EUVD-2026-120944

Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160...

EUVD-2026-121044

V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HTTPS traffic by exploiting the default false value of SSLConnectConfig.validate and...

EUVD-2026-120918

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

EUVD-2026-120911

Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

EUVD-2026-120916

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

EUVD-2026-120935

Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160...

EUVD-2026-121096

Mitigation bypass in the WebExtensions component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7...

EUVD-2026-121090

Same-origin policy bypass due to race condition in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

EUVD-2026-121064

Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7...

CVE-2026-111264

The security constraint generated for EJB JAX-WS endpoints with configured authentication protects only some HTTP methods. A remote unauthenticated attacker can bypass authentication by sending requests with another HTTP method. Users are recommended to upgrade to version 10.3.0 or 11.0.0-M2, whi...

VMmanager HTTP Request Spoofing

The vulnerability in VMmanager 6 relates to inconsistent interpretation of HTTP requests. Exploitation of this vulnerability enables a remote attacker to manipulate and forward HTTP requests, bypassing security mechanisms...

DIAFAN.CMS Authentication Bypass

The vulnerability in the DIAFAN.CMS content management system is related to the lack of authentication for a critical function. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

SimpleOne ITSM Cryptographic Signature Bypass Authentication

The vulnerability in the SimpleOne ITSM automation system relates to insufficient validation of incoming requests. Exploitation of this vulnerability could allow a remote attacker to bypass the authentication process...

Avanpost FAM Authentication Bypass

The vulnerability related to the password recovery mechanism in the Avanpost FAM Server component of the Avanpost FAM authentication tool involves improper control over the password recovery process. Exploitation of this vulnerability enables a remote attacker to authenticate to the system by...

Citeck Community Auth Bypass

The BPM platform Citeck Community vulnerability is related to flaws in its authentication process. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

TrueConf Server Authentication Bypass

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access under an arbitrary username without a password...

OLIMPOX Authentication Bypass Info Disclosure

The vulnerability of the software for the training and control system “OLIMPOX” is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information and modify data within...

CRM Platform Authentication Bypass

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

Doctor Around Telemedicine Premium Authentication Bypass Info Disclosure

The vulnerability of the “Doctor Around. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

Doctor Near Telemedicine Premium Authentication Bypass

The vulnerability of the “Doctor Near. Telemedicine Premium” platform relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...