12422 matches found
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
September 8, 2026—KB5122880 (OS Build 22631.7582)
None None...
CVE-2026-89202
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including...
CVE-2026-108489
The Active Products Tables for WooCommerce plugin (by PluginUs.Net) versions up to and including 2.1.3 is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows for the retrieval of embedded sensitive data from the application. No specific rem...
WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by hooman in WordPress Plugin Active Products Tables for WooCommerce versions = 2.1.3...
PT-2026-112974
Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description An out-of-bounds write exists in Active Directory Domain Services, which allows an authorized attacker to execute arbitrary code over a network and affect the system...
Microsoft Windows: CVE-2026-69982: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-112140
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...
PT-2026-112457
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An open redirect issue exists where the system allows redirection to untrusted sites. This enables an authorized attacker to perform spoofing over a network, whic...
PT-2026-112479
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...
PT-2026-112413
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment,...
CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
PT-2026-113039
Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Xml versions 8.0.0 through 8.0.4 Description Improper certificate validation in KeyInfoX509Data allows the acceptance of serialized certificate formats containing attacker-controlled chain metadata instead of...
Microsoft Windows: CVE-2026-88165: Windows Active Directory Domain Services Remote Code Execution Vulnerability
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...
CVE-2026-85916: Exposure of Private Personal Information to an Unauthorized Actor
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally...
CVE-2026-107370: Use of GET Request Method With Sensitive Query Strings
When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a POST request. As a result, user-submitted form data is appended to the URL as query string parameters...
CVE-2026-85324: Memory Allocation with Excessive Size Value
Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-10759: Improper Neutralization of Special Elements used in an LDAP Query
A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifies the intended LDAP query and causes...
Microsoft Windows: CVE-2026-85321: Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...