CVE-2026-8321

A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. Performing a manipulation results in authentication bypass using alternate channel. The attack is...

MINI-29QX-MHVH-FMWF

Bulletin has no description...

MINI-VF8R-PX58-F96R

Bulletin has no description...

MINI-PMM5-64VQ-HJ6W

Bulletin has no description...

MINI-VQVV-M4X7-RPRM

Bulletin has no description...

MINI-R5HH-P3WQ-G23Q

Bulletin has no description...

GHSA-7FXV-8WR2-MFC4 Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...

SUSE CVE-2026-43306

In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type With CONFIGCFI enabled, the kernel strictly enforces that indirect function calls use a function pointer type that matches the target function. I ran into the following type...

MINI-RWCP-H3MX-44XH

Bulletin has no description...

MINI-64CX-G2CR-3HGW

Bulletin has no description...

EUVD-2026-28639

PraisonAI MCP tools/call path-traversal = RCE via Python .pth injection...

MINI-55HP-76VX-P3VG

Bulletin has no description...

MINI-MV8V-H7FH-CHF8

Bulletin has no description...

MINI-3H6H-XR68-G39C

Bulletin has no description...

MINI-8WJ9-PC6C-9R74

Bulletin has no description...

CVE-2025-9973

Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...

MINI-Q23G-86M4-JFJC

Bulletin has no description...

CVE-2025-9973 Authorization Bypass via Adaptive Authentication in WSO2 Identity Server Allows Cross-Organization Account Takeover

Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...

CVE-2025-9973

CVE-2025-9973 affects WS O2 Identity Server: failure to validate the organization context during adaptive authentication allows triggering authentication logic in other organizations/sub-organizations. This enables cross-organization authorization bypass, potentially leading to privilege escalati...

CVE-2025-9973

Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations. A malicious actor with privileges to configure adaptive authentication within one organization ca...