CVE-2026-109357

LibreNMS versions before 26.9.0 are vulnerable to an LDAP filter injection in ldap-authorization and ad-authorization modes. The root cause is the insertion of unescaped usernames into LDAP search filters combined with an authentication mechanism that only verifies user existence. If REMOTE_USER ...

CVE-2026-109357 LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence. When REMOTEUSER is not forwarded, unauthenticated attackers can send a wildcar...

CVE-2026-109317

The Grav grav-plugin-api before version 1.0.36 is vulnerable to a privilege escalation flaw. The root cause is the storage of positive scalar admin or api parent grants, which allows delegated user managers to bypass security checks. An attacker with api.users.write permissions can modify account...

EUVD-2026-97619

Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting...

CVE-2026-109357: Improper Neutralization of Special Elements used in an LDAP Query

LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and authentication only checks user existence. When REMOTEUSER is not forwarded, unauthenticated attackers can send a wildcar...

CVE-2026-109317: Improper Privilege Management

Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting...

CVE-2026-109566: Use of Hard-coded Credentials

Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-created admin@laravel account with password admin. The account is seeded by the setup installer and silently re-create...

CVE-2026-108740 GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment

GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields via form-encoded requests. Attackers with read-only access can POST user.accessall= and user.emailverified=true to...

CVE-2026-108753: Use of Hard-coded Credentials

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and...

PT-2026-110155

Name of the Vulnerable Software and Affected Versions Agnaistic agnai versions prior to 1.0.556 Description The self-hosted deployment configuration contains hard-coded credentials within the self-host.docker-compose.yml file, specifically a fixed administrator password and a public JSON Web Toke...

CVE-2026-71895 Apache DolphinScheduler: Missing Authorization Checks Allow Non-Admin Users to Retrieve Kubernetes Credentials

An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the...

CVE-2026-71895

An authorization vulnerability in Apache DolphinScheduler (versions 3.2.0 before 3.4.3 ) allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrators. The exposed kubeconfig data contains credentials that could permit unauthorized access to the Kubern...

Astra Linux – Vulnerability in Zabbix

A bug in the code allows an attacker to create a forged zbxsession cookie, which enables them to log in with admin permissions...

Astra Linux – Vulnerability in open-vm-tools

VMware Tools 12.0.0, 11.x.y, and 10.x.y contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the guest OS can escalate privileges as a root user in the virtual machine...

Exploit for CVE-2026-103956

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-104467

YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized that allows unauthenticated attackers to call admin-only API routes when public API mode is enabled. Attackers can send requests to endpoints like api/ci/updateconfig and api/archives to overwrite...

PT-2026-104448

Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

RHEL 10 : dogtag-pki (RHSA-2026:73765)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73765 advisory. IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the...

CVE-2026-102364

mall4j through 4.0 fails to validate the sysType field in sa-token sessions, allowing storefront customers to authenticate as back-office users by reusing their session tokens. Attackers can register on the public storefront and use their customer session token to access admin endpoints lacking...

CVE-2026-48611-phpBB

CVE-2026-48611-phpBB 绕过身份验证 简单的绕过身份验证PoC，如果想通过浏览器访问，别忘了根据浏览器显示的User-Agent更改脚本中的 USERAGENT 变量，否则无法正常工作。使用Cookie编辑器替换 sid和 u的值。 影响版本：phpBB 3.3.16及以下 + 4.0.0-a2 phpbb python3 exploit.py https://localhost:8000 joushk + Target: https://localhost:8000 + Target username: joushk + User-Agent: Mozilla/5.0...