CVE-2026-92916: Exposure of Sensitive Information to an Unauthorized Actor

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled system.debugger.enabled: true, which is not the default, the Clockwork profiler endpoint is exposed without authentication: InitializeProcessor::handleDebuggerRequest intercepts any path...

CVE-2026-76949: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in team-alembic ashauthentication allows an attacker who can plant a remember-me cookie in a victim's browser to replace that victim's authenticated session with one for the attacker's own account...

CVE-2026-93296: Improper Neutralization of Input During Web Page Generation

MISP contains a stored cross-site scripting XSS vulnerability in the Overmind theme's statistics views. The event General card and the server/feed preview card constructed donut chart legend labels by directly concatenating object name or category keys into an innerHTML string without...

PT-2026-94239

Name of the Vulnerable Software and Affected Versions Grav versions 1.7.0 through 1.7.53.2 Grav versions 2.0.0 through 2.0.21 Description When the debugger is enabled via system.debugger.enabled: true, the Clockwork profiler endpoint is exposed without authentication. The...

PT-2026-95064

Name of the Vulnerable Software and Affected Versions TS3 Manager versions prior to 2.2.6 Description The /api/download endpoint in packages/server/routes/api.js improperly handles the port query parameter, passing it to the socket.connectport, host function and returning the resulting error...

PT-2026-95008

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description A stored cross-site scripting XSS issue exists in the Overmind theme's statistics views. The event General card event general.ctp and the server/feed preview card preview general.ctp create donu...

PT-2026-94357

Name of the Vulnerable Software and Affected Versions HUBzero CMS versions prior to 2.2.33 Description The software accepts session identifiers from query strings and request variables instead of relying exclusively on cookies. This allows unauthenticated attackers to perform session fixation,...

PT-2026-94136

Name of the Vulnerable Software and Affected Versions GeoVision GV-Remote E-Map affected versions not specified Description A DLL hijacking issue exists in the GeoVision GV-Remote E-Map desktop application. The application loads dynamic-link libraries DLLs from an unsafe search path, which allows...

CVE-2026-92960: Exposure of Sensitive Information to an Unauthorized Actor

vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: '' configuration, allowing sandbox code to read host process identity and network topology. Attackers can invoke dns.setServers to hijack the host process DNS resolver globally, redirecting all subsequent host DN...

EUVD-2026-81158

A vulnerability in the SSID bring-your-own-device BYOD onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks. This vulnerability is due to insufficient authentication checks that are...

SUSE CVE-2026-78428

For users authenticated through SAML or OpenID Connect OIDC, this vulnerability can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently...

GHSA-V8PV-4842-X354 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...

OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

Summary The OpenTelemetry.Resources.Host NuGet package is affected by an untrusted search path vulnerability on macOS. The host.id resource attribute detector launches the sh and ioreg executables by bare name rather than by absolute path, so both are resolved through the PATH environment variabl...

CVE-2026-92138

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the vict...

CVE-2026-20071: Authentication Bypass by Spoofing

A vulnerability in the SSID bring-your-own-device BYOD onboarding workflow of Cisco ISE could allow an unauthenticated, adjacent attacker to hijack the onboarding session of another user and access protected 802.1X networks. This vulnerability is due to insufficient authentication checks that are...

PT-2026-93801

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A stream desynchronization issue exists in the AMQP wire-protocol parser. When the readLongstr function in read.go encounters a declared AMQP longstr length exceeding 0x7FFFFFFF the...

OAuth access token hijacking via callback URL manipulation in atlassian-bitbucket-server-integration

atlassian-bitbucket-server-integration implements an OAuth provider for Bitbucket Server. The OAuth authorization endpoint in atlassian-bitbucket-server-integration 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token. An...

PT-2026-94120

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description SSE sessions are keyed solely by a client-chosen session id without binding to the authenticated user. This allows an attacker who obtains a session id to connect to the message endpoint and dispatch...

Linux Distros Unpatched Vulnerability : CVE-2026-45048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling due to lenient parsing in the chunk decoder process. An attacker can bypass intermediary controls, poison caches, or hijack the request queue by crafting specially formatted chunked requests that exploit differenc...