CVE-2024-41290

CVE-2024-41290 FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data Additional Information: FlatPress CMS version 1.3.1 insecurely stores authentication-related data, including usernames and hashed passwords, directly in client-side cookies. This practice...

CVE-2026-118798

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-118798 Multiple sensitive authentication data exposed

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-118798

The CompuGroup Medical Wingesfar software is affected by CVE-2026-118798, where multiple sensitive authentication data types are exposed. The vulnerability stems from the inclusion of credentials , OAuth-related secrets , session information , and authentication artifacts within application logs ...

EUVD-2026-120033

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

EUVD-2026-118269

The ZSIRep client library ZSIREP.CLIENT.DLL is vulnerable to improper server certificate validation. It registers a process-wide .NET callback that accepts any certificate for HTTPS connections without verification. This allows a man-in-the-middle attacker to impersonate the ZSIRep server and...

PT-2026-135544

Name of the Vulnerable Software and Affected Versions OpenAirInterface Core Network version 2.2.1 Description A stack-based buffer overflow exists in the OAI CN5G UDM 'Nudm UEAU Generate Authentication Data' endpoint. The issue occurs when the UDM passes attacker-controlled...

SUSE CVE-2026-118176

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

Linux Distros Unpatched Vulnerability : CVE-2026-118176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths...

DEBIAN-CVE-2026-118176

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

CVE-2026-118176

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

CVE-2026-118176

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

UBUNTU-CVE-2026-118176

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

CVE-2026-118176

The Thunderbird email client is vulnerable to a security bypass on Windows platforms. Attackers can use extended-length UNC paths to bypass checks that normally prevent mailbox: URLs from accessing files on remote Windows network shares. By displaying a specially crafted email, an attacker can fo...

EUVD-2026-111353

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

Mozilla Thunderbird security vulnerabilities

A security vulnerability exists in Mozilla Thunderbird versions prior to 159 and prior to Thunderbird 153.6. It arises because the check for mailbox: URL access to a remote Windows network share can be bypassed via an extended length UNC path. This may lead to connection to a SMB server chosen by...

CVE-2026-118176: Undefined Security Weakness

Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email could cause Thunderbird to connect to an SMB server chosen by the attacker, disclosing the user's Windows...

PT-2026-127205

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 153.6 Thunderbird versions prior to 159 Description On Windows, a check designed to prevent mailbox: URLs from accessing files on remote network shares can be bypassed using extended-length UNC paths. This allows ...

CVE-2026-109252

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending truncated authentication data to a connecting client. During error handling of the incomplete response, the client attempts to access uninitialized memory, leading to an...

Payload external upload trust validation issue

Impact Under certain external upload configurations, Payload could send authentication data to a destination that was not verified as trusted. If the affected request contained a valid session, this could expose that session to an unintended recipient. You are affected if: - You have enabled...