PT-2026-85077

A cross-site request forgery CSRF vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed a state-changing and irreversible operation while accepting HTTP GET requests. Because bodyless GET requests are not subject to CakePHP's CSRF validation, an attacker could cause ...

PT-2026-85015

Name of the Vulnerable Software and Affected Versions API Publisher affected versions not specified Description The API Publisher component used a non-cryptographic pseudorandom number generator PRNG—a sequence of numbers that appears random but is determined by a mathematical formula—to create...

PT-2026-85281

MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...

CVE-2026-85391: Use of Hard-coded Credentials

Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access protected endpoints without credentia...

PT-2026-85007

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description An incomplete blocklist in the IsForbiddenAbsPath function kernel/util/path guard.go fails to restrict access to the TLS private key conf/key.pem and the CA private key conf/ca.key within the conf/...

CVE-2026-85181: Reliance on Cookies without Validation and Integrity Checking

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

PT-2026-85102

A critical security vulnerability was found in the LiteSpeed Cache plugin for WordPress, and you really need to patch it right now. This flaw, tracked as CVE-2026-84761 with a high severity rating of 7.2, lets unauthenticated hackers pull off Server-Side Request Forgery attacks. Basically, anyone...

CVE-2026-85394: Improper Verification of Cryptographic Signature

python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the service's public key can forge HS256 tokens that pass verification when algorithms are not explicitly restricte...

PT-2026-85224

Peppermint through 0.5.5 contains a hardcoded JWT signing secret in docker-compose.yml that allows unauthenticated attackers to forge session tokens for any account. Attackers can use the published secret to mint valid tokens for arbitrary user IDs and access protected endpoints without credentia...

PT-2026-85377

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a use of hard-coded credential vulnerability. This could allow an attacker to intercept sensitive information or credentials...

PT-2026-85379

Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device...

PT-2026-84992

AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerability in stopLive.php that allows attackers to delete directories by exploiting missing token validation and unsanitized key parameter concatenation. Attackers can craft an image tag with a traversal...

PT-2026-85040

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

CVE-2026-85393: Improper Verification of Cryptographic Signature

node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an...

WordPress pingback SSRF

The vulnerability of the pingback.ping method in the WordPress content management system is related to synchronization errors when using a shared resource “Race Situation”. This occurs due to improper validation of requests on the server side. Exploiting this vulnerability allows an attacker to...

Plate: SSRF with response disclosure in DOCX image embedding

Summary @platejs/docx-io can fetch remote image URLs while converting HTML to DOCX. When an application converts attacker-controlled HTML in a server-side or privileged environment, this can cause the application environment to make unintended outbound requests and include fetched image data in t...

EUVD-2026-63471

Plate: SSRF with response disclosure in DOCX image embedding...

Exploit for CVE-2026-82329

artifactory.py ╔═══════════════════════════════════...

CVE-2026-84377

A flaw was found in LiteLLM, a proxy server for Large Language Model LLM APIs. An authenticated remote attacker could exploit incomplete request validation to redirect outbound provider calls to an attacker-controlled destination. This Server-Side Request Forgery SSRF vulnerability could lead to...

CSRF (Cross-Site Request Forgery) nanoid Dependency in Jira Software Data Center

This High severity CSRF Cross-Site Request Forgery vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This CSRF Cross-Site Request Forgery vulnerability, with a CVSS Score of 7.4 and a...