CVE-2026-84176: Permissive Cross-domain Policy with Untrusted Domains

Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. createCorsHandler set Access-Control-Allow-Credentials: true outside the origin check, so the...

CVE-2026-85251: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Two paths handed credentials to a redirect target, which is a host chosen by the remote server rather than...

CVE-2026-64943: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written to application logs on every authenticated request, allowing anyone with log-read access to recover and replay active bearer credentials. Use...

PT-2026-117310

Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written to application logs on every authenticated request, allowing anyone with log-read access to recover and replay active bearer credentials. Use...

CVE-2026-112771: Exposure of Sensitive Information to an Unauthorized Actor

Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index, where, and multisort filters resolve caller-supplied keys via ArrayHelper::getValue without consulting the sandbox security policy. Authenticated...

PT-2026-118055

Vikunja: Scoped API token can mint unrestricted OAuth session credentials in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from...

CVE-2023-38375: Improper Neutralization of Input During Web Page Generation

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2026-117532

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2025-7203: Cleartext Storage of Sensitive Information

The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because the system does not sufficiently protect or obscure these credentials when the remote logging feature is enable...

PT-2026-117440

FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account with password admin123. Attackers can log in through POST /api/auth/login, solving only the image captcha, to obtain...

CVE-2026-4413: Improper Neutralization of Input During Web Page Generation

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Follow-redirects input validation vulnerability

The follow-redirects version 1.16.0 to 1.16.1 had a security vulnerability. This vulnerability stemmed from escapeRegex not escaping the regular expression metacharacters in the sensitiveHeaders. When sensitive header names contained ^ or |, and during cross-domain or HTTPS-to-HTTP redirection, t...

Sunkaifei FlyCms Trust Management Vulnerability

Sunkaifei FlyCms has a vulnerability related to trust management. This vulnerability arises from the use of default credentials. An attacker can exploit the FlyCms account and password “admin123” to log in by simply completing a graphical verification code. This allows them to obtain super...

MISP information leakage vulnerability

Versions of MISP 2.5.48 and earlier contain a security vulnerability. This vulnerability arises from the server discarding the redacted and clionly flags specified in the module configuration during the rebuilding process. This could allow authenticated users who have access to the server setting...

CrewAI AMP Suite server-side request forgeing vulnerability

CrewAI AMP Suite versions 1.15.28 and earlier have a server-side request forgeing vulnerability. This vulnerability stems from the fact that the SeleniumScrapingTool does not apply the validateurl private address checking, making it vulnerable to server-side request forgeing attacks. Attackers ca...

Apache Camel server-side request forge vulnerability

Versions of Apache Camel prior to 4.18.5, specifically 4.0.0 and 4.22.1 prior to 4.19.0, have a server-side request forge vulnerability. This vulnerability stems from the camel-as2 component extracting the asynchronous MDN return address from inbound messages and using it directly as the outbound...

Eptura archibus information leakage vulnerability

Versions of Eptura Archibus prior to 2025.02 contained an information leakage vulnerability. This vulnerability stemmed from sending DWR requests with specified workflow rules, which allowed access to detailed database information such as usernames and passwords. Combined with authentication bypa...

Craft CMS Information Disclosure Vulnerability

Craft CMS contains an information disclosure vulnerability stemming from a bypass of the Twig sandbox allowlist. the column, contains, filterByValue, index, where, and multisort filters do not adhere to the sandbox security policy when parsing keys provided by the caller via ArrayHelper::getValue...

Apache Answer log information disclosure vulnerability

Apache Answer versions 2.0.2 and earlier contain a vulnerability related to log information leakage. This vulnerability arises from writing sensitive information to log files; each authentication request writes the full API key into the application logs. As a result, individuals with log reading...

Apache Camel information leakage vulnerability

Apache Camel HTTP versions from 4.0.0 to 4.18.5, as well as versions from 4.19.0 to 4.22.1, have a vulnerability related to information leakage. This vulnerability arises when the followRedirects=true parameter is used, and the OAuth2ClientConfigurer interceptor intercepts and matches AuthScope f...