MINI-V55G-2RF5-RJVV

Bulletin has no description...

MINI-5Q59-9V2C-J79H

Bulletin has no description...

EUVD-2026-70532

MISP contains a session fixation vulnerability in the CustomAuth authentication a custom configuration flow. When a user was successfully authenticated through CustomAuth, MISP stored the authenticated user identity in the existing session without first rotating the session identifier. As a resul...

MINI-38W3-GVM4-F4RX

Bulletin has no description...

GHSA-4Q39-2JHR-7QX8

creationtimestamp| type| source ---|---|--- 2026-09-02 23:38:43+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mul46lxbqp2y 2026-09-03 10:32:33+00:00| seen| https://gist.github.com/alon710/b49a4882cbb663c91159acdfe34ae468...

MINI-FHX7-W4PG-Q695

Bulletin has no description...

MINI-X73V-4FGG-7GR9

Bulletin has no description...

MINI-P85J-JCM9-J5X5

Bulletin has no description...

CVE-2026-36374

Description A public endpoint has been identified that allows certificate lookup using a predictable identifier certificate code, without any authentication or authorization mechanism. By enumerating this identifier, an attacker can access third-party personal data, including full name, CPF...

CGA-MQQ4-FQW4-4WQC

Bulletin has no description...

MINI-HPCC-7GRH-J32X

Bulletin has no description...

MINI-396R-XM56-4JMX

Bulletin has no description...

MINI-56F2-GF53-C692

Bulletin has no description...

EUVD-2026-70063

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

CVE-2026-84702

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

EUVD-2026-69793

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...

CVE-2026-84702

facefusion through 3.6.1 is vulnerable to a path traversal flaw in the get_job_file_name function (located in facefusion/jobs/job_manager.py), which fails to normalize job identifiers. An attacker can supply traversal sequences in the job identifier parameter via the unauthenticated HTTP API to w...

CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier

facefusion through 3.6.1 fails to normalize job identifiers in getjobfilename, allowing attackers to write files outside the jobs directory. Attackers can supply traversal sequences in the job identifier parameter through the unauthenticated HTTP API to create files at arbitrary locations...