CVE-2026-34190: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a malicious page. This issue affects Pandora FMS: from 777 onwards...

PT-2026-130620

Уязвимость метода delete alert системной службы для диагностирования блокировки безопасности SELinux setroubleshoot связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю скрыть уведомления безопасности от администратора...

PYSEC-2026-1910 Sentry improperly authorizes deletion of user issue alert notifications

Impact An authenticated user may delete user issue alert notifications for arbitrary users given a known alert ID. Patches A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert notifications. Sentry SaaS users do not need to take any action...

PT-2024-31704

Name of the Vulnerable Software and Affected Versions: Sentry versions prior to 24.9.0 Description: Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can delete user issue alert notifications for arbitrary users given a known alert ID. A patch w...

PT-2020-15974

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue was discovered that allows for Cross-Site Scripting XSS due to the ability to inject and store malicious JavaScript code. This can occur via the "/alert...