CVE-2026-19836 Webkul Bagisto Backend Customer Detail Feature view authorization

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

EUVD-2026-58682

A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...

GO-2025-3635 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-fips, hubble...

GO-2024-2656 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GO-2026-5914 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, kubescape-server-fips, kubescape-operator, kubescape-server, kubescape-operator-fips, kubescape, hubble-ui...

GO-2025-4167 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GO-2024-2653 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GO-2026-5400 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, kubescape-server-fips, kubescape-operator, kubescape-server, hubble-fips, kubescape-operator-fips, kubescape, hubble-ui...

GO-2024-2657 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: kots, commercial-grafana, commercial-expanso-edge, envoy-gateway, k3s, spire-server, envoy-gateway-fips, commercial-chainloop-backend, kine...

GO-2024-2922 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble, cilium, hubble-fips, cilium-fips, hubble-ui...

GO-2025-3415 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cilium, hubble-ui...

GO-2024-3072 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble, cilium, cilium-fips, hubble-ui...

GO-2024-3208 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, cilium, hubble-ui, cilium-fips...

PT-2026-72056

A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered...

PT-2026-72049

A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...

PT-2026-72117

Name of the Vulnerable Software and Affected Versions iCagenda versions prior to 2.0.0-4.0.11 Description Authenticated backend operators with permissions to access the extension can perform SQL injection. This occurs due to an unescaped numeric filter, allowing the injection of malicious SQL...

CVE-2026-73666

OpenChoreo is a developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.1, the OpenChoreo Backstage backend hardcoded backend.auth.dangerouslyDisableDefaultAuthPolicy and auth.providers.guest.dangerouslyAllowOutsideDevelopment to true, exposing /api/ without authentication and allowing...

nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

A flaw in nghttp2's nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections...

nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

A flaw in nghttp2's nghttpx proxy allows a remote attacker to perform HTTP request smuggling and cross-client response-queue poisoning. This occurs because the proxy ambiguously forwards HTTP/1.1 Upgrade requests that contain a Content-Length header to reusable keep-alive backend connections...