EUVD-2026-87792

Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts...

CVE-2026-72668

Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts...

EUVD-2026-87709

Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the metadata-cleaning worker that trusts image object keys from mutable database rows without validating ownership. An authenticated attacker can place a victim tenant's image key in a row they control, causing the...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-64640

CVE-2026-64640 — Apache Polaris: register におけるロケーション検証前の資格情報発行 CVE-2026-64640 の自己完結型・ワンコマンド再現スクリプトです。Apache Polaris の Iceberg REST register エンドポイントは、呼び出し元が指定したパスに対してクラウドストレージ資格情報を発行し、そのパスをカタログの allowedLocations と照合する前に サーバー側で読み取ります。 自カタログでテーブルを作成する権限しか持たないプリンシパルでも、Polaris...

Kibana 9.4.7, 9.5.0 Security Update (ESA-2026-85)

Unintended Proxy or Intermediary 'Confused Deputy' in Kibana Leading to Privilege Escalation Unintended Proxy or Intermediary 'Confused Deputy' CWE-441 in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations...

Linux Distros Unpatched Vulnerability : CVE-2026-95361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in DevTools. CVE-2026-95361 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2026-91742

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system acce...

Linux Distros Unpatched Vulnerability : CVE-2026-95328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Mobile. CVE-2026-95328 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

Summary A critical Confused Deputy Arbitrary File Read & Exfiltration vulnerability in the Atlassian MCP server Python allows an AI agent to exfiltrate sensitive host files and environment secrets. By providing absolute system paths to the attachments parameter of the updateissue tool, an agent c...

CVE-2026-77255

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira updateissue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP serv...

EUVD-2026-84746

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira updateissue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP serv...

CVE-2026-77255 MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira updateissue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP serv...

CVE-2026-77255 MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the Jira updateissue attachments argument is converted into local paths and routed to the attachment upload implementation without workspace validation. A caller can make the MCP serv...

CVE-2026-77255

The mcp-atlassian Model Context Protocol server (versions prior to 0.22.0 ) is vulnerable to an arbitrary file read and exfiltration via a confused deputy attack. The flaw exists in the update_issue function, where the attachments argument is converted into local paths and passed to the upload_at...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI Confused Deputy（混乱した代理人）脆弱性 - セキュリティ研究検証プロジェクト 重要な声明 本リポジトリは派生ビルドリポジトリであり、元のメインリポジトリの付属関係にあります。 役割| リポジトリ| 説明 ---|---|--- メインリポジトリ| inforcqb/cve-2026-0013-exploit| オリジナルの脆弱性研究 本リポジトリ| XiaoBaiLovesStirring/cve-2026-0013-poc| クラウドビルド成果物の配布 セキュリティプロトコル...

StrandHogg2

StrandHogg2 StrandHogg2 CVE-2020-0096 のPoC 元の脆弱性の情報 現在の説明 ActivityStartController.java の startActivities において、confused deputy による権限昇格の可能性があります。これにより、追加の実行権限を必要とせずにローカルでの権限昇格が発生する可能性があります。ユーザーの操作は必要ありません。Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-145669109 深刻度 CVSS 3....

CVE-2026-20516

CVE-2026-20516: Android TV における MiracastService の混乱した代理（confused deputy） Davide Di Matteo @Dingo97 による調査および開示。 これは私にとって初めてクレジットされた CVE です。PEAQ Android TV を調査中に、不適切にエクスポートされたシステム権限の Miracast サービスを発見しました。呼び出し元は、サービス自身の権限を使って Wi-Fi Direct の状態を変更させる intent extra を供給できます。 MediaTek はこの問題を...

CVE-2026-49086

camel-dapr コンシューマーのルーティングヘッダー上書き / Confused Deputy（混乱した代理人）再現コード CVE-2026-49086 このプロジェクトは、Apache Camel の camel-dapr コンポーネントにおける ルーティングヘッダー上書き（confused deputy / 混乱した代理人） の欠陥を実証するもので、CVE-2026-49086 として追跡されています。 Dapr pub/sub コンシューマー （DaprPubSubConsumer）は、受信した（信頼できない）CloudEvent のフィールドを Exchange...

Chromium CVE-2026-91742: Confused deputy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...