58250 matches found
CVE-2026-14881 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow
When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings...
EUVD-2026-47770
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication MFA configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA...
CVE-2026-22049
ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication MFA configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited could allow an attacker with valid credentials to bypass MFA...
EUVD-2026-47769
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...
CVE-2026-16624
CVE-2026-16624 affects Cal.com OSS, where there is an authorization bypass on webhook creation via unvalidated teamId injection. Any authenticated user can create a webhook on any team and potentially exfiltrate booking data (e.g., organizer/attendee emails and custom responses) and, in some case...
CVE-2026-16624 CVE-2026-16624
Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...
CVE-2026-59888
creationtimestamp| type| source ---|---|--- 2026-07-22 18:01:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mravquivj32p 2026-08-25 12:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwiw3pf26...
MINI-HC6G-W7Q7-PVCP
Bulletin has no description...
MINI-RQQ4-X26Q-5W98
Bulletin has no description...
CVE-2026-13187
creationtimestamp| type| source ---|---|--- 2026-07-22 17:18:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrategwpze2g...
MINI-FG7V-3QGV-CQHQ
Bulletin has no description...
MINI-VX2Q-4VRG-M33Q
Bulletin has no description...
CVE-2026-53910
creationtimestamp| type| source ---|---|--- 2026-07-22 16:15:06+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-53910 2026-07-25 17:28:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrifcmd74u2c...
MINI-P8XR-33H8-9PC7
Bulletin has no description...
GHSA-MVH2-CRG5-V77C
creationtimestamp| type| source ---|---|--- 2026-07-22 16:00:04+00:00| seen| https://t.me/bdufstecru/3334 2026-07-23 00:00:22+00:00| seen| https://t.me/bdufstecru/3334...
MINI-6RQ4-74QW-4VC8
Bulletin has no description...
MINI-86VM-J5MM-Q8PJ
Bulletin has no description...
CVE-2026-2395
creationtimestamp| type| source ---|---|--- 2026-07-22 15:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mramqbyzww2v 2026-07-22 16:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrasamszwq27...