PT-2026-95048

Summary nuxt-og-image exposes an unauthenticated HTTP endpoint at / og/d/ that base64url-decodes and JSON.parses a fonts URL segment, then passes each fontsi.path value directly into fetch server-side without any URL validation no scheme allowlist, no loopback/RFC1918 block, no host allowlist, no...

PT-2026-94300

Name of the Vulnerable Software and Affected Versions ash authentication versions 4.2.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description An unauthenticated attacker can forge application log entries by submitting a password reset identity containing newlines o...

Linux Distros Unpatched Vulnerability : CVE-2026-84439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When audit logging is enabled zookeeper.audit.enable=true, an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending ...

Linux Distros Unpatched Vulnerability : CVE-2026-84501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauthensemble, ... request...

Fedora 45 : python-django5 (2026-950089270f)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-950089270f advisory. Update python-django5 to the latest 5.x release 5.2.17 - Fixes CVE-2026-15307 high: Server-side file-write and request forgery via spatial lookups -...

CVE-2026-92749

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

CVE-2026-76413

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-92809 PrestaShop psgdpr through 1.4.3 GDPR Log Forgery

PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authenticated customer. Authenticated attackers can submit arbitrary customer identifiers to create forged consent records for other customers, corrupting audit logs...

CVE-2026-92809 PrestaShop psgdpr through 1.4.3 GDPR Log Forgery

PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authenticated customer. Authenticated attackers can submit arbitrary customer identifiers to create forged consent records for other customers, corrupting audit logs...

CVE-2026-92809 PrestaShop psgdpr through 1.4.3 GDPR Log Forgery

PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log entries are attributed to the authenticated customer. Authenticated attackers can submit arbitrary customer identifiers to create forged consent records for other customers, corrupting audit logs...

CVE-2026-92809

CVE-2026-92809 affects the PrestaShop psgdpr module (versions through 1.4.3 ). The vulnerability is an IDOR (Insecure Direct Object Reference) in GDPR consent logging: the module fails to validate that submitted consent log entries belong to the authenticated customer. An authenticated attacker c...

EUVD-2026-81021

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline. Unauthenticated remote attackers who can bound the install timestamp can regenerate the secret and forge valid administrator...

CVE-2026-92749

SafeLine through version 9.4.1 contains an authentication bypass in its management console. The session-signing secret is derived from a time-seeded math/rand generator , allowing unauthenticated remote attackers who can bound the install timestamp to reconstruct the key offline and forge valid a...

CVE-2026-76413 Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-76413

A vulnerability in the Cisco ASDM single sign-on (SSO) handler for Cisco Secure FMC Software allows an unauthenticated, remote attacker to forge a session token and log in as the ASDM administrator. The root cause is improper management of the SSO token . By repeating the attack, an attacker can ...

EUVD-2026-81120

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-76413 Cisco Secure Firewall Management Center Software Single Sign-On Token Forgery of Administrator Account Vulnerability

A vulnerability in Cisco Adaptive Security Device Manager ASDM single sign-on SSO handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper management of the Cisco ASDM SSO token. An...

CVE-2026-87116

Tanium addressed a server-side request forgery (SSRF) vulnerability in its Threat Response product. The flaw allows a network-based attacker with low privileges to forge requests from the server, resulting in a high confidentiality impact with no integrity or availability impact. Tanium scored th...

Principal-HackTheBox

HackTheBox — Principal Dificultad: Media SO: Linux Plataforma: HackTheBox Resumen Aplicación web que ejecuta pac4j-jwt v6.0.3 — vulnerable a CVE-2026-29000. La clave pública RSA está expuesta sin autenticación a través de un endpoint JWKS y puede usarse para forjar un token JWE de administrador...

CVE-2026-42784

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...