CVE-2026-112101

The BlackBeltTechnology pi-agent-dashboard (versions up to 0.8.0 ) contains a vulnerability in the WebSocket Gateway component. Specifically, an unknown function within the /BlackBeltTechnology/pi-agent-dashboard file fails to properly validate origins when the cwd argument is manipulated. This f...

CVE-2026-98819

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8MAX, and records exceeding...

CVE-2025-43929

CVE-2025-43929 Proof-of-concept for CVE-2025-43929, a high-severity vulnerability in KiTTY allowing for local executables to be ran without user confirmation under certain circumstances Vulnerability Type CWE-346: CWE-346 Origin Validation Error Vulnerability Description openactions.py in kitty...

CVE-2026-109461

Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

EUVD-2026-102952

Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

CVE-2026-109461

An origin validation error exists in the Microsoft Authentication Library (MSAL) for Node.js . This vulnerability allows an unauthorized attacker to perform information disclosure over a network. The CVSS 3.1 base score is 5.9 (Medium), with a high impact on confidentiality and high attack comple...

PT-2026-115975

Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

PT-2026-115927

Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class names when public introspection is disabled. Unauthenticated attackers holding only the public Application Id can send crafted...

Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...

Security Updates for Azure DevOps CLI Extension (October 2026)

The Azure DevOps CLI extension for Microsoft Azure CLI installed on the remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability: - Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a...

CVE-2026-97381

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...

CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...

CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...

CVE-2026-97381

Legacy Update versions 1.12.0 through 1.13.1 are vulnerable to an origin validation error in the IsPermitted method of its ActiveX control. Due to a logic flaw, hostnames not on the permitted list fail to trigger an E_ACCESSDENIED error, causing the method to incorrectly return S_OK. An attacker ...

CVE-2026-88132

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...

CVE-2026-70213

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-69877

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-96234

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96234

An origin validation error in .NET allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the NCSC advisory. Exploitation details are not provided.