280 matches found
openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding
A flaw was found in OpenSSH. In configurations where tunnel forwarding is enabled on the server, the restrict option in the authorized keys configuration fails to properly block tunnel forwarding requests. An authenticated user connecting with a restricted key can exploit this issue to bypass...
KLA91329 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Track can be exploited...
EUVD-2026-95282
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security restrictions due to improper authentication...
Visual Studio Code Source Editor Security Restriction Bypass
The vulnerability of Visual Studio Code’s source editor is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
Content Credentials SDK Insufficient Validation
The vulnerability of the Content Credentials SDK library is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...
Fleet Server Host Service Identification Processing Bypass
The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...
dogtag-pki Authentication Bypass
The vulnerability of the PKI infrastructure creation and management system, as well as the lifecycle of digital certificates in dogtag-pki, is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...
Podman WORKDIR Security Restriction Bypass
The vulnerability of the WORKDIR processing mechanism in the software platform for managing and launching OCI containers, Podman, is related to the tracking of symbolic links. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions...
CVE-2026-84241 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...
CVE-2026-18869
IBM i versions 7.3 through 7.6 are affected by a Server-Side Request Forgery (SSRF) vulnerability in the FTP service. Improper validation of PORT and EPRT commands allows a remote authenticated attacker to bypass security restrictions and access internal network services . The CVSS 3.1 base score...
CVE-2026-18869 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...
CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...
CVE-2026-17262
IBM i versions 7.3 through 7.6 are vulnerable to denial of service and security restriction bypass due to improper validation of FTP authentication commands (CWE-78, OS Command Injection). A local attacker on an adjacent network with no required privileges can exploit this with low complexity, re...
CVE-2026-17262 IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands...
CVE-2026-84081: Improper Certificate Validation
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...
CVE-2026-84077: Cross-Site Request Forgery (CSRF)
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability...
ROS-20260914-73-0099
The vulnerability of Google Chrome is related to a data source confirmation error. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created HTML page...
github.com/gohugoio/hugo: Hugo: Security restriction bypass via mixed-case URL schemes
A flaw was found in Hugo. Case-sensitive validation in the URL deny rule mechanism allows an attacker to bypass access restrictions. By supplying mixed-case URL schemes when fetching remote resources, an attacker can access restricted network destinations, such as localhost or internal IP...
Online Store Authentication Bypass
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...