101183 matches found
CVE-2026-75110
CVE-2026-75110 is a critical authentication bypass in MemOS , a memory operating system for LLMs and AI agents. When AUTH_ENABLED=true but the undocumented INTERNAL_SERVICE_SECRET environment variable is unset, the is_internal_request() check in src/memos/api/middleware/auth.py fails open due to ...
MINI-837C-JFFX-JQF6
Bulletin has no description...
MINI-W798-9HJ8-6FFX
Bulletin has no description...
EUVD-2026-60261
New API is a large language mode LLM gateway and artificial intelligence AI asset management system. From 0.9.1.3 until 1.0.0-rc.7, AdminResetPasskey in controller/passkey.go lacks the canManageTargetRole authorization check for DELETE /api/user/:id/resetpasskey, allowing a lower-privileged...
MINI-8P2F-3F45-8J6M
Bulletin has no description...
CVE-2026-74871 openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XOR
opensslencrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR composition mode where the last stage cancels out during key generation. When configured with a single KDF and no prior hashing stage, attackers can bypass memory-hard key derivation and perform offline password...
MINI-X54F-2VH3-477C
Bulletin has no description...
MINI-WGMX-H2F2-WVJ7
Bulletin has no description...
MINI-2M95-96QX-PXQX
Bulletin has no description...
MINI-JQ9C-57XR-55G9
Bulletin has no description...
MINI-GX9Q-388H-Q8J6
Bulletin has no description...
MINI-G52Q-R476-M4H7
Bulletin has no description...
MINI-47JH-9W47-62X3
Bulletin has no description...
MINI-GMQ4-XMM4-848F
Bulletin has no description...
MINI-CG6G-H289-7HJG
Bulletin has no description...
MINI-37M3-VGFF-V8HP
Bulletin has no description...
PT-2026-76856
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...
MINI-P3FW-CRQQ-6M4P
Bulletin has no description...