UBUNTU-CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

EUVD-2026-53050

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

CVE-2026-71192

CVE-2026-71192 affects OpenStack Swift up to version 2.38.0, where the S3API middleware does not sanitize Swift-native control headers (X-Copy-From, X-Copy-From-Account) in S3 API requests when the non-default configuration s3_acl=true is used. An attacker can inject these headers into a signed P...

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

CVE-2026-71192

In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...

EUVD-2026-53049

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

CVE-2026-71191

OpenStack Swift (through 2.38.0) is affected by a vulnerability in the S3API middleware where presigned URL requests do not ensure that semantic x-amz-* headers are covered by the SigV4 signature. An attacker with a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, triggering a s...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

CVE-2026-71191

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

copyfail-guard Ferramenta de detecção e mitigação automatiz...

CVE-2026-49004: Improper Neutralization of Special Elements used in an SQL Command

The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with root privileges, and is protected by weak credentials. The database supports the COPY FROM PROGRAM syntax, allowing...

PT-2026-67963

Name of the Vulnerable Software and Affected Versions OpenStack Swift versions prior to 2.38.1 Description The S3API middleware fails to sanitize Swift-native control headers X-Copy-From and X-Copy-From-Account in S3 API requests when the s3 acl=true configuration is enabled. An attacker can inje...

CVE-2026-71191: Incorrect Authorization

In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...

Linux Distros Unpatched Vulnerability : CVE-2026-71192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests whe...

Linux Distros Unpatched Vulnerability : CVE-2026-64572

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf's falist with fibinsertalias before calling the fib ent...

The vulnerability of the Blueprint::isSafeDynamicCall() method in the Grav CMS system allows a perpetrator to gain unauthorized access to read, create, and copy files and directories.

The vulnerability of the Blueprint::isSafeDynamicCall method in the Grav CMS system is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, create, and copy files and directories...

The vulnerability of the SCP utility in the OpenSSH cryptographic security tool allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SCP utility in the OpenSSH cryptographic security tool is related to improper storage of permissions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...