CVE-2026-100288: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records...

PT-2026-102495

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2026-79537

metatool-ai MetaMCP versions through 2.4.22 are vulnerable to an Insecure Direct Object Reference (IDOR) in the MCP transport session dispatch. The root cause is that the session store (getSession in session-lifetime-manager.ts) is keyed solely by the client-supplied mcp-session-id header without...

PT-2026-102661

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host for Linux and macOS versions prior to 15.82 Description A heap-based buffer overflow occurs during the processing of .tvs session recording files. A size mismatch during the decompression of recorded session dat...

CVE-2026-102716: Missing Release of Memory after Effective Lifetime

An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot convert. The Session branch returns the raw NetX error code instead of an RTSP status code: c / addons/rtsp/nxrtspserver.c:2754 / status =...

PT-2026-102517

The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...

CVE-2026-101271: Insufficient Session Expiration

OAuth credentials access tokens are valid for the entirety of their lifetime, even if the application OAuth client they are bound to is manually disabled...

PT-2026-102906

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover...

PT-2026-102760

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description During the first DTLS ClientHello, the parser copies a device-claimed session id length and validates the ciphersuite-list length against the total record length...

CVE-2026-71302: Session Fixation

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover...

CVE-2026-76719: Improper Neutralization of Input During Web Page Generation

A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...

CVE-2026-102630: Use of Less Trusted Source

UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation, allowing unauthenticated attackers to inject arbitrary origins into admin layout pages. Attackers can set X-Forwarded-Host to redirect JavaScript asset loading ...

CVE-2026-79537

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference IDOR in the MCP transport session dispatch. The session store getSession in session-lifetime-manager.ts is keyed only by the client-supplied mcp-session-id header with no owner, namespace, or endpoint binding, and the...

CVE-2026-79537

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference IDOR in the MCP transport session dispatch. The session store getSession in session-lifetime-manager.ts is keyed only by the client-supplied mcp-session-id header with no owner, namespace, or endpoint binding, and the...

PT-2026-102892

SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construction where check auth verifies credentials against Surreal-Auth-NS and Surreal-Auth-DB headers but constructs sessions using Surreal-NS and Surreal-DB headers without validating access permissions. Attackers can...

PT-2026-102664

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client and Host for Linux versions prior to 15.82 Description An improper path validation issue exists in the Cloud Session Recording CSR functionality. A local authenticated attacker can exploit a race condition during path...

CVE-2026-92371: Improper Link Resolution Before File Access

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...

PT-2026-102764

Name of the Vulnerable Software and Affected Versions NetX RTSP Server affected versions not specified Description An unauthenticated client can cause a denial of service by draining the RTSP server's packet pool. This occurs when requests are sent containing a Session header that the parser cann...

PT-2026-102705

Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.4 Description The final form submission processes JSON arrays for each upload field but only verifies that IDs are numeric. Because client-supplied filenames and display names are trusted directly, the...

PT-2026-102820

Name of the Vulnerable Software and Affected Versions metatool-ai MetaMCP versions 2.4.22 and earlier Description An insecure direct object reference IDOR exists in the MCP transport session dispatch. The session store, specifically the getSession function in session-lifetime-manager.ts, relies...