CVE-2026-23982

CVE-2026-23982 describes an Improper Authorization in Apache Superset where a low-privilege user can bypass data access controls during dataset creation by overwriting the SQL query of an existing dataset. Affected: Apache Superset

CVE-2026-23982 Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass

An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to...

CVE-2026-23982 Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass

An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls. When creating a dataset, Superset enforces permission checks to prevent users from querying unauthorized data. However, an authenticated attacker with permissions to...

CVE-2026-27826

creationtimestamp| type| source ---|---|--- 2026-02-24 11:57:17+00:00| published-proof-of-concept| https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-7r34-79r5-rcc9 2026-03-10 19:10:06+00:00| seen| https://gist.github.com/alon710/318772c839d4af9a91549fceab76247e 2026-03-10...

CVE-2025-40538 SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability

A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges. This issue requires administrative privileges to abuse. On...

CVE-2025-40538 SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability

A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges. This issue requires administrative privileges to abuse. On...

CVE-2026-3064

creationtimestamp| type| source ---|---|--- 2026-02-24 06:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mflj3k63cv2d...

CVE-2026-3065

creationtimestamp| type| source ---|---|--- 2026-02-24 05:56:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfliaovwdd2e...

CVE-2026-2873

creationtimestamp| type| source ---|---|--- 2026-02-24 03:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfl7iou6nm2e...

CVE-2026-24481

creationtimestamp| type| source ---|---|--- 2026-02-24 01:36:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkzpfsdak2d 2026-02-24 01:51:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfl2kvocz72n 2026-02-24 20:20:10+00:00| seen|...

CVE-2026-25794

creationtimestamp| type| source ---|---|--- 2026-02-24 01:36:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfkzp77qxo2s 2026-02-24 04:52:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfleo4qk2v24 2026-03-02 09:40:10+00:00| seen|...

DEBIAN-CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

CVE-2026-3046

creationtimestamp| type| source ---|---|--- 2026-02-24 01:15:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfkyjrxphg27 2026-02-26 02:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfq3xnxtt52r...

NULL Pointer Dereference

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

NULL Pointer Dereference

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in handling SFW image files, when temporary file creation fails. An attacker can cause the application to crash by submitting a malicious SFW image file. Remediation A fix was pushed into the master branch but n...

NULL Pointer Dereference

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

NULL Pointer Dereference

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

NULL Pointer Dereference

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

NULL Pointer Dereference

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...