EUVD-2026-94010

Backstage: Improper input validation in proxy-backend...

GHSA-9GHW-48H5-V2W5 Backstage: Improper input validation in proxy-backend

Impact An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a path outside the configured base path on the target server. This is limited to target servers already configured as proxy endpoints and requires Backstage authentication by...

Backstage: Improper input validation in proxy-backend

Impact An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to a path outside the configured base path on the target server. This is limited to target servers already configured as proxy endpoints and requires Backstage authentication by...

EUVD-2026-94059

Backstage: Sensitive information exposure in Scaffolder...

CVE-2026-106487

A flaw was found in the plugin-kubernetes-backend component of Backstage. In environments configured for catalog cluster discovery, an authenticated catalog contributor can define an unsupported authentication mode on cluster resource entities. This vulnerability allows the backend to query the...

CVE-2026-106496

A flaw was found in the Backstage plugin-catalog-backend component. Due to inconsistent enforcement of allowed location types during catalog processing, an authenticated remote attacker can submit location targets that should be restricted under specific configurations. This flaw can enable the...

CVE-2026-106504

A flaw was found in plugin-scaffolder-backend. An authenticated user with permissions to create and read scaffolder tasks can observe sensitive values in task logs when an execution step is denied by action permissions. This flaw allows an attacker to access sensitive input data, resulting in...

CVE-2026-106502

A flaw was found in the Backstage plugin-scaffolder-backend component. Under specific template and failure conditions, Scaffolder task failure events can expose sensitive backend-managed credentials. An authenticated user can exploit this vulnerability to retrieve credentials used during task...

CVE-2026-106497

A flaw was found in Backstage's plugin-catalog-backend component. Inconsistent evaluation of catalog property permissions can lead to unauthorized information disclosure. In environments that rely on value-based permission rules to enforce access controls, an authenticated attacker can bypass...

CVE-2026-93524

A flaw was found in xorg-x11-server. An authenticated local user can trigger an out-of-bounds heap memory read by sending specially crafted X Keyboard Extension XKB requests with inconsistent key range parameters. This flaw leads to information disclosure, allowing the user to read sensitive data...

CVE-2026-93517

A flaw was found in xorg-x11-server. The GLX OpenGL Extension to the X Window System interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially...

CVE-2026-62251

Homer is open source telecom observability software. Prior to version 11.0.283, the V4StatisticsQuery handler passes the user-supplied rawquery field directly to DuckDB without calling the sqlvalidator.ValidateRawSQL function used throughout the rest of the codebase. Any authenticated user can...

CVE-2026-76452

A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an authenticated, remote attacker to conduct SQL injection attacks against an affected application. This vulnerability is due to insufficient...

CVE-2026-20032

A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...

CVE-2026-106557

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently validate TechDocs Markdown extension configuration. An authenticated user who can register or modify documentation sources may cause a TechDo...

redis-cve-2026-23479-check

redis-cve-2026-23479-check Un checker di versione sicuro, di sola lettura per CVE-2026-23479 — la use-after-free nel codice del blocking-client di Redis che consente a un utente autenticato di raggiungere l'esecuzione remota di codice sull'host. Non sfrutta la vulnerabilità. Si connette, autentic...

DRUPAL-CONTRIB-2026-217

Advanced File System turns Drupal's file storage into a manageable, observable and maintainable subsystem. The Advanced Filesystem: Backup submodule does not sufficiently validate certain requests. This may allow an attacker to trick an authenticated user into performing unintended actions throug...

EUVD-2026-94060

Backstage may expose sensitive information in Scaffolder task failure events...

EUVD-2026-94069

Backstage has sensitive information exposure in scaffolder task logs...

GHSA-4XVQ-3M68-H444 Backstage has sensitive information exposure in scaffolder task logs

Impact An authenticated user who can create and read scaffolder tasks may be able to observe sensitive values in task logs in deployments with restrictive action permissions and affected templates. Exploitation requires a denied action whose input contains such a value. Patches Patched in...