CVE-2026-55146

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. In versions from 16.0.0 prior to 27.0.4 and from 28.0.0 prior to 28.0.2, the issuetracker backend does not correctly verify edit access...

CVE-2026-55146

The LORIS (Longitudinal Online Research and Imaging System) web application contains an incorrect access check in its issue_tracker backend. Specifically, in versions 16.0.0 to 27.0.3 and 28.0.0 to 28.0.1 , the backend fails to verify edit permissions even though the frontend restricts them. This...

CVE-2026-55146

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. In versions from 16.0.0 prior to 27.0.4 and from 28.0.0 prior to 28.0.2, the "issuetracker" backend does not correctly verify edit access...

CVE-2026-55146 LORIS has incorrect access checks in issue_tracker

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. In versions from 16.0.0 prior to 27.0.4 and from 28.0.0 prior to 28.0.2, the issuetracker backend does not correctly verify edit access...

EUVD-2026-114517

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. In versions from 16.0.0 prior to 27.0.4 and from 28.0.0 prior to 28.0.2, the issuetracker backend does not correctly verify edit access...

PT-2026-134222

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. In versions from 16.0.0 prior to 27.0.4 and from 28.0.0 prior to 28.0.2, the issue tracker backend does not correctly verify edit access...

CVE-2026-55146: aces Loris: LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and…

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. In versions from 16.0.0 prior to 27.0.4 and from 28.0.0 prior to 28.0.2, the issuetracker backend does not correctly verify edit access...

CVE-2026-30868

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...

EUVD-2026-11238

OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.4, multiple OPNsense MVC API endpoints perform state‑changing operations but are accessible via HTTP GET requests without CSRF protection. The framework CSRF validation in ApiControllerBase only applies to POST/PUT/DELETE...

OneDrive backup job fails with "Download request retry timeout exceeded"

Challenge During a OneDrive backup, the following error may occur while downloading a OneNote file .one: Failed to backup item: %path%, Download request retry timeout exceeded. This error will only be displayed when using one of the following versions of Veeam Backup for Microsoft 365 : v7...