555237 matches found
CVE-2026-72544 OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity
An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function. The function accepts viewer identity and IP address as caller-supplied parameters without...
CVE-2026-72543 OpenSignLabs OpenSign - Insecure Direct Object Reference
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
EUVD-2026-56013
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
CVE-2026-72543 OpenSignLabs OpenSign - Insecure Direct Object Reference
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
CVE-2026-72543
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
CVE-2026-72543 OpenSignLabs OpenSign - Insecure Direct Object Reference
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
CVE-2026-72543
OpenSignLabs OpenSign (up to version 2.37.0) is affected by an Insecure Direct Object Reference (IDOR) through the getcontact Parse cloud function. The function runs with the useMasterKey and performs no authentication or authorization checks, allowing unauthenticated remote attackers to enumerat...
CVE-2026-72537 Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
CVE-2026-72537 Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
CVE-2026-72537 Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
EUVD-2026-56007
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
CVE-2026-72537
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
CVE-2026-72537
Authentik Authentik (through version 2026.5.6) contains a privilege escalation vulnerability where an attacker with a source-scoped SCIM provisioning token can take over existing local user accounts, including the superuser. The SCIM user ingest function accepts pre-existing local accounts by use...
EUVD-2026-56004
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...
CVE-2026-72534
CVE-2026-72534 describes a privilege escalation in Authentik (Authentik Security authentik) up to version 2026.5.6. A source-scoped SCIM provisioning token can elevate to superuser by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function ad...
CVE-2026-72534 Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...
CVE-2026-72534 Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...
CVE-2026-72534 Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...
CVE-2026-72534
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...
CVE-2026-68388
A flaw was found in the Linux kernel's Server Message Block SMB client. The smb3simplefallocaterange function, which manages file allocation, can incorrectly process overlapping allocated ranges provided by a server. This can result in parts of a file not being properly zero-filled, leading to...