42 matches found
CVE-2026-24306
Azure Front Door Privilege Escalation – CVE-2026-24306 PoC For authorized red team / research use only. Author not responsible for misuse. Vulnerability allows: Arbitrary routing rule injection Backend pool / origin group modification WAF policy attachment / override Custom domain takeover on...
CVE-2026-17350
The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...
CVE-2026-17350 pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers
The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...
EUVD-2026-51563
The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...
CVE-2026-17350
Summary: CVE-2026-17350 affects pgAdmin 4 in SERVER mode (9.3–9.17). The per-tool permission system did not consistently enforce tool-level permissions; only the front-door route used a permissions_required decorator, while other backend routes and Socket.IO handlers relied on authentication chec...
CVE-2026-17350 pgAdmin 4: Tool permission bypass via backend routes and Socket.IO handlers
The per-tool permission system custom roles / role-based tool permissions, introduced in pgAdmin 4 9.3 did not enforce its permission check consistently. In SERVER mode, pgAdmin 4 gates each tool behind a per-tool Flask-Security permission, but the permission decorator permissionsrequired was...
PT-2026-66775
Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions 9.3 through 9.16 Description In SERVER mode, the per-tool permission system fails to consistently enforce permission checks. While a permissions required decorator is used on the initial route of a tool, subsequent backend...
Microsoft Azure Front Door Access Control Error Vulnerability
Microsoft Azure Front Door is a cloud-based content delivery network from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Front Door, which can be exploited by an attacker to elevate privileges...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, potentially grant themselves elevated privileges and thus execute arbitrary code or gain access to sensitive data. Of the vulnerabilities labeled...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability...
EUVD-2026-5520
Azure Front Door Elevation of Privilege Vulnerability...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability...
CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability (CVE-2026-24300) is documented with a Network attack vector and a high-impact profile (Confidentiality, Integrity, Availability). The CVE entry indicates no details on exploited versions or fixes within the provided documents. Red Hat and EU a...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability...
Azure Front Door Elevation of Privilege Vulnerability
...
KLA90869 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Front Door can be exploited remotely to gain...
PT-2026-6637
Name of the Vulnerable Software and Affected Versions Azure Front Door affected versions not specified Description An elevation of privilege issue exists in Azure Front Door. This allows for unauthorized access and potential compromise of resources. Recommendations At the moment, there is no...
