9 matches found
CVE-2026-67860
A flaw was found in open62541, an open-source OPC UA Open Platform Communications Unified Architecture toolkit. This vulnerability is a heap-based buffer overflow occurring in the default HistoryRead path when the default history database uses a memory backend. An attacker could exploit this to...
DEBIAN-CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
CVE-2026-67860
open62541 1.5.5 contains a heap-based buffer overflow in the default HistoryRead path when the default history database is used with the memory backend...
CVE-2026-67860
The open62541 library (an open-source OPC UA toolkit) version 1.5.5 is vulnerable to a heap-based buffer overflow in the default HistoryRead path when using the memory backend with the default history database. An attacker could exploit this flaw to cause a denial of service (making the system un...
CVE-2026-45563 Roxy-WI: IDOR — any authenticated user can read another user's full action history
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, GET /history// re-uses the serverip path parameter as a user-id when service == 'user', with no authorization check. Any authenticated user — even a guest in an unrelated group —...
CVE-2026-45563 Roxy-WI: IDOR — any authenticated user can read another user's full action history
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, GET /history// re-uses the serverip path parameter as a user-id when service == 'user', with no authorization check. Any authenticated user — even a guest in an unrelated group —...
