CVE-2026-58273

The Rucio scientific data management framework is vulnerable to an authorization bypass in the /credentials/signurl endpoint. The application incorrectly trusts the client-supplied X-Rucio-Account HTTP header instead of the account identity verified by the authentication token. Consequently, any ...

CVE-2026-97693 Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. From 0.6.0.beta1 until 0.7.1, there is insufficient isolation between execution-capable Docker sandboxes and trusted application services. A low-privileged authenticated user who can execute...

CVE-2026-97693

The Yuxi platform (versions 0.6.0.beta1 through 0.7.1) suffers from an isolation failure between Docker sandboxes and trusted application services. A low-privileged authenticated user can bypass sandbox boundaries to access other tenants' APIs, files, and secrets, or manipulate the unauthenticate...

CVE-2026-23552

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak Overview Apache Camel's KeycloakSecurityPolicy does not validate the iss issuer claim of JWT tokens against the configured realm. This means a token issued by one Keycloak realm is silently accepted by a policy configured for a...

CVE-2026-6355

Augmentt: Cross-Tenant Access via IDOR Credits This CVE was a collaborative effort between: Raznov – GitHub: https://github.com/basraznov HelloWorld Author– GitHub: https://github.com/Penquinsecq Description A vulnerability in the web application allows unauthorized users to access and manipulate...

LangChain LangGraph input validation error vulnerability

A security vulnerability exists in LangChain LangGraph. It stems from improper validation of namespace tags; PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore concatenate namespace tags with “.”. In contrast, BaseStore only validates tags for put and aput operations. Unvalidate...

CVE-2026-113874

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...

CVE-2026-113874

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...

EUVD-2026-108274

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...

CVE-2026-113874 SmileCDR HAPI FHIR trusted tenant partition override

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...

CVE-2026-113874

The SmileCDR HAPI FHIR component is vulnerable to a partition identity override because it allows an untrusted bundle body to replace a partition identity previously established by a trusted source. Due to a lack of default storage partition entitlement enforcement, an attacker authorized for one...

HAPI FHIR

RISK EVALUATION SmileCDR HAPI FHIR contains multiple vulnerabilities. In the worst case, a user could read or write content in a tenant partition that they should not have access to, or an unauthenticated user could trigger a denial-of-service. 2. RECOMMENDED PRACTICES Update to most recent...

Smile Digital Health HAPI FHIR authorization issue vulnerability

Smile Digital Health HAPI FHIR contains an authorization issue vulnerability. This vulnerability arises because the untrusted bundle body can replace partition identities previously established by a trusted source; by default, storage partition permissions are not enforced. As a result, attackers...

PT-2026-121484

SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...

CVE-2026-105945 Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist of a type, tenant, namespace, name and version. Authorization of package operations is based only on the tenant and...

CVE-2026-105945

The Apache Pulsar Packages Management Service is vulnerable to a path traversal issue when using the filesystem storage provider . The service fails to validate the version component of package names, allowing it to contain URL-encoded path separators and parent directory references. This enables...

CVE-2026-105945 Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage

The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist of a type, tenant, namespace, name and version. Authorization of package operations is based only on the tenant and...

CVE-2026-105312

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on a...

CVE-2026-105312

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on a...

EUVD-2026-104964

A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding to a ClusterRole granting cluster-wide get/list/watch on a...