CVE-2026-101154

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-105811

The QnABot on AWS (versions 7.0.0 through 7.4.5) contains an authorization bypass vulnerability in the optional Amazon Q Business Lambda hook sample (q-business-lambda-hook). This issue stems from a user-controlled key and could allow an authenticated remote user to read arbitrary Amazon S3 objec...

CVE-2026-105811 Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...

CVE-2026-61674

A flaw was found in Fluent Bit. A stack-based buffer overflow exists in the forward output plugin due to insufficient bounds checking on server responses during connection handshakes. A remote attacker controlling or impersonating a destination server can exploit this vulnerability by sending an...

h2spacex

H2SpaceX Libreria HTTP/2 di basso livello basata su Scapy che può essere utilizzata per il Single Packet Attack Race Condition su H2 Questa libreria è stata parte di una ricerca accademica dal titolo QUIC-er Races: HTTP/3 won’t save you from TOCTOU vulnerabilities. Approfondimento sull'articolo...

CVE-2026-106451

The yawkat LZ4 Java library (versions 1.7.0 through 1.11.4 ) is vulnerable to a TOCTOU race condition during native library extraction. The net.jpountz.util.Native.load() function creates a temporary .lck file but uses a predictable path for the actual native library. Because FileOutputStream ope...

CVE-2026-101157 Security Advisory 0192

A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...

CVE-2026-102156

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input allows an unauthenticated network attacker to inject queries against a configured directory service. This vulnerability occurs under high-complexity conditions and could impact the confidentiality of the ...

CVE-2026-102156 Security Advisory 0191

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

EUVD-2026-93951

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

CVE-2026-101155 Security Advisory 0189

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

CVE-2026-101154 Security Advisory 0189

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-101152 Security Advisory 0187

Insufficient validation in the Single Sign-On SSO login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider IdP to deliver authentication material to an attacker-controlled URL instead of to CloudVision...

EUVD-2026-93948

Insufficient validation in the Single Sign-On SSO login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider IdP to deliver authentication material to an attacker-controlled URL instead of to CloudVision...

CVE-2026-104047

A vulnerability exists in SSSD when configured to use Microsoft Entra ID . The issue stems from a lack of proper sanitization of search inputs before they are incorporated into directory query filters, leading to a query injection flaw. A local user can exploit this by submitting a crafted lookup...

CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-9226

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...