EUVD-2026-85030

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

EUVD-2026-84943

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization...

CVE-2026-82843: Improper Authentication

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

PT-2026-97166

Name of the Vulnerable Software and Affected Versions WP OAuth Server Login with WordPress versions prior to 6.4.0 Description The plugin fails to bind the OpenID Connect identity assertion to the authorization grant being exchanged. Instead, it returns the assertion of the most recently...

PT-2026-105463

mdtls discards the peer-identity verification result...

The vulnerability of the Cisco Identity Services Engine (ISE) platform, related to the lack of security measures for SQL query structures, allows a hacker to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code and elevate their privileges to the root level.

The vulnerability of the application software interface of the Cisco Identity Services Engine ISE and the Cisco ISE Passive Identity Connector ISE-PIC, which are used for user authentication data collection, is related to the failure to implement measures to neutralize special elements. Exploitin...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Cisco Identity Services Engine ISE network policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to insufficient protection of registration data. Exploiting this vulnerability could allow a...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code and elevate their privileges to the root level.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root leve...

The vulnerability of the RADIUS function of the Cisco Identity Services Engine (ISE) management interface allows a perpetrator to cause service interruptions.

The vulnerability of the RADIUS function of the Cisco Identity Services Engine ISE management interface involves an escape from the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Critical: ipa security, bug fix, and enhancement update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ip...

CVE-2026-93402

mdtls discards the peer-identity verification result...

The vulnerability of the Cisco Identity Services Engine (ISE) platform, related to the lack of protective measures for the SQL query structure, allows a hacker to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the SXP platform for managing Cisco Identity Services Engine policies allows a perpetrator to cause a service failure.

The vulnerability of the Cisco Identity Services Engine ISE policy management platform’s SXP service is related to improper elimination of special elements in data requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform and the Cisco ISE Passive Identity Connector (ISE-PIC) virtual authentication data collection device lies in the lack of measures to neutralize special elements. This allows attackers to execute arbitrary code and elevate their privileges to the root level.

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability...

ALSA-2026:70564 Critical: ipa security, bug fix, and enhancement update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ip...

UBUNTU-CVE-2026-93402

mdtls discards the peer-identity verification result...

CVE-2026-18156

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization...

CVE-2026-18156

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is affected by CVE-2026-18156 , where a remote authenticated attacker could bypass security controls by forging user identities due to improper authorization (CWE-862 ). The vulnerability has a CVSS base score of 6.5 . Affected versions...

CVE-2026-18156 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to bypass security controls by forging user identities due to improper authorization...