92 matches found
PT-2026-108019
Name of the Vulnerable Software and Affected Versions Checkmk versions 2.5.0 through 2.5.0p9 Description A local privilege escalation issue exists when the mk-oracle agent plugin is enabled. A user who has permissions to edit the Oracle Instant Client referenced by this plugin can escalate their...
EUVD-2026-74181
The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication...
CVE-2026-78629: Incorrect Implementation of Authentication Algorithm
The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication...
PT-2026-88439
Name of the Vulnerable Software and Affected Versions Okta Hyperdrive agent plugin affected versions not specified Description The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response...
CVE-2026-14852
Privilege escalation in Checkmk versions 2.5.0 before 2.5.0p9, 2.4.0 before 2.4.0p34, 2.3.0 before 2.3.0p49, and 2.2.0 EOL allows a local unprivileged user to execute arbitrary commands as root by starting a process crafted to look like a SAP HANA instance. Without an explicit database...
CVE-2024-47091
Privilege escalation in the mkmysql agent plugin on Windows in Checkmk 2.4.0p29, 2.3.0p47, and 2.2.0 EOL allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' or with write access to a binary referenced by such a service to execute arbitrary cod...
org.apache.tomcat.embed:tomcat-embed-jasper (7.0.0), software.fitz:easy-agent-plugin-istio-tracing (0.4.0-release) potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.0 -...
org.apache.tomcat.embed:tomcat-embed-jasper (7.0.0), software.fitz:easy-agent-plugin-istio-tracing (0.4.0-release) potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.0 -...
org.apache.tomcat.embed:tomcat-embed-jasper (7.0.0), software.fitz:easy-agent-plugin-istio-tracing (0.4.0-release) potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.0 -...
org.apache.tomcat.embed:tomcat-embed-jasper (7.0.0), software.fitz:easy-agent-plugin-istio-tracing (0.4.0-release) potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.0 -...
org.apache.tomcat.embed:tomcat-embed-jasper (7.0.0), software.fitz:easy-agent-plugin-istio-tracing (0.4.0-release) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.0 -...
org.apache.tomcat.embed:tomcat-embed-jasper (7.0.0), software.fitz:easy-agent-plugin-istio-tracing (0.4.0-release) potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.0)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.0 -...
CVE-2026-32628: Improper Neutralization of Special Elements used in an SQL Command
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628 AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
EUVD-2026-12138
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628 AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
CVE-2026-32628 AnythingLLM has SQL Injection in Built-in SQL Agent Plugin via Unsanitized table_name Parameter
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.11.1 and earlier, a SQL injection vulnerability in the built-in SQL Agent plugin allows any user who can invoke the agent to execute arbitrary SQL commands on connected...
PT-2026-25382
Name of the Vulnerable Software and Affected Versions AnythingLLM versions 1.11.1 and earlier Description AnythingLLM is an application that turns content into context for use with Large Language Models LLMs. A SQL injection issue exists in the built-in SQL Agent plugin, allowing users who can...