CVE-2026-124027 ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential adminuserid and file id query parameters, bypassing the ownership check, ...

CVE-2026-124025 Faveo Helpdesk through 2.0.3 Cross-Department Ticket Disclosure via /ticket/print

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticketprint and the pdfThread endpoint that fails to verify ticket department or assignment. Authenticated agents can request arbitrary ticket ids via GET /ticket/print/id to render PDFs of other...

CVE-2026-124025

Faveo Helpdesk versions through 2.0.3 are affected by a broken access control vulnerability in the TicketController::ticket_print and pdfThread endpoints. The root cause is a failure to verify the ticket department or assignment during request processing. This allows authenticated agents to perfo...

EUVD-2026-118433

Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticketprint and the pdfThread endpoint that fails to verify ticket department or assignment. Authenticated agents can request arbitrary ticket ids via GET /ticket/print/id to render PDFs of other...

CVE-2026-62344

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/id and GET /activitypub/comment/id endpoints call ActivitypubTrail and ActivitypubComment to return full trail and comment records without applying the PocketBas...

CVE-2026-62344 Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/id and GET /activitypub/comment/id endpoints call ActivitypubTrail and ActivitypubComment to return full trail and comment records without applying the PocketBas...

EUVD-2026-118394

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/id and GET /activitypub/comment/id endpoints call ActivitypubTrail and ActivitypubComment to return full trail and comment records without applying the PocketBas...

CVE-2026-62344 Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/id and GET /activitypub/comment/id endpoints call ActivitypubTrail and ActivitypubComment to return full trail and comment records without applying the PocketBas...

CVE-2026-62344

Wanderer , a self-hosted trail database, is vulnerable to an authorization bypass in versions prior to 0.19.3 . The unauthenticated GET /activitypub/trail/{id} and GET /activitypub/comment/{id} endpoints call ActivitypubTrail() and ActivitypubComment() respectively, which return full records with...

CVE-2026-62344

Wanderer is a self-hosted trail database for saving and sharing adventures. Prior to 0.19.3, the unauthenticated GET /activitypub/trail/id and GET /activitypub/comment/id endpoints call ActivitypubTrail and ActivitypubComment to return full trail and comment records without applying the PocketBas...

CVE-2026-62851 FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization)

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.226, the search-by-number shortcut in ConversationsController::search resolves a user-controlled ticket number without applying the mailbox filter or view policy used by the normal search path. An authenticated non-admin agent...

CVE-2026-62851 FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization)

FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.226, the search-by-number shortcut in ConversationsController::search resolves a user-controlled ticket number without applying the mailbox filter or view policy used by the normal search path. An authenticated non-admin agent...

ROOT-OS-UBUNTU-2404-CVE-2026-45836 CVE-2026-45836 in linux - Patched by Root

Root has patched CVE-2026-45836 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-31715 CVE-2026-31715 in linux - Patched by Root

Root has patched CVE-2026-31715 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-71148 CVE-2025-71148 in linux - Patched by Root

Root has patched CVE-2025-71148 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-68218 CVE-2025-68218 in linux - Patched by Root

Root has patched CVE-2025-68218 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

org.apache.cxf/cxf: Apache CXF: Authentication Bypass via Crafted OIDC Self-Issued ID Tokens

A flaw was found in Apache CXF. The OpenID Connect OIDC relying-party token validation in Apache CXF could accept specially crafted self-issued ID tokens. This bypasses necessary claim checks, such as issuer, subject, audience, and time, leading to an authentication bypass. This vulnerability...

CVE-2026-123617

Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups by passing JSON objects in the id parameter. Attackers can send MongoDB query operators such as $ne or $gt to POST /api/user to select and enumerate other users' public...

CVE-2026-123617 Openwhyd before 1.65.1 NoSQL Injection via POST /api/user

Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups by passing JSON objects in the id parameter. Attackers can send MongoDB query operators such as $ne or $gt to POST /api/user to select and enumerate other users' public...

CVE-2026-123617

Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups by passing JSON objects in the id parameter. Attackers can send MongoDB query operators such as $ne or $gt to POST /api/user to select and enumerate other users' public...