34145 matches found
JLSEC-2026-1262 In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are...
In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...
CVE-2026-68076
Apache Airflow's environment-variable secrets backend contains an authorization bypass where a team-scoped Connection or Variable can be resolved from the wrong team's scope. The root cause is a guard bypass occurring when a team name contains an underscore , causing the lookup to fall through to...
CVE-2026-68076
Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are...
PYSEC-2026-3714
The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...
Malicious Package
Overview @years18/n8n-nodes-utils-helper-e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
PT-2026-71127
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.1 Description The environment-variable secrets backend incorrectly resolves team-scoped Connections or Variables from the wrong team's scope. This occurs because the security guard intended to prevent this...
TencentOS Server 2: xorg-x11-server (TSSA-2026:0834)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0834 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
PT-2026-71218
When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled, and the dataplane authentication token is sent over that unverified connection. An on-path actor can intercept the dataplane...
UBUNTU-CVE-2026-18691
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to ...
CVE-2026-18691 Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to ...
CVE-2026-18691 Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to ...
CVE-2026-18691
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to ...
Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to ...
CVE-2026-62783
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-62758
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-61366
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-62758
CVE-2026-62758 is a heap-based buffer overflow in Windows Remote Access Connection Manager that permits a locally authenticated attacker to elevate privileges. Affected component: RASMAN service on Windows. Root cause: heap overflow enabling arbitrary code execution with HIGH impact on confidenti...
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
