8 matches found
CVE-2026-101287
Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier userId and the status of the authentication process validSteps in this cookie and relies on these...
CVE-2026-101287 Authentication bypass in Stela by Diaple Networking
Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier userId and the status of the authentication process validSteps in this cookie and relies on these...
CVE-2026-101287
Stela, versions prior to 1.60.1 , is vulnerable to an authentication bypass because it fails to validate the integrity of the "authProcess" cookie. The application relies on this cookie to store the userId and validSteps values; since these can be modified by a client, a remote attacker can imper...
EUVD-2026-101949
Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the user identifier userId and the status of the authentication process validSteps in this cookie and relies on these...
bcryptrpcserver (>=0.0.1, <=0.0.6), cloudview (0.3.10) +11 more potentially affected by CVE-2026-0994 via protobuf (4.23.2)
protobuf PYPI version 4.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bcryptrpcserver =0.0.1, =3.27.0, =1.0.2, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.0.1, =0.5.29, =0.6.0rc2 Source cves: CVE-2026-0994 Source...
Malicious code in test-mlw2-stela-seams (npm)
The package test-mlw2-stela-seams was found to contain malicious code...
