GHSA-MQ2J-7VQ4-77M8 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-X94W-CG8G-G593 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-4846-7XWG-PW5M vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-97FP-2VW9-Q5JG vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-QP28-HPG5-J7XC vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59843 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59851 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59842 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59844 vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-CR6P-6527-344M vulnerabilities

Vulnerabilities for packages: libssh...

GHSA-X5CR-V39M-53GW vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-73303

Budibase is an open-source low-code platform. Prior to 3.40.0, POST /api/v2/email on account.budibase.app accepted a client-controlled accountId without binding it to the authenticated session, while checking only currentEmail. An authenticated attacker who obtains a victim account identifier can...

CVE-2026-73306

Budibase is an open-source low-code platform. Prior to 3.39.25, POST /api/global/auth/:tenantId/login incremented the failure counter in packages/worker/src/api/controllers/global/auth.ts only for existing users, while packages/worker/src/middleware/emailLockout.ts returned X-Account-Locked and...

CVE-2026-72809

SiYuan versions = v3.7.2 patched in v3.7.4 contain an authentication bypass vulnerability in the kernel's CheckAuth function, which grants the administrator role RoleAdministrator to any request whose RemoteAddr is loopback 127.0.0.1 for a specific set of endpoints including /api/system/exit,...

CVE-2026-72786

Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save action that allows authenticated users to change passwords without verification. Attackers with edit users permission can reset any user's password including administrators by exploiting the...

CVE-2026-59914

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-46731

Dell Display and Peripheral Manager DDPM Windows, versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution...

CVE-2026-11932

IBM Security Verify Access and IBM Verify Identity Access (and their Container variants) are vulnerable to a denial-of-service attack caused by an infinite loop (CWE-835) triggered by a specially-crafted request. Affected versions are 10.0 through 10.0.9.2 and 11.0 through 11.0.3. IBM has release...

CVE-2026-11923 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...

CVE-2026-55957

A flaw was found in Apache Tomcat. When the JNDIRealm was configured to authenticate binds using GSSAPI, an attacker could exploit a missing critical step in the authentication process. This allowed the attacker to bypass password verification and authenticate without providing the correct...