Microsoft Exchange Server Security Feature Bypass Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...

Visual Studio Code Python Extension Security Feature Bypass Vulnerability

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Active Directory Security Feature Bypass Vulnerability

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...

Windows Defender Firewall Service Security Feature Bypass Vulnerability

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...

Visual Studio Code Security Feature Bypass Vulnerability

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CoPilot Chat Security Feature Bypass Vulnerability

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...

.NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-63317

A flaw was found in Apache OpenNLP. This vulnerability allows an attacker to achieve arbitrary class instantiation by providing a specially crafted XML feature generator descriptor within a model archive or by supplying untrusted format names. While not direct remote code execution, successful...

CVE-2026-72606 Pinry Pinry - Server-Side Request Forgery

A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the pin-from-URL feature. The feature passes the user-supplied URL directly to requests.get without host o...

CVE-2026-72606

A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the pin-from-URL feature. The feature passes the user-supplied URL directly to requests.get without host o...

Security Update for Microsoft .NET Core (August 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET...

PT-2026-70782

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

PT-2026-70813

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require use...

PT-2026-70346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Improper Encoding or Escaping of Output issue allows a low-privileged attacker to bypass security features. This can lead to limited unauthorized write acces...

PT-2026-70740

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Incorrect authorization allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-70341

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

APSB26-90 : Security update available for Adobe ColdFusion

Adobe has released a security update for ColdFusion versions 2025 and 2023. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, privilege escalation, security feature bypass, application denial-of-service, and memory exposure...

PT-2026-70591

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Inconsistent interpretation of HTTP requests, known as HTTP request/response smuggling, allows an unauthorized attacker to bypass security features over a network. HTTP request smuggling occurs...

PT-2026-70377

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...