398 matches found
CVE-2026-91851: Incorrect Authorization
Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. DashboardsController::listTemplates allowed a template when either: - its restricttopermissionflag matched one of the current user’s permission flags, or - restricttopermissionflag...
PT-2026-91905
Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. DashboardsController::listTemplates allowed a template when either: - its restrict to permission flag matched one of the current user’s permission flags, or - restrict to permission...
Subpath symlinking on Windows nodes permits NTLM coercion
CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N - Medium 5.8 An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network share. When a kubelet resolves symlinks, it does...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10
An integer coercion error was detected in the openvswitch kernel module. When there are a sufficient number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected. This could potentially lead to an...
PoC-CVE-2025-24071
❀ coerce-library CVE-2025-24071 — coerción NTLM mediante .library-ms método SMB / TAR ❀ Qué hace Solicita tu IP de ataque y un nombre de archivo , escribe un .library-ms apuntando a \\share, y lo empaqueta en exploit.tar. Cuando el Explorador examina la carpeta donde acaba el .library-ms suelto,...
LibreNMS <= 26.7.0 - Unauthenticated API Access
LibreNMS = 26.8.0 contains an authentication bypass caused by MySQL type coercion in the REST API token validation, letting unauthenticated attackers access protected endpoints and execute remote code via alert templates. id: CVE-2026-86426 info: name: LibreNMS = 26.7.0 - Unauthenticated API Acce...
CVE-2026-86426
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...
CVE-2026-86426 LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...
EUVD-2026-72384
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...
CVE-2026-86426 LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...
CVE-2026-86426
LibreNMS before 26.8.0 contains an authentication bypass in its REST API caused by MySQL type coercion : unauthenticated attackers can send small integers (0–9) instead of string tokens, allowing them to match token hashes and access protected endpoints. Successful exploitation exposes device cre...
CVE-2026-86426 LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...
PT-2026-86792
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...
CVE-2026-86426: Improper Authentication
LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending small integers like 0 through 9 to...
CVE-2026-86143: Integer Coercion Error
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...
CVE-2026-86143: Integer Coercion Error
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...
GHSA-W2QP-RPH6-63G4 fastify vulnerable to schema validation bypass via root primitive coercion mismatch
Impact fastify before 5.12.1, when a route uses a root-level primitive body schema for example an integer with a minimum and maximum and the default type coercion, validates the coerced value but exposes the original, uncoerced value to the route handler. For example, a JSON body "10" is coerced ...
NPM: fastify vulnerable to schema validation bypass via root primitive coercion mismatch
NPM: fastify vulnerable to schema validation bypass via root primitive coercion mismatch vulnerability discovered by ? in WordPress Npm fastify versions 5.12.1...
fastify vulnerable to schema validation bypass via root primitive coercion mismatch
Impact fastify before 5.12.1, when a route uses a root-level primitive body schema for example an integer with a minimum and maximum and the default type coercion, validates the coerced value but exposes the original, uncoerced value to the route handler. For example, a JSON body "10" is coerced ...