PT-2026-45855

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2025.12.5 authentik versions prior to 2026.2.3 Description An issue exists in the Simple Flow Executor SFE, which is a component used to manage the sequence of steps in an authentication flow. Due to the...

FlowGuard: Flow Matching for Identity-Independent Detection of Data-Free Model Stealing Attacks on Energy System Intrusion Detection Systems

Artificial Intelligence AI-based Intrusion Detection Systems IDS deployed in energy infrastructure are vulnerable to model theft attacks, which allow adversaries to create evasive traffic offline. Current defences against model extraction rely either on identity-bound query monitoring, which is...

CVE-2026-24090

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...

CVE-2026-24090 Missing Authentication for Critical Function in HLOS

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...

CVE-2026-24090 Missing Authentication for Critical Function in HLOS

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...

CVE-2026-24090

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...

CVE-2026-24090

Technical details (affected products, root cause, impact, and remediation) are not publicly available in the provided documents. Monitor for updates from the vendors and CVE feed.

CVE-2026-23638

Kiteworks CVE-2026-23638 is an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms, affecting versions prior to 9.3.0. An authenticated attacker can tamper with internal approval flow configurations of other users’ forms due to insufficient authorization checks on...

CVE-2026-23638 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

Kiteworks is a private data network PDN. Prior to version 9.3.0, an Insecure Direct Object Reference IDOR vulnerability in Kiteworks Secure Data Forms allows an authenticated attacker to tamper with the internal approval flow configurations of forms belonging to other users due to insufficient...

CVE-2026-10274

A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. This impacts the function getAssetMetadata of the file src/mcp-server.ts of the component Axios Request Flow. Executing a manipulation of the argument assetPath can lead to server-si...

CVE-2026-45278 Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass

Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses the attackers link to log in via user OIDC. This issue has been patched in version 8.2.2...

EUVD-2026-33670

A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. This impacts the function getAssetMetadata of the file src/mcp-server.ts of the component Axios Request Flow. Executing a manipulation of the argument assetPath can lead to server-si...

CVE-2026-10274 indrasishbanerjee aem-mcp-server Axios Request Flow mcp-server.ts getAssetMetadata server-side request forgery

A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583. This impacts the function getAssetMetadata of the file src/mcp-server.ts of the component Axios Request Flow. Executing a manipulation of the argument assetPath can lead to server-si...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-48726 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-48726 Source...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-46764 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-46764 Source...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-48726 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-48726 Source...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-42360 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-42360 Source...

aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +2 more potentially affected by CVE-2026-45192 via apache-airflow (2.0.0)

apache-airflow PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - aglow =0.1.0rc3, =0.1.0rc4 - ai-flow 0.3.1 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 Source cves: CVE-2026-45192 Source...

CVE-2026-49267 Apache Airflow: No certificate validation on SMTP STARTTLS connections

Apache Airflow's EmailOperator and the underlying airflow.utils.email helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used email smtpstarttls=True without email smtpssl. An attacker positioned between the worker and the configured SMTP...

CVE-2026-48726 Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path

A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for FabAuthManager and KeycloakAuthManager did not actually reach the underlying revoketoken call, so the JWT remained accepted by the API server...