Microsoft Power Apps Remote Code Execution Vulnerability

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

.NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

.NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-113505

Name of the Vulnerable Software and Affected Versions Legacy Update versions 1.12.0 through 1.13.1 Description An origin validation error exists in the IsPermitted method of the ActiveX control. When the hosting document's hostname is not on the permitted list, the system fails to set E...

CVE-2026-96234: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-113048

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-113052

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

Microsoft .NET: CVE-2026-96238: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96238: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

Microsoft .NET: CVE-2026-96234: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-112944

Name of the Vulnerable Software and Affected Versions Azure Key Vault affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Origin validation is a security mechanism used to verify that a request comes from a...

PT-2026-112307

Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An origin validation error allows an authorized attacker to execute code over a network. Origin validation is a security mechanism used to verify that a request originates from a...

PT-2026-112090

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-96234

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026.

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...

CVE-2026-109332

Network-AI npm network-ai before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with ...

EUVD-2026-97634

Network-AI npm network-ai before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with ...

CVE-2026-109332

The Network-AI (npm network-ai) package versions before 5.15.2 is vulnerable to a CORS Origin Validation Error within the McpSseServer._handleRequest function in lib/mcp-transport-sse.ts. The root cause is the reflection of localhost Origins into the Access-Control-Allow-Origin header regardless ...

CVE-2026-109332 Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport

Network-AI npm network-ai before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with ...