72257 matches found
EUVD-2026-50214
A flaw was found in the client policy enforcement mechanism of Keycloak. The issue occurs when the system checks group membership by name instead of a unique identifier. An attacker with client management privileges could bypass security policies by joining a group with a matching name in a...
CVE-2026-65325 Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification
Apache Traffic Server reuses multiplexed HTTP/2 origin connections without verifying the server certificate covers the new request hostname. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1....
CVE-2026-5626
creationtimestamp| type| source ---|---|--- 2026-07-29 08:15:06+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-5626...
MINI-MF52-V926-3VPJ
Bulletin has no description...
CVE-2026-63232
creationtimestamp| type| source ---|---|--- 2026-07-29 06:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrrdmem3gi2k...
CVE-2026-64544
In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetrickeys - fix OOB read in pefiledigestpecontents pefiledigestpecontents computes the trailing-data hash length as pelen - hashedbytes + certssize. A crafted PE can make the addition exceed pelen, causing the unsign...
CVE-2026-63238
CVE-2026-63238 describes an authentication bypass in Koollab LMS where an unauthenticated attacker can take over any account (including administrator) by supplying a valid user UUID to the 2FA validation endpoint. The connected records reiterate this access path but do not provide version, patch,...
CVE-2026-63238
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint...
BELL-CVE-2026-64509
Bulletin has no description...
BELL-CVE-2026-64491
Bulletin has no description...
BELL-CVE-2026-64339
Bulletin has no description...
BELL-CVE-2026-64302 CVE-2026-64302 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64257 CVE-2026-64257 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64533
Bulletin has no description...
BELL-CVE-2026-64411
Bulletin has no description...
BELL-CVE-2026-64408
Bulletin has no description...
BELL-CVE-2026-64335
Bulletin has no description...
BELL-CVE-2026-64234
Bulletin has no description...