Lucene search
+L

278000 matches found

Vulnrichment
Vulnrichment
•added 2026/10/08 2:31 a.m.•13 views

CVE-2026-87686

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 2:31 a.m.•16 views

EUVD-2026-94670

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/10/08 1:50 a.m.•7 views

Malware in internallib_v788

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/10/08 1:16 a.m.•22 views

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

7.1CVSS0.00197EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 12:57 a.m.•22 views

EUVD-2026-94655

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

7.1CVSS5.9AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 12:57 a.m.•63 views

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

7.1CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/08 12:57 a.m.•11 views

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

7.1CVSS5.9AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 12:57 a.m.•38 views

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks while processing specific mana...

7.1CVSS5.9AI score0.00197EPSS
SaveExploits0References1Affected Software1
osv_cleanstart
osv_cleanstart
•added 2026/10/08 12:44 a.m.•16 views

CLEANSTART-2026-UG48995 undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive

CVE-2026-14643 affects multiple packages. undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. See references for individual vulnerability details...

5.9CVSS6.8AI score0.00396EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/10/08 12:43 a.m.•53 views

CLEANSTART-2026-CD82080 undici's cache interceptor mishandles malformed Cache-Control private directives

Security vulnerability affects the langfuse-worker package. undici's cache interceptor mishandles malformed Cache-Control private directives...

7.4CVSS6.8AI score0.00569EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•16 views

PT-2026-107912

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...

5.3CVSS5.9AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•27 views

PT-2026-107801

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP...

2.1CVSS5.7AI score0.00139EPSS
SaveExploits0References2
Redos
Redos
•added 2026/10/08 12:00 a.m.•9 views

ROS-20261008-73-0203

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.8AI score0.00125EPSS
SaveExploits0
Redos
Redos
•added 2026/10/08 12:00 a.m.•8 views

ROS-20261008-73-0188

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.2AI score0.00174EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•11 views

CVE-2026-106603: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

6.5CVSS5.9AI score0.00214EPSS
SaveExploits0References2
Redos
Redos
•added 2026/10/08 12:00 a.m.•10 views

ROS-20261008-73-0053

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00129EPSS
SaveExploits0
Redos
Redos
•added 2026/10/08 12:00 a.m.•6 views

ROS-20261008-73-0064

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00127EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•15 views

PT-2026-107925

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

5.4CVSS5.9AI score0.00182EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•14 views

PT-2026-107919

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

4.3CVSS5.9AI score0.00197EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•19 views

PT-2026-107777

An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine evaluates internal management VLAN trust decisions using the client-supplied HTTP host header instead of the actual socke...

5.3CVSS5.8AI score0.00176EPSS
SaveExploits0References2
Rows per page
Query Builder