CVE-2026-50529 DataEase: Link Token Leakage Prior to Share Password/Ticket Validation

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/share/proxyInfo share interface generates and returns X-DE-LINK-TOKEN before validating the share password or ticket, allowing unauthenticated attackers who know a protected share UUID to obtain a valid...

Cisco Stealthwatch Management Console Backup Authentication Bypass Vulnerability

Cisco Stealthwatch Management Console is a data collection and analysis device from cisco. Cisco Stealthwatch Management Console has a share validation bypass vulnerability that is caused by an insecure system configuration. An attacker can exploit this vulnerability by sending a crafted HTTP...