9 matches found
CVE-2026-67860
A flaw was found in open62541, an open-source OPC UA Open Platform Communications Unified Architecture toolkit. This vulnerability is a heap-based buffer overflow occurring in the default HistoryRead path when the default history database uses a memory backend. An attacker could exploit this to...
DEBIAN-CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
CVE-2026-67860
Open62541 1.5.5 is affected by a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend. The vulnerability stems from the HistoryRead component, causing an availability impact per the CVSS metrics (NETWORK attack vector, LOW co...
CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
CVE-2026-45563 Roxy-WI: IDOR — any authenticated user can read another user's full action history
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, GET /history// re-uses the serverip path parameter as a user-id when service == 'user', with no authorization check. Any authenticated user — even a guest in an unrelated group —...
CVE-2026-45563 Roxy-WI: IDOR — any authenticated user can read another user's full action history
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, GET /history// re-uses the serverip path parameter as a user-id when service == 'user', with no authorization check. Any authenticated user — even a guest in an unrelated group —...
