CVE-2026-71367

An incorrect authorization vulnerability was found in AWX's WebSocket consumer. The consumeraccess function only enforces access controls for object-level event groups jobevents, workflowevents, adhoccommandevents but does not restrict subscriptions to global broadcast groups such as...

CVE-2026-71367 Awx: websocket broadcast groups leak cross-organization job metadata

An incorrect authorization vulnerability was found in AWX's WebSocket consumer. The consumeraccess function only enforces access controls for object-level event groups jobevents, workflowevents, adhoccommandevents but does not restrict subscriptions to global broadcast groups such as...

EUVD-2026-124483

An incorrect authorization vulnerability was found in AWX's WebSocket consumer. The consumeraccess function only enforces access controls for object-level event groups jobevents, workflowevents, adhoccommandevents but does not restrict subscriptions to global broadcast groups such as...

CVE-2026-71367

An incorrect authorization vulnerability exists in the AWX WebSocket consumer. The consumer_access() function fails to restrict subscriptions to global broadcast groups, such as jobs-status_changed, while only enforcing controls for object-level event groups. Consequently, an authenticated user c...

cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages

A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a denial of service in the cockpit-ws...

Important: Red Hat Security Advisory: cockpit security update

An update for cockpit is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: cockpit security update

An update for cockpit is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages

A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a denial of service in the cockpit-ws...

ROOT-APP-MAVEN-AIKIDO-2026-143672 AIKIDO-2026-143672 in org.apache.tomcat.embed:tomcat-embed-websocket - Patched by Root

Root has patched AIKIDO-2026-143672 in the org.apache.tomcat.embed:tomcat-embed-websocket package for Root:Maven. Multiple fixed versions available...

Important: Red Hat Security Advisory: cockpit security update

An update for cockpit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages

A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a denial of service in the cockpit-ws...

Important: Red Hat Security Advisory: cockpit security update

An update for cockpit is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

cockpit: cockpit: Denial of Service via unbounded fragmented WebSocket messages

A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a denial of service in the cockpit-ws...

STEWS

STEWS: Security Testing and Enumeration of WebSockets STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains...

FreeRDP: FreeRDP: Denial of Service via integer overflow and double free in WinPR

A flaw was found in FreeRDP. A remote attacker, specifically a malicious RD Gateway peer, could send a crafted WebSocket Ping frame with an extended payload length. This action triggers an an integer overflow in the StreamEnsureRemainingCapacity function, leading to an integer wraparound and a...

bmcweb

OpenBMC webserver This component attempts to be a "do everything" embedded webserver for OpenBMC. Features The webserver implements a few distinct interfaces: DBus event websocket. Allows registering for changes to specific dbus paths, properties, and will send an event from the websocket if thos...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable Exploit Description Use this exp,you can bypass authentication and run cmd USEAGE sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 exp.py usage: exp.py -h --target TARGET --port PORT --username USERNAME...

jscythe

jscythe abuses the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code, even if their debugging capabilities are disabled. Tested and working against Visual Studio Code, Discord, any Node.js application and more! How 1. Locate t...

CVE-2020-13935

Exploit for WebSocket Vulnerability in Apache Tomcat CVE-2020-13935 In the corresponding blog post the analysis and exploitation of the vulnerability is explained in detail. Usage Clone the repository, then build the tcdos binary. Run the program as follows to test whether a particular WebSocket...