19448 matches found
EUVD-2026-54654
Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.3, the Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism as if they were physically scanned, without validating the calling app or prompting the user...
CVE-2026-66060 Home Assistant: Unconfirmed NFC/QR tag scans allow silent automation execution by untrusted callers
Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.5.3, the Companion app treats tag links NFC or QR delivered through an OS-level routing mechanism as if they were physically scanned, without validating the calling app or prompting the user...
CVE-2026-66060
CVE-2026-66060 affects Home Assistant, where the Companion app accepts NFC/QR tag links via an OS-level routing mechanism and processes them as if physically scanned without validating the calling app or prompting the user. The root cause is unverified local calls delivering arbitrary tags to Hom...
EUVD-2026-54486
A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1. This affects the function SVReceiverstopThreadless of the file src/sampledvalues/svsubscriber.c of the component ASDU Element Handler. Performing a manipulation results in heap-based buffer overflow. The attack must be...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.2 security update
Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image. Red Hat Ansible Automation Platform 2.2 delivers the Ansible Automation Portal as a bootable...
CVE-2026-65523
CVE-2026-65523 affects the WordPress plugin Formidable Forms Signature Online Contract Automation (versions
EUVD-2026-53970
Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...
CVE-2026-65523
Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...
CVE-2023-7355
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54389
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54388
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54387
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54386
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54385
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54384
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54383
Erroneously reserved under wrong year by automation defect; never assigned...
CVE-2023-54382
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...
CVE-2023-54381
Erroneously reserved under wrong year by automation defect; superseded by correct-year CVE...