CVE-2026-73683

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...

CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...

MINI-9XV6-MF37-53HJ

Bulletin has no description...

CVE-2026-49844 vulnerabilities

Vulnerabilities for packages: airbyte-server, kayenta, hadoop-fips, apache-activemq-artemis, apache-tika-fips, elasticsearch-fips, apache-pulsar-fips, conductor-fips, apache-tika, spark, spdx-tools-java, keycloak-config-cli, apache-jena-fuseki, apache-activemq-fips, akhq, kafka, nuxeo, opensearch...

CVE-2026-71311 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-8V25-V8P6-QF7V vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-54572 vulnerabilities

Vulnerabilities for packages: telegraf...

CVE-2026-73643 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, renovate...

CVE-2026-73569 vulnerabilities

Vulnerabilities for packages: tileserver-gl, jitsucom-jitsu...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

No d...

CVE-2026-64887

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...

CVE-2026-19908

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The...

CVE-2026-17182

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...

CVE-2026-17079

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...

CVE-2026-17175

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

CVE-2026-16905

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...

Exploit for Injection in Budibase

CVE-2026-31816 — Budibase Authentication Bypass → RCE !CVE...

MINI-3WW8-2QHG-W6RM

Bulletin has no description...

CVE-2026-71571

Technical details are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2026-19910 PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...