CVE-2026-75627 Bastillion Authentication Bypass via Path-Prefix Routing Mismatch

Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager...

EUVD-2026-60578

Bastillion fails to properly validate request URI paths in its controller dispatcher, allowing unauthenticated attackers to bypass authentication filters by prefixing requests with arbitrary path segments. Attackers can access administrative controllers to read user listings, create manager...

CVE-2026-75627

Bastillion's controller dispatcher (BaseKontroller.java) fails to validate request URI paths, allowing unauthenticated attackers to bypass authentication filters by prefixing arbitrary path segments. This grants access to administrative controllers to read user listings, create manager accounts, ...

RHSA-2026:55855 Red Hat Security Advisory: libssh security update

Bulletin has no description...

CVE-2026-70426 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2026-70429 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2026-70430 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-C232-R242-W9V9 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-V269-8R2R-VJ93 vulnerabilities

Vulnerabilities for packages: jenkins...

MINI-XPPJ-GM2M-WMHW

Bulletin has no description...

MINI-QHQ4-RVF5-C4JV

Bulletin has no description...

EUVD-2026-60484

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic...

PT-2026-77247

Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...

EUVD-2021-34864

An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. If you identify a projector equipped with an iProjection function, you can access the projector using hard-coded authentication information and control the projector maliciously...

PT-2026-77254

Name of the Vulnerable Software and Affected Versions Epson EH-TW5350 iProjection.apk version 3.2.6 Description The application contains hard-coded authentication information. An attacker can use these credentials to gain unauthorized access to a projector equipped with the iProjection function a...

CVE-2021-43718

An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP...

PT-2026-77085

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

PT-2026-78241

Name of the Vulnerable Software and Affected Versions 4gaBoards versions prior to 3.3.9 Description An issue exists where any authenticated user can enumerate account information for all users and retrieve arbitrary account details. This occurs because the users/index and users/show actions rely...

PT-2026-77197

Joomla! Core - 20260807 - MFA Authentication Bypass in Joomla 4.0.0-5.4.7 and 6.0.0-6.1.2 - Insufficient state checks lead to a vector that allows to bypass 2FA checks...

CVE-2021-43717

CVE-2021-43717 affects the Epson EH-TW5350 projector (firmware 150075647YWWV110), specifically the iProjection.apk v3.2.6 component. The root cause is the use of hard-coded authentication credentials , which allows any network attacker to authenticate to the projector and gain full malicious cont...