.3.0p43, and 2.2.0 EOL allows a low-privileged user to cause data loss...