54927 matches found
VulnCheck KEV: CVE-2026-89026
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
CVE-2026-88617
SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges...
PT-2026-91831
Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to validate the uri query parameter. Attackers can craft malicious links on the trusted Halo domain that redirect visitors to arbitrary external sites, enabling phishing attacks and abuse of...
EUVD-2026-78624
SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges...
PT-2026-92465
A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system...
PT-2026-92438
Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description A flaw in the API endpoint allows a low-privilege authenticated remote attacker to escalate privileges. This could lead to the execution of arbitrary system...
PT-2026-92034
SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a remote attacker to escalate privileges...
PT-2026-92087
Name of the Vulnerable Software and Affected Versions vikunja versions prior to 2.6.0 Description A resource exhaustion issue exists in the '/task-filter' endpoint. The system accepts deeply nested filter expressions without enforcing recursion depth limits. Authenticated attackers can provide...
EUVD-2026-78812
SmartAdmin API Java17 SpringBoot3 version 3.30.0 contains an improper authorization vulnerability in the /employee/queryAll endpoint. The endpoint does not enforce the required function-level permission or data-scope authorization, allowing an authenticated low-privileged employee to retrieve...
PT-2026-92466
Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Orchestrator affected versions not specified Description An issue in the API endpoint allows an unauthenticated remote attacker to obtain sensitive information. This could lead to the disclosure of...
PT-2026-92447
Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Orchestrator affected versions not specified Description A flaw in the API endpoint allows a low-privilege authenticated remote attacker to escalate privileges. This could lead to the execution of arbitrary...
PT-2026-91928
Name of the Vulnerable Software and Affected Versions KubeSphere versions prior to 4.1.4 Description An issue exists in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attackers can provide arbitrary URLs to acce...
PT-2026-92451
Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description Buffer overflow vulnerabilities exist in the API endpoint of the system. A buffer overflow occurs when a program writes more data to a block of memory, or...
PT-2026-92016
The Consulting theme for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 6.7.16. This is due to a combination of two flaws: 1 the masterstudy ms stm set discard transient AJAX endpoint in admin/admin-notices/classes/STMHandler.php accepts an arbitrary transient k...
PT-2026-92408
Name of the Vulnerable Software and Affected Versions JoomGallery versions prior to 4.4.2 Description An unauthenticated arbitrary file upload issue exists via the TUS endpoint. While the endpoint allows files to be uploaded, the attacker cannot control the file name or extension. Achieving code...
PT-2026-92121
Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.0.0 through 9.5.2 Description An authorization check is missing on the user selector autocomplete endpoint '/ccm/system/user/autocomplete', which supports the Preview as User panel and other user-selector components. Th...
PT-2026-93191
Netcore NR255-V firmware version 1.5.130703 contains a sensitive information disclosure vulnerability in the ddns wan list show.cgi endpoint and related DDNSset cgi, IGD GetCgiHandler, and IGD CgiCall components. Attackers who reach this CGI handler can obtain plaintext DDNS credentials, exposing...
PT-2026-91938
Name of the Vulnerable Software and Affected Versions Casdoor versions prior to 4.4.1 Description An authorization bypass exists in the '/api/mcp' endpoint. Attackers possessing a valid clientId and clientSecret from any single application can gain unrestricted access to user administration acros...
CVE-2026-88619
1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in the scheduled-job management module. The AdminSmartJobController exposes scheduled-job management endpoints without method-level permission checks, allowing a low-privileged authenticated user to access functionality...