CVE-2026-63041

Apache APISIX's attach-consumer-label plugin fails to strip client-supplied consumer-label headers, allowing an authenticated attacker to escalate privileges or bypass authorization by sending crafted values. The vulnerability affects versions 3.11.0 through 3.17.0 and is fixed in 3.18.0 . NVD ra...

exploit_cve-2007-2447_again

exploitcve-2007-2447again ricorda solo quanto un piccolo errore nella sanitizzazione del nome utente possa darti accesso root all'intera macchina...

CVE-2026-77553

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...

CVE-2026-77551

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...

CVE-2026-77557

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...

CVE-2026-77557

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device...

CVE-2026-77557

CVE-2026-77557 is a critical (CVSS 9.8) Improper Access Control vulnerability in UniFi Protect AI Key . A malicious actor with network access can exploit it to escalate privileges on the device, with no prior authentication required (PR:N). The attack vector is network-based with low complexity, ...

CVE-2026-77553

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device...

CVE-2026-77553

CVE-2026-77553 is a CRITICAL (CVSS 9.9) Improper Access Control vulnerability in the UniFi Access Application (Ubiquiti). A low-privileged actor with network access can exploit it to escalate privileges on the host device , with high impact on confidentiality, integrity, and availability. The att...

CVE-2026-77551

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...

CVE-2026-77551

An Improper Access Control vulnerability in UniFi Connect Display Cast Pro allows a network-based attacker, under certain conditions, to escalate privileges on the device. The flaw is scored CVSS 9.0 (CRITICAL) with a changed scope and high impact on confidentiality, integrity, and availability. ...

CVE-2026-80349

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

CVE-2026-77541

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

CVE-2026-77545

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-77534

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-77536

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-77538

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application...

CVE-2026-77545

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances...

CVE-2026-77545

CVE-2026-77545 is a CRITICAL (CVSS 9.0) vulnerability in certain devices running UniFi OS , rated by Ubiquiti (the CNA). An attacker with network access , low privileges , and user interaction can exploit active debug code left enabled on the device to escalate privileges within the affected UniF...