117766 matches found
CVE-2026-52756
creationtimestamp| type| source ---|---|--- 2026-06-10 15:40:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnx2by7mii2j...
CVE-2026-52751
creationtimestamp| type| source ---|---|--- 2026-06-10 15:27:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwzh4kpsh2r 2026-06-11 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mo24z3qhlg2i...
CVE-2026-52758
creationtimestamp| type| source ---|---|--- 2026-06-10 15:21:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwz7deg5b2q 2026-06-11 15:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnziveizyk22...
CVE-2026-53471
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...
CVE-2026-53439
creationtimestamp| type| source ---|---|--- 2026-06-10 15:07:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwyduf4sh2r 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...
CVE-2026-52752
creationtimestamp| type| source ---|---|--- 2026-06-10 15:03:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy7pl2zb2m...
CVE-2026-52759
creationtimestamp| type| source ---|---|--- 2026-06-10 15:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwy3uedfc2f...
CVE-2026-47350
Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.31 and 14.0.0-14.3.3...
CVE-2026-53438
creationtimestamp| type| source ---|---|--- 2026-06-10 14:59:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwxybdq6t2p 2026-06-16 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/jenkins-multiple-vulnerabilities20260617...
CVE-2026-8677
creationtimestamp| type| source ---|---|--- 2026-06-10 14:16:19+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwvllvnkm2o...
EUVD-2026-36034
A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...
CVE-2026-53470 Migration-planner: getsourcedownloadurl missing organization check
A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...
CVE-2026-53470 Migration-planner: getsourcedownloadurl missing organization check
A flaw was found in migration-planner. An authenticated attacker could exploit an improper access control vulnerability in the /api/v1/sources/id/image-url endpoint. This flaw allows the attacker to bypass an ownership check and obtain presigned S3 URLs for Open Virtual Appliance OVA images...
CVE-2026-53471
CVE-2026-53471 affects the migration-planner project, specifically the agent-api middleware. The UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the source_id claim in JWTs against the requested source ID. Root cause: missing validation allows an authenticated attacker with ...
CVE-2026-53471 Migration-planner: agent api ignores jwt source_id claim
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...
EUVD-2026-36031
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...
CVE-2026-53471 Migration-planner: agent api ignores jwt source_id claim
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...
CVE-2026-53471
A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...