28502 matches found
CVE-2026-17059
creationtimestamp| type| source ---|---|--- 2026-07-31 17:04:16+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mrxgquksow2h...
CVE-2026-52855
creationtimestamp| type| source ---|---|--- 2026-07-31 17:04:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxgqloluu2j 2026-07-31 17:54:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2cyzi3feyud55 2026-07-31 19:49:55+00:00| seen|...
CVE-2026-18141
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
CVE-2026-18141
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
CVE-2026-18141 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
CVE-2026-18141
The CVE-2026-18141 entry concerns aap-gateway in Ansible Automation Platform’s Event-Driven Ansible (EDA). Affected component: aap-gateway. Vulnerability: an unauthenticated remote attacker can bypass mutual TLS on event streams by manipulating the event stream URL and forging the HTTP Subject he...
CVE-2026-18141 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
EUVD-2026-51556
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
CVE-2026-18141
A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible EDA. An unauthenticated remote attacker can bypass mutual Transport Layer Security mTLS authentication for event streams. This is achieved by manipulating the event stream URL and forging the HTTP...
CVE-2026-65310
creationtimestamp| type| source ---|---|--- 2026-07-31 09:54:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7a4bpwbxcymga 2026-07-31 14:34:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrx6em7wg22g...
GHSA-XC5W-4V5W-7X65
creationtimestamp| type| source ---|---|--- 2026-07-31 08:32:20+00:00| seen| https://gist.github.com/alon710/006ebdb624799640fa8e05feb88f3b11...
CVE-2026-14483
creationtimestamp| type| source ---|---|--- 2026-07-31 07:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrwfyokgir24 2026-07-31 08:01:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gjlyfysyioviq 2026-08-01 21:00:04+00:00| seen|...
GHSA-52JP-GJ8W-J6XH
creationtimestamp| type| source ---|---|--- 2026-07-31 04:31:56+00:00| seen| https://gist.github.com/alon710/2fc91b89bbac8024e4e2b03ecca2ce62...
CVE-2026-55499
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...
CVE-2026-55499 Cloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...
CVE-2026-55499 Cloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...
CVE-2026-55499
CVE-2026-55499 (Cloudreve) Prior to version 4.17.0, an authenticated recipient of a single-file share can receive real-time events for files in the owner’s parent folder, not just the shared item. The mechanism subscribes to the owner’s parent ID for a single-file share root, and the event hub fa...
EUVD-2026-51393
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...
CVE-2026-55499 Cloudreve: Broken access control in file event stream leaks activity events for unshared siblings to single-file share recipients
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...