EUVD-2026-104644

TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated...

EUVD-2026-104643

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera...

GO-2026-6672 Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query in github.com/sipcapture/homer-app

Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query in github.com/sipcapture/homer-app. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

CLSA-2026-1792455642 TuxCare security update for @storybook/manager-api (1 CVE)

TuxCare rebuilt @storybook/manager-api to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

PT-2026-118359

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid token, and the auth rate limit applies...

PT-2026-120309

Summary The REST route GET /api/v1//: id/locales and the equivalent page route does not apply the publicApiCheckAsync gate that ApostropheCMS's other read routes enforce. An unauthenticated caller can therefore query this route for any document id and learn whether the document exists and which...

Oracle MySQL Vulnerability CVE-2026-101726

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: C API. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability...

PT-2026-118323

A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api plugins.php of the component Plugin Installer. Such manipulation of the argument plugin file leads to unrestricted upload. The attack may ...

PT-2026-119398

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.12 MySQL Server versions 9.7.0 through 9.7.3 MySQL Server version 26.7.0 through 26.7.1 MySQL Cluster versions 8.0.0 through 8.0.49 MySQL Cluster versions 8.4.0 through 8.4.12 MySQL Cluster versions 9.7....

Red Hat: CVE-2026-92539: grafana: Grafana: Unauthorized cross-organization user management via the SCIM API

A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana instance through the SCIM API insecure direct object reference. Only Grafana Enterprise instances with SCIM enabled are affected...

PT-2026-118453

Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique row values API endpoint. Attackers can enumerate sequential field IDs to retrieve up to 100 distinct cell values per field from tables i...

PT-2026-120300

Summary The self-service password-change endpoint verifies the current password but does not use the login module’s failed-attempt counter, throttle, delay, or lockout mechanism. An attacker with a valid authenticated session can submit repeated guesses for the current password without receiving ...

PT-2026-118338

Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, an...

PT-2026-118316

In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key and use it at the expense of the site operator. This only...

PT-2026-119399

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.12 MySQL Server versions 9.7.0 through 9.7.3 MySQL Server version 26.7.0 through 26.7.1 MySQL Cluster versions 8.0.0 through 8.0.49 MySQL Cluster versions 8.4.0 through 8.4.12 MySQL Cluster versions 9.7....

CVE-2026-59387 - broken access control restriction in Cloud Controller API | Cloud Foundry

Severity High CVSS score: 8.8 High CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Vendor Cloud Foundry Foundation Versions Affected CAPI Cloud Foundry Controller – Confirmed in CAPI up to v1.245.0 inclusive Description The Nginx routing configuration for Cloud Controller blocks unauthenticated acce...

PT-2026-117950

Name of the Vulnerable Software and Affected Versions DB-GPT versions prior to 0.8.3 Description An unauthenticated remote code execution issue exists because the /api/v1/chat/react-agent endpoint uses a mock get user from headers function that assigns the admin role to all callers regardless of...

PT-2026-119218

Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite component: Security API. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Foundation...

PT-2026-118450

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 4.34.0 Description A public REST API type utilizing publicApiProjection allows the exposure of excluded searchable or sortable field information. This occurs through search membership and sort ordering oracles,...

PT-2026-118492

Name of the Vulnerable Software and Affected Versions ApostropheCMS import-export module versions prior to 3.7.1 Description The API endpoint 'POST /api/v1/@apostrophecms/import-export/clean-export' lacks authentication and authorization checks. This allows unauthenticated anonymous users with a...