CVE-2026-113468

The TYPO3 Shop by coding.ms extension contains a Broken Access Control vulnerability (CWE-862) in its PayPal payment notification endpoint. The application fails to verify that incoming data originates from the legitimate payment provider, allowing any site visitor to overwrite the stored payment...

CVE-2026-112070 Broken Access Control in extension "Analytics" (analytics)

The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...

CVE-2026-112070 Broken Access Control in extension "Analytics" (analytics)

The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...

CVE-2026-112070

The Analytics extension (analytics) contains a Broken Access Control vulnerability due to a failure in the AJAX routes , which do not verify if a backend user has permission to access the associated module or dashboard widget. Consequently, any backend user can retrieve analytics data from sites ...

TYPO3-EXT-SA-2026-031: Broken Access Control in extension "Analytics" (analytics)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...

TYPO3-EXT-SA-2026-035: Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...

TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...

TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...

TYPO3-EXT-SA-2026-033: Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...

TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028...

WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin LearnPress versions = 4.4.10...

WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin ACF Extended versions = 0.9.2.7...

curl: server filename with control characters printed to terminal (`-J`)

Summary: With -OJ, curl takes the filename from the server's Content-Disposition header. parsefilename in src/toolcbhdr.c does not remove control characters such as ESC 0x1b. When a warning prints that name, the escape sequences reach the terminal. Steps to reproduce 1. Build curl from the source...

CVE-2026-98584

A flaw was found in the Linux kernel's network traffic control subsystem. A local user can exploit this vulnerability to cause an information disclosure of kernel stack data. When dumping text search filter configurations, the kernel fails to initialize a stack structure before copying it into...

CVE-2023-35794-WebSSH-Hijacking

CVE-2023-35794-WebSSH-Hijacking Repository contains description for CVE-2023-35794 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35794 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Incorrect Access Control...

CVE-2026-105298

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...

CVE-2026-105298 Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...

CVE-2026-105298 Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...

CVE-2026-105298

Versions of Pingora prior to 0.9.0 are vulnerable to a security issue where the software accepts HTTP/2 requests with a Host header that differs from the :authority pseudo-header. The root cause involves the server failing to compare these values or reject userinfo in the authority, violating RFC...

EUVD-2026-104695

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...