CVE-2023-5612

Disclosure of the public email in Tags RSS Feed https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the...

CVE-2026-100276

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...

CVE-2026-100261

In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission...

CVE-2026-100276

In JetBrains YouTrack versions prior to 2026.2.19197 , an incorrect authorization vulnerability (CWE-863) allowed guest users to bypass visibility restrictions on workflow actions. This flaw enables unauthorized users to execute actions that should be restricted, potentially impacting system inte...

CVE-2026-100276

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...

EUVD-2026-90020

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...

CVE-2026-100261

In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists that allows users to change article visibility settings without having the required update permission . This flaw potentially impacts the integrity of content visibility within the platform. Remediation is available in ...

CVE-2026-100261

In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission...

EUVD-2026-90005

In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission...

CVE-2026-100261: Authentication Bypass Using an Alternate Path or Channel

In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission...

PT-2026-103323

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...

CVE-2026-27771

CVE-2026-27771 — Gitea Container Registry Auth Bypass CVSS: N/A unpublished Affects: Gitea Disclaimer: This proof-of-concept is provided for educational and authorized security research purposes only. Unauthorized access to computer systems is illegal. The authors are not responsible for any misu...

Zero Trust for AI Agents Starts With Fixing Zero Visibility

Before an AI agent gets access to your environment, you should be able to answer a few basic questions. Who owns it? What is it allowed to do? What can it reach, and how will you know when it does something outside its assigned task? These are familiar questions in security architecture. Agents...

PT-2026-97787

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role fail to properly verify...

CVE-2026-97311: Missing Authorization

A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileg...

CVE-2026-91791

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in ...

CVE-2026-91791 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in ...

CVE-2026-91791 Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in ...

CVE-2026-91791

Foxit PDF Editor/Reader is susceptible to an invalid memory read and application crash when processing a specially crafted PDF file. The vulnerability is caused by a reentrant execution condition involving JavaScript triggered by page-visibility events , which leads to the application accessing a...

EUVD-2026-85131

When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in ...