CVE-2026-72537

Authentik Authentik (through version 2026.5.6) contains a privilege escalation vulnerability where an attacker with a source-scoped SCIM provisioning token can take over existing local user accounts, including the superuser. The SCIM user ingest function accepts pre-existing local accounts by use...

CVE-2026-72537 Authentik Security authentik - Privilege Escalation

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...

CVE-2026-72537 Authentik Security authentik - Privilege Escalation

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...

Security Bulletin: Vulnerability in Kernel affects IBM Netezza Appliance

Summary The Kernel package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2024-56433 Vulnerability Details CVEID:CVE-2024-56433 DESCRIPTION: shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 throug...

Mira Hormone Monitor, Mira Android App

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access unauthorized health profile information, make changes to health information, cause a denial-of-service condition, disclose session token information, and obtain control of user accounts. 2...

Myndr: Myndr CORS Misconfiguration

The CORS configuration on admin.myndr.net allowed any .myndr.net subdomain to read authenticated admin panel responses, including CSRF nonces and session data. This vulnerability could have been exploited to take over admin accounts...

CVE-2026-18972: Authentication Bypass by Spoofing

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...

PT-2026-70816

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Magento Open Source affected versions not specified Adobe Commerce B2B affected versions not specified Description Stored Cross-Site Scripting XSS occurs due to insufficient protection of the web...

PT-2026-70815

Name of the Vulnerable Software and Affected Versions Magento Open Source affected versions not specified Adobe Commerce affected versions not specified Adobe Commerce B2B affected versions not specified Description Adobe Commerce is affected by a stored Cross-Site Scripting XSS issue, where a...

CVE-2026-51584

A remote attacker can achieve account takeover in usememos v0.27.1 due to an improper authentication flaw in the SignIn handler (located at server/router/api/v1/auth_service.go). The vulnerability exists because the ssoCredentials branch matches SSO identity based on an attacker-controllable iden...

PT-2026-70914

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

CVE-2026-68067: Weak Authentication

The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and...

CVE-2026-15426: Improper Privilege Management

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.11.1. This is due to the plugin not properly verifying that a user is authorized to perform an action...

CVE-2026-12571: Improper Authentication

An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...

CVE-2026-15606: Missing Authorization

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with...

PT-2026-70365

Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central affected versions not specified Description An authentication bypass exists in the password-reset workflow, which could allow an attacker to perform an account takeover. Recommendations At the moment, there is no...

PT-2026-70179

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...

PT-2026-70209

An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/auth service.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject...

EUVD-2026-56175

An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...

CVE-2026-51584

An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...