EUVD-2026-116594

NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with clientid, redirecturi and approved=true to insert...

CVE-2026-121736

NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with clientid, redirecturi and approved=true to insert...

CVE-2026-121736 NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation

NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with clientid, redirecturi and approved=true to insert...

CVE-2026-121736 NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creation

NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with clientid, redirecturi and approved=true to insert...

CVE-2026-121736

NocoDB versions 0.300.0 before 2026.08.0 are affected by a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler. This flaw allows unauthenticated attackers to send anonymous requests containing client_id, redirect_uri, and approved=true to create unbounded ownerless OA...

CVE-2026-121736

NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. Attackers can send anonymous requests with clientid, redirecturi and approved=true to insert...

CVE-2026-63500

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...

EUVD-2026-116268

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...

CVE-2026-63482

The Yeti Forensics Intelligence platform is vulnerable to unauthenticated access to full audit timelines in versions prior to 2.5.1 . The root cause is that the audit router is registered without the required auth.get_current_active_user dependency, and core/web/apiv2/audit.py fails to perform a ...

CVE-2026-63482 Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Dependsauth.getcurrentactiveuser, and core/web/apiv2/audit.py does not perform a route-level authentication check for...

CVE-2026-63489

In Yeti version 2.5.0 and earlier, a low-privileged authenticated user can perform AQL injection due to the direct interpolation of user-controlled sorting fields and filter_aliases attribute paths into ArangoDB AQL identifiers within core/database_arango.py . Attackers can send crafted values to...

CVE-2026-89295

In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the client-supplied count parameter of the GET /api/v1/IdGenerator/submodelIds/count and GET /api/v2/IdGenerator/submodelIds/count endpoints is not enforced. The service generates and retains...

EUVD-2026-115818

In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the client-supplied count parameter of the GET /api/v1/IdGenerator/submodelIds/count and GET /api/v2/IdGenerator/submodelIds/count endpoints is not enforced. The service generates and retains...

CVE-2026-89295 Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter

In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the client-supplied count parameter of the GET /api/v1/IdGenerator/submodelIds/count and GET /api/v2/IdGenerator/submodelIds/count endpoints is not enforced. The service generates and retains...

CVE-2026-89295

The Eclipse Mnestix AAS Generator (versions 0.1.0 through 1.4.x ) is vulnerable to an unauthenticated memory-exhaustion denial of service (DoS). The root cause is the lack of a practical upper bound on the client-supplied count parameter in the GET /api/v1/IdGenerator/submodelIds/{count} and GET ...

CVE-2026-63500: yeti-platform yeti: Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, core/schemas/dfiq.py accepts an unvalidated uuid from DFIQ YAML through POST /api/v2/dfiq/fromyaml, and core/web/apiv2/dfiq.py later interpolates that stored value...

CVE-2026-5027

This post is a research article published by EQSTLab. Thanks toYahia Hamza, who reported and analyzed this vulnerability. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ Description CVE-2026-5027 : Langflow Arbitrary File Write Vulnerability description: A path...

CVE-2026-82411

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...

CVE-2026-82411

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint "GET...

EUVD-2026-112551

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other ObjectType via the history-detail endpoint GET...