GHSA-VXPW-J846-P89Q

creationtimestamp| type| source ---|---|--- 2026-06-19 14:41:40+00:00| seen| https://gist.github.com/alon710/cb38e049872764207b2ad97489bbd503 2026-07-02 16:42:07+00:00| seen| https://gist.github.com/konard/7292d01fd27ee78b9adfcdd581745d9e...

CVE-2011-3003

creationtimestamp| type| source ---|---|--- 2026-06-19 14:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monkwzvtrb25...

CVE-2026-44087

creationtimestamp| type| source ---|---|--- 2026-06-19 14:35:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monktjewzu2a 2026-06-20 12:28:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116782433283716837 2026-06-24 01:02:31+00:00| seen|...

CVE-2026-44046

creationtimestamp| type| source ---|---|--- 2026-06-19 14:30:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monkkku6ku2c...

CVE-2026-39999

creationtimestamp| type| source ---|---|--- 2026-06-19 14:25:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monkbmgnwz2z 2026-06-21 15:33:01+00:00| seen| https://bsky.app/profile/canartuc.com/post/3mosoyvi5jr2z 2026-06-21 16:31:02+00:00| seen|...

CVE-2026-39998

creationtimestamp| type| source ---|---|--- 2026-06-19 14:20:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monjzwsif22r 2026-06-27 07:05:13+00:00| seen| https://bsky.app/profile/potato.software/post/3mpavgflvtw26 2026-06-27 07:05:13+00:00| seen|...

CVE-2026-49872

Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can possibly authenticate itself with credentials from a different source. This issue affects Apache APISIX: from 3.0.0 through 3.16.0. Users are recommended to upgrade to version...

GHSA-J3VX-CX2R-PVG8

creationtimestamp| type| source ---|---|--- 2026-06-19 14:11:51+00:00| seen| https://gist.github.com/alon710/95012eaaac31573d3f20cff3cfbc3e84...

CVE-2026-48934

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 03:06:10+00:00| seen|...

CVE-2026-48931

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-23 13:41:44+00:00| seen|...

CVE-2026-48936

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 02:31:44+00:00| seen|...

CVE-2026-48615

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 02:18:08+00:00| seen|...

CVE-2026-48619

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 02:41:51+00:00| seen|...

CVE-2026-48928

creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 02:20:01+00:00| seen|...

CVE-2011-2996

creationtimestamp| type| source ---|---|--- 2026-06-19 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monhlr2q7a2j...

CVE-2026-49872

Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can possibly authenticate itself with credentials from a different source. This issue affects Apache APISIX: from 3.0.0 through 3.16.0. Users are recommended to upgrade to version...

CVE-2026-49872

The CVE-2026-49872 entry concerns Apache APISIX and its cas-auth plugin. Affected versions are 3.0.0 through 3.16.0; the issue is an improper authentication flaw where, when cas-auth is used on a route, an attacker may authenticate using credentials from a different source. The public documentati...

CVE-2026-49872 Apache APISIX: Improper authentication in cas-auth plugin

Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can possibly authenticate itself with credentials from a different source. This issue affects Apache APISIX: from 3.0.0 through 3.16.0. Users are recommended to upgrade to version...

EUVD-2026-38015

Incorrect Authorization vulnerability in Apache APISIX. An attacker can capitalise on authz-casdoor plugin under default configuration to authenticate themselves with credentials from a different source. This issue affects Apache APISIX: from 2.14.1 through 3.16.0. Users are recommended to upgrad...

CVE-2026-44046 Apache APISIX: wolf-rbac plugin Identity Spoofing

Use of Less Trusted Source vulnerability in Apache APISIX. Attacker can take advantage of wolf-rbac plugin under default configuration to potentially pollute logs with spoofed identity information and exploit IP based access control rules. This issue affects Apache APISIX: from 1.2.0 through...