CVE-2023-22496-PoC

CVE-2023-22496 — Netdata Agent OS Command Injection PoC Severity : Critical CVSS 9.8 Affected : Netdata Agent Fixed in : v1.37.0 Type : OS Command Injection CWE-78 Overview CVE-2023-22496 is an OS command injection vulnerability in Netdata's health alarm notification system. The registryhostname ...

Trusting the Tool: Asymmetric Deference of LLM Vulnerability Auditors to Static-Analysis Evidence

Pipelines that combine large language models LLMs with static analysis let the model consume the analyser's output as evidence, but whether the model distinguishes true from false evidence, and whether its scrutiny depends on what the evidence claims, has not been measured. We built an...

CVE-2026-113598

Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulkdelete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX and blocklist monitoring alarms...

CVE-2026-113598 Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete

Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulkdelete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX and blocklist monitoring alarms...

CVE-2026-113598 Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete

Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulkdelete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX and blocklist monitoring alarms...

CVE-2026-113598

Modoboa versions before 2.8.0 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the POST /api/v2/alarms/bulk_delete/ action. This flaw allows authenticated users to delete monitoring alarms—including DNS, MX, and blocklist alerts—belonging to other domains by enume...

EUVD-2026-105164

Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulkdelete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX and blocklist monitoring alarms...

CVE-2026-113598 Modoboa before 2.8.0 IDOR via API v2 alarms bulk_delete

Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulkdelete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX and blocklist monitoring alarms...

CVE-2026-113598

Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulkdelete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX and blocklist monitoring alarms...

PT-2026-118458

Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulk delete/ action. Attackers can enumerate sequential alarm IDs to delete DNS, MX and blocklist monitoring alarms...

Modoboa authorization issue vulnerability

Versions of Modoboa prior to 2.8.0 contained an authorization issue vulnerability. This vulnerability stemmed from insecure direct object references. Certified users can delete alarms from other domains using the POST /api/v2/alarms/bulkdelete/ endpoint. Attackers can enumerate sequential alarm I...

CVE-2026-110110 JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disable Endpoints

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController enable and disable endpoints lack the save action annotation, attackers can toggle alarms by id...

CVE-2026-110110

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController enable and disable endpoints lack the save action annotation, attackers can toggle alarms by id...

PT-2026-111704

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController enable and disable endpoints lack the save action annotation, attackers can toggle alarms by id...

CVE-2026-110110: Missing Authorization

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController enable and disable endpoints lack the save action annotation, attackers can toggle alarms by id...

JetLinks IoT Platform: Authorization Issues Vulnerability

The JetLinks IoT Platform versions 2.10.0 and earlier have an authorization issue. This vulnerability stems from the lack of a save action annotation in the enable and disable endpoints of the AlarmConfigController, resulting in an absence of proper authorization checks. As a result, users with...

Malicious code in content-silent-alarms (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in actor-alarms (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

CVE-2025-70340: Improper Access Control

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.8.2 to 6.9 contain security vulnerabilities. These vulnerabilities stem from the failure to clear the Present bit before removing the extensible mode context entries. This can lead to entries with hardware acquisition tearing and access to released memory, resulting in...