CVE-2026-121825

OpenAM OpenAM Consortium Edition 14.0.5 and earlier contains an open redirect vulnerability CWE-601 in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF authentication request without validation, a...

CVE-2026-121825

OpenAM OpenAM Consortium Edition 14.0.5 and earlier contains an open redirect vulnerability CWE-601 in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF authentication request without validation, a...

CVE-2026-121825 Open redirect in the Liberty ID-FF service provider single sign-on flow

OpenAM OpenAM Consortium Edition 14.0.5 and earlier contains an open redirect vulnerability CWE-601 in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF authentication request without validation, a...

CVE-2026-121825 Open redirect in the Liberty ID-FF service provider single sign-on flow

OpenAM OpenAM Consortium Edition 14.0.5 and earlier contains an open redirect vulnerability CWE-601 in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF authentication request without validation, a...

CVE-2026-121825

OpenAM (OpenAM Consortium Edition) versions 14.0.5 and earlier are vulnerable to an open redirect (CWE-601) within the Liberty ID-FF service provider single sign-on flow. The root cause is the lack of validation on the goto parameter of the /preLogin endpoint, which is stored as the RelayState of...

EUVD-2026-119785

OpenAM OpenAM Consortium Edition 14.0.5 and earlier contains an open redirect vulnerability CWE-601 in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF authentication request without validation, a...

CVE-2026-121825: OpenAM consortium OpenAM (OpenAM Consortium Edition): OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty…

OpenAM OpenAM Consortium Edition 14.0.5 and earlier contains an open redirect vulnerability CWE-601 in the Liberty ID-FF service provider single sign-on flow. The goto parameter of the /preLogin endpoint is stored as the RelayState of the Liberty ID-FF authentication request without validation, a...

PT-2026-141118

TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...

CVE-2026-119759: trailbaseio trailbase: TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated…

TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...

PT-2026-141186

MikroDash before 0.8.79 contains a server-side request forgery vulnerability that allows any signed-in user, including the viewer role, to target internal addresses through notification channels. Attackers can set webhook or mail destinations to loopback, LAN or link-local addresses and call POST...

PT-2026-140957

SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, a licensed deployment with a configured SAML client can authenticate an identity from an assertion that did not satisfy the audience check. When the identity provider...

PT-2026-140928

Name of the Vulnerable Software and Affected Versions Redpanda Connect versions 4.39 through 4.110 Description In streams mode, the management HTTP API is exposed on 0.0.0.0:4195 without authentication enabled by default, leaving stream CRUD routes unprotected. An unauthenticated attacker with...

PT-2026-141199

VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password for private articles lacking an effective password, or reque...

PT-2026-141221

Instatic before 0.0.21 contains an authorization bypass vulnerability in handleRowAuthor that allows authenticated users to skip table-level access checks by loading rows with getDataRow instead of loadRowForAccess. Attackers holding content.edit.any but lacking data.system.tables.read can send...

CVE-2026-104337

The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an order before returning a coupon discount computed against that order, allowing unauthenticated attackers to disclose the monetary value of arbitrary customer orders by enumerating order IDs...

CVE-2026-123545

OpenAM from 14.5.1 before 16.1.4 contains a cross-site request forgery vulnerability in the OAuth 2.0 device authorization flow that allows attackers to approve device codes when consent is skipped for implied-consent clients. Attackers can start a device authorization and lure a logged-in user t...

CVE-2026-123517

Vikunja before 2.7.1 contains an information disclosure vulnerability that allows authenticated users to determine whether private teams exist by calling the team member self-removal endpoint. Attackers can send DELETE requests to /teams/id/members/own username for arbitrary team ids and use the...

CVE-2026-123503

Vikunja before 2.7.1 contains an improper authorization vulnerability in canDoBucket that allows users with project write access to delete buckets via a mismatched view ID. Attackers can request deletion through another view's bucket endpoint to bypass the last-bucket rule, leaving dangling...

Control iD iDSecure - Authentication Bypass

An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative use...

CVE-2026-123551

OpenAM versions 14.0.0 before 16.1.4 are susceptible to an information disclosure vulnerability. Unauthenticated attackers can exploit an unvalidated internal forward on legacy Liberty ID-FF endpoints to bypass agent-only checks. This allows for the extraction of live session tokens from the noti...