CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass

CVE-2026-24858 | FortiCloud SSO Authentication Bypass Executive Summary FortiCloud Single-Sign-On SSO a factory default enabled feature once you register any FortiGate/FortiManager/FortiAnalyzer contains a critical authentication-bypass flaw. An attacker who owns any FortiCloud account free or pa...

Azure-APIM-Cross-Tenant-Signup-Bypass

Bypass de registro entre inquilinos de Azure APIM Estado 01.12.2025: Esta vulnerabilidad sigue activa y explotable. Microsoft no ha corregido este problema y lo considera «por diseño». Aviso de seguridad GHSA-vcwf-73jp-r7mv CVE-2025-66390 Resumen Una vulnerabilidad de seguridad en el portal para...

CVE-2026-64640

CVE-2026-64640 — Apache Polaris: register におけるロケーション検証前の資格情報発行 CVE-2026-64640 の自己完結型・ワンコマンド再現スクリプトです。Apache Polaris の Iceberg REST register エンドポイントは、呼び出し元が指定したパスに対してクラウドストレージ資格情報を発行し、そのパスをカタログの allowedLocations と照合する前に サーバー側で読み取ります。 自カタログでテーブルを作成する権限しか持たないプリンシパルでも、Polaris...

EUVD-2026-66763

Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases...

CVE-2026-57830

Helix Ultimate Framework — Leitura + Exclusão Arbitrária de Arquivos/Pastas com Path Traversal Não Autenticado Esta é uma vulnerabilidade confirmada de DoS + acesso ao sistema de arquivos entre inquilinos, NÃO RCE. Uma teoria de escalada RCE excluir configuration.php para reexpor o instalador do...

CVE-2026-6355

Augmentt: Accesso Cross-Tenant tramite IDOR Crediti Questa CVE è il risultato di uno sforzo collaborativo tra: Raznov – GitHub: https://github.com/basraznov HelloWorld Autore– GitHub: https://github.com/Penquinsecq Descrizione Una vulnerabilità nell'applicazione web consente a utenti non...

CVE-2026-23552

CVE-2026-23552 - Accettazione di token cross-realm in camel-keycloak Panoramica La KeycloakSecurityPolicy di Apache Camel non valida il claim iss issuer dei token JWT rispetto al realm configurato. Ciò significa che un token emesso da un realm Keycloak viene silenziosamente accettato da una polic...

CVE-2026-77317

CVE-2026-77317 affects SeaweedFS (distributed file/blob storage system) versions 3.88 through 4.39. The SFTP server evaluates configured path permissions using a literal string-prefix comparison rather than requiring a path-component boundary. A user scoped to a path such as /tenants/alice is als...

CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR

CVE-2026-52217 Autorisierungsschwachstelle zwischen Mandanten und Benutzern IDOR / BOLA im Checkout-Dienst der VTEX Commerce Platform. Feld| Wert ---|--- CVE-ID| CVE-2026-52217 Anbieter| VTEX Produkt| VTEX Commerce Platform, Checkout-Dienst chk Betroffen| Beobachtet auf chk v2.367.3 und...

EUVD-2026-66377

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key broken access control...

CVE-2026-62861

TypeBot (chatbot builder) is vulnerable to cross-tenant custom-domain removal prior to 3.18.0 . The root cause is in the custom-domain delete handler (handleDeleteCustomDomain.ts): it authorizes a caller against a client-supplied workspaceId but forwards the client-supplied domain name to the sha...

CVE-2026-49009

CVE-2026-49009 — Mender Server: Path Traversal autenticato verso esecuzione di codice remoto Scoperto da j0xh-sec via HackerOne · PoC di INTELEON404 Indice dei contenuti Riepilogo della vulnerabilità Versioni interessate Analisi tecnica Proof of Concept Exploit in Python Template Nuclei Scanner...

EUVD-2026-65060

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

CVE-2026-66908

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

CVE-2026-66908

Apache Camel Platform HTTP Main component (versions 4.8.0 through 4.21.x ) silently skipped validation of the iss and aud JWT claims when neither jwtIssuer nor jwtAudience was configured. The root cause is that JWTAuthenticationConfigurer.buildJwtOptions returned null, causing the Vert.x JWTAuth ...

Security Bulletin: Langflow is affected by multiple authentication bypass, path traversal, authorization, and server-side request forgery vulnerabilities

Summary Langflow contains multiple vulnerabilities in its authentication, authorization, and network request controls across several API surfaces. The MCP project authentication function omits the default authtype=none value from the set of modes requiring an API key, causing unauthenticated...

CVE-2026-78365

Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own company, via a PUT request to /api/supplier/id setting companyid...

CVE-2026-78365 IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification

Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own company, via a PUT request to /api/supplier/id setting companyid...

PT-2026-80920

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

Linux Distros Unpatched Vulnerability : CVE-2026-77220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDFio before 1.6.5 contains a dangling pointer vulnerability in the dictionary string-formatting function that stores a pointer to a stack-local buffer in the...