210933 matches found
CVE-2026-117619
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after t...
CVE-2026-117619
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after t...
CVE-2026-117619
Jenkins versions 2.587 and earlier (including LTS 2.580.1 and earlier ) are vulnerable to an insufficient session expiration flaw (CVE-2026-117619 ). The root cause is that requests authenticated via HTTP Basic authentication , including those using API tokens , can result in the acquisition of a...
CVE-2026-115644
Apache Kafka Connect contains an authentication bypass vulnerability in the admin REST API. When the admin.listeners property is configured as a separate listener from the main listeners property, REST extensions (e.g., BasicAuthSecurityRestExtension) specified via rest.extension.classes are not ...
CVE-2026-115644 Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions
Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...
EUVD-2026-112173
Apache Kafka Connect contains an authentication bypass vulnerability affecting the admin REST API when admin.listeners is configured with a separate listener from the main listeners property. When operators isolate the admin REST API by explicitly configuring the "admin.listeners" property, REST...
EUVD-2026-112209
A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies the JWT signature, but two further checks are only performed when explicitly configured: - The issuer iss claim is verified only when sasl.oauthbearer.expected.issuer is set. Wh...
EUVD-2026-112212
A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing crafted URL parameters to an insecure endpoint running as root. Note that this vulnerability can on...
CVE-2026-103409
A Missing authentication for critical function vulnerability exists in the Juniper Networks Session Smart Router . An unauthenticated network-based attacker can obtain administrative privileges by passing crafted URL parameters to an insecure endpoint that runs as root . Crucially, this vulnerabi...
Security Bulletin: IBM Rational Developer for i is affected by Multiple vulnerabilities
Summary IBM Rational Developer for i is affected by an HTTP request smuggling vulnerability in Jetty-http CVE-2026-19203, two authentication bypass vulnerabilities in sshd-osgi CVE-2026-77185, CVE-2026-93994, two memory exhaustion vulnerabilities in sshd-sftp CVE-2026-94002, CVE-2026-94029, an...
chall2026-telneted
@Hack 2026: Telneted Authored by Harsh. Category : Pwn Solves : 34/120 Tags : beginner Protocol : telnet Recon team has found another endpoint in the Aliens' network, but we can't seem to be able to connect to it with our tools. Network captures show a user 'astrax' using it smuggle secret data...
CVE-2026-55369
Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its type and passes it straight into the MongoDB storage query. When email is not a string for example a JSON object such as...
CVE-2026-59177
ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the "Home Assistant" add-on's trusted "ingress" site binds to "0.0.0.0" while intentionally skipping dashboard authentication because the supervisor is expected to authenticate requests...
CVE-2026-59177
The ESPHome Device Builder Dashboard (versions prior to 1.0.10 ) is vulnerable to unauthenticated access when running as a Home Assistant add-on using host networking. The issue arises because the trusted ingress site binds to 0.0.0.0, allowing any device on the local network to bypass the superv...
CVE-2026-55369 Waline login accepts a non-string email as a match-all MongoDB query
Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its type and passes it straight into the MongoDB storage query. When email is not a string for example a JSON object such as...
EUVD-2026-112060
Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its type and passes it straight into the MongoDB storage query. When email is not a string for example a JSON object such as...
CVE-2026-55369 Waline login accepts a non-string email as a match-all MongoDB query
Waline is a comment system with backend support. Prior to version 1.41.1, the login endpoint POST /api/token reads the email field from the request body without checking its type and passes it straight into the MongoDB storage query. When email is not a string for example a JSON object such as...
CVE-2026-55369
The comment system Waline is vulnerable to a partial authentication bypass in versions prior to 1.41.1 . The POST /api/token login endpoint fails to validate the type of the email field in the request body. When a non-string value (e.g., a JSON object like `{
CVE-2026-86426
LibreNMS CVE-2026-86426 - Full Audit & Recon Tool 📌 Description This tool is a Proof of Concept PoC and reconnaissance framework for the vulnerability CVE-2026-86426 Authentication Bypass via Type Confusion in LibreNMS. It demonstrates how an unauthenticated attacker can: 1. Bypass API...
