376 matches found
OpenText Advanced Authentication Server configuration error vulnerability
OpenText Advanced Authentication Server versions 6.4.0.0 through 6.4.3.x, 6.5.0.0 through 6.5.0.x, and 6.6.0.0 through 6.6.1.0 contain a configuration error vulnerability. This vulnerability stems from the use of insecure default configurations during resource initialization, potentially leading ...
Ubiquiti WiFiman Desktop for macOS configuration error vulnerability
A configuration error vulnerability exists in Ubiquiti WiFiman Desktop for macOS versions prior to 1.3.0. This vulnerability arises from binding to unrestricted IP addresses, potentially allowing malicious attackers with network access to obtain information about host devices...
ESPHome Device Builder Dashboard configuration error vulnerability
Versions of ESPHome Device Builder Dashboard prior to 1.0.10 contain a configuration error vulnerability. This vulnerability arises because the trusted ingress site associated with the Home Assistant plugin is bound to 0.0.0.0, and dashboard authentication is bypassed. Additionally, the host...
Authlib configuration error vulnerability
A security vulnerability exists in Authlib versions from 0.15 up to but not including 1.9.1. This vulnerability arises because the reference implementations of ClientConfigurationEndpoint.authenticateclient and ClientConfigurationEndpoint.checkpermission search for the target client based on the...
vLLM configuration error vulnerability
Versions of vLLM prior to 0.32.0 contain a configuration error vulnerability. This vulnerability arises because OpenAI-compatible servers by default set allowedorigins for Starlette CORSMiddleware to a wildcard value. As a result, malicious web pages can exploit this flaw, allowing victims’...
OpenHands Software Agent SDK configuration error vulnerability
Versions prior to OpenHands Software Agent SDK 1.52.0 contain a configuration error vulnerability. This vulnerability arises because DockerWorkspace and Apptainer workspace starters bind the sandbox proxy server to all network interfaces, and since sessionapikeys is set to an empty value,...
Authlib configuration error vulnerability
Versions of Authlib prior to 1.9.0 contain a security vulnerability. This vulnerability arises because the default JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only the presence of an audience claim without verifying it against the current...
Chris Trudesk configuration error vulnerability
Versions 1.2.11 and earlier of Chris Trudesk contain a configuration error vulnerability. This vulnerability arises because the debug route enabled when NODEENV is not set lacks authentication; as a result, unauthenticated attackers can remotely invoke /debug/populatedb to delete all groups, tags...
AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.2:CLSA-2026:1792513900)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792513900 advisory. - In sshd in OpenSSH before 10.6, the value none for a configuration option is sometimes interpreted as a filename but was intended to mean...
Letta configuration error vulnerability
Letta versions 0.16.8 and earlier have a configuration error vulnerability. This vulnerability stems from the fact that LETTASERVERSECURE is not enabled in the compose.yaml file. As a result, the password middleware is not added, all API routes are not authenticated, and the PostgreSQL port of th...
IBM App Connect Enterprise configuration error vulnerability
The IBM App Connect Enterprise versions 13.0.1.0 to 13.0.8.2 have a configuration error vulnerability. This vulnerability stems from binding to unrestricted IP addresses, which may allow remote attackers to obtain sensitive information...
Coze-Dev and Coze-Studio: Configuration error vulnerabilities
Versions of coze-dev and coze-studio before 0.5.0 have a configuration error vulnerability. This vulnerability stems from insecure default configurations, allowing any registered user to execute commands in unshaded Python3 subprocedures by running workflow code nodes. Attackers can bypass the...
Apache Camel configuration error vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a configuration error vulnerability. This vulnerability stems from the createCorsHandler method in the Platform HTTP Vertx component, which sets Access-Control-Allow-Credentials to true beyond source checks...
IBM Concert configuration error vulnerability
The IBM Concert versions 1.0 to 3.0.0 have a configuration error vulnerability. This vulnerability stems from improper CORS Cross-Origin Resource Sharing configurations. Domains are not limited to only trusted domains, which may allow attackers to perform privileged operations...
Apache Camel configuration error vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a configuration error vulnerability. This vulnerability stems from the enableCORS function of the Jetty component using the default CrossOriginFilter configuration, which accepts requests from any origin and allows...
Linux Distros Unpatched Vulnerability : CVE-2026-98424
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the interfaces have been moved, cfg80211switchnetns moves the wiphy itself by setting its...
ROS-20261012-73-0028
The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...
SUSE CVE-2026-106587
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled...
