MINI-64CH-CMFM-W7G9

Bulletin has no description...

MINI-27XP-JFFX-R6W6

Bulletin has no description...

MINI-P9Q9-V925-P526

Bulletin has no description...

MINI-QHR3-7FWM-8JFW

Bulletin has no description...

MINI-R9PP-F9HW-XC56

Bulletin has no description...

MINI-7P7W-7QC7-8XRV

Bulletin has no description...

MINI-3HFJ-7CMP-PJCX

Bulletin has no description...

MINI-22R6-MJ52-7H6R

Bulletin has no description...

MINI-H5MC-9HMR-33W6

Bulletin has no description...

CVE-2026-44192

A flaw was found in the Ansible Lightspeed Model Context Protocol MCP server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the...

CVE-2026-44192 Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal

A flaw was found in the Ansible Lightspeed Model Context Protocol MCP server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the...

EUVD-2026-47652

A flaw was found in the Ansible Lightspeed Model Context Protocol MCP server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through indirect prompt injection. By doing so, the attacker can cause the server to write files to unauthorized locations on the...

EUVD-2026-47638

n8n before 2.29.8 and 2.30.x before 2.30.1 affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was introduced does not verify that the authenticated user has access to the workflow referenced as the OAuth resource. On instances with at least one active MCP Server Trigger...

BELL-CVE-2026-64105

Bulletin has no description...

BELL-CVE-2026-64170

Bulletin has no description...

ECHO-A954-A105-41DF

Bulletin has no description...

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via the EarlyResponseForGoGetMeta function. An attacker can obtain sensitive repository metadata, such as the existence of private repositories, their clone URLs, and default branch...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the attachment update. An attacker can access private attachment content by re-linking a known attachment UUID to an issue or comment in a repository they control, causing authorization checks to be performed...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the attachment update. An attacker can access private attachment content by re-linking a known attachment UUID to an issue or comment in a repository they control, causing authorization checks to be performed...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the checkTokenPublicOnly function when handling Repository and Package categories with owners set to limited visibility. An attacker can gain unauthorized access to internal repository or package content by...