Lucene search
+L

2539059 matches found

CVE
CVE
added yesterday11 views

CVE-2026-67260

Concretely, CVE-2026-67260 affects Apache Airflow 3.3.0 where the scheduler’s awaiting_input sweep deserializes a task’s next_kwargs without an allow-list. This allows a Dag author (via the task execution API) to trigger arbitrary module imports and object instantiation inside the scheduler proce...

7.3CVSS5.9AI score
SaveExploits0References3
EUVD
EUVD
added yesterday4 views

EUVD-2026-57275

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

7.3CVSS5.9AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-67260

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

7.3CVSS5.8AI score
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added yesterday8 views

CVE-2026-67260 Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

SaveExploits0References3
Vulnrichment
Vulnrichment
added yesterday3 views

CVE-2026-67260 Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

5.9AI score
SaveExploits0References3
CVE
CVE
added yesterday7 views

CVE-2026-67587

CVE-2026-67587 affects Apache Airflow (Task SDK). The vulnerability arises when a Dag author can cause the scheduler process to import an arbitrary module during the awaiting_input deserialization of a Callback object, via a serialized next_kwargs value. The root cause is that SyncCallback is rec...

5.9AI score
SaveExploits0References4
EUVD
EUVD
added yesterday4 views

EUVD-2026-57274

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default alloweddeserializationclasses allow-list, so tightening that...

5.9AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-67587

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default alloweddeserializationclasses allow-list, so tightening that...

7.3CVSS5.8AI score
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added yesterday6 views

CVE-2026-67587 Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default alloweddeserializationclasses allow-list, so tightening that...

SaveExploits0References4
CVE
CVE
added yesterday14 views

CVE-2026-64639

CVE-2026-64639 describes an incorrect database cloning process in Plesk versions 18.0.52 before 18.0.79.6 and 18.0.80.2, which allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator. The documentation does not provide additional ...

9.3CVSS5.9AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday5 views

CVE-2026-64639

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...

9.3CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-57273

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...

9.3CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-64639

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...

9.3CVSS5.8AI score
SaveExploits0References2Affected Software1
F5 Networks
F5 Networks
added yesterday5 views

K000162877: NLnet Labs Unbound vulnerability CVE-2026-44390

Security Advisory Description NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for. Malicious upstream responses with very large RRsets with records that don't share a suffix above...

7.5CVSS5.9AI score0.00625EPSS
SaveExploits0Affected Software4
Patchstack
Patchstack
added yesterday3 views

WordPress Core <= 7.0.3 - Authenticated (Author+) File Type Confusion to Remote Code Execution vulnerability

Authenticated Author+ File Type Confusion to Remote Code Execution vulnerability discovered by pwn.ai in WordPress core versions = 7.0.3...

5.5AI score
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added yesterday7 views

CVE-2026-68969 Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext

Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...

SaveExploits0References3
CVE
CVE
added yesterday10 views

CVE-2026-68969

Summary: Apache Airflow is vulnerable due to audit-log exposure of secrets via bulk endpoints. When submitting Variables or Connections through PATCH /api/v2/variables and PATCH /api/v2/connections, values are written to the audit log in cleartext because the current masking only covers top-level...

5.4AI score
SaveExploits0References3
EUVD
EUVD
added yesterday4 views

EUVD-2026-57270

Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...

5.4AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added yesterday2 views

CVE-2026-68969

Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...

5.4AI score
SaveExploits0References4
Cvelist
Cvelist
added yesterday9 views

CVE-2026-65941 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account...

8.8CVSS
SaveExploits0References3
Rows per page
Query Builder