PT-2026-105830

A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/user api key auth.py of the component M2M JWT Handler. Such manipulation leads to improper authorization. The attack can be launched remotely. A high complexity level is...

Security Bulletin: IBM i is Affected By An Improper Privilege Managment Vulnerability [CVE-2026-18343]

Summary IBM i is vulnerable to allowing a local attacker to modify the BOOTP table due to improper authorization CVE-2026-18343 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18343 DESCRIPTION: IBM i could allow a local attacker to modify the BOOTP table d...

CVE-2026-102846

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument...

CVE-2026-102846 gedelumbung HospitalManagement Configuration sistem.php simpan improper authorization

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument...

CVE-2026-102846 gedelumbung HospitalManagement Configuration sistem.php simpan improper authorization

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument...

CVE-2026-102846 gedelumbung HospitalManagement Configuration sistem.php simpan improper authorization

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument...

CVE-2026-102846

A vulnerability exists in gedelumbung HospitalManagement affecting the Configuration Handler component. Specifically, the sistem.php::simpan function within the file application/modules/admin/controllers/sistem.php is susceptible to improper authorization when an attacker manipulates the tipe, ti...

EUVD-2026-89570

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument...

EUVD-2026-89492

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...

EUVD-2026-89499

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86101

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

CVE-2026-86105

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...

CVE-2026-86101: Improper Authorization

An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SAML user with access only to the Access Portal to obtain unauthorized Mobile VPN with SSL access through a specially crafted request...

Missing sheet protection check when updating cell comments

The handler that updates a cell comment in the Vaadin Spreadsheet component did not re-check the sheet protection state, so a user of an application that renders a spreadsheet could add or replace comments on a protected sheet and on locked cells, and create empty cells in the process. See CWE-28...

CVE-2026-86105: Improper Handling of Unicode Encoding

An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privileged Access Portal user to access other web applications they are not authorized for by sending a specially crafted request for a different resource which they are authorized to...

CentOS Linux 6 [TuxCare] Security Update: libsss_idmap / libsss_simpleifp / python-sss / python-sss-murmur / etc (CENTOS6:CLSA-2025:1748947069)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1748947069 advisory. - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...

TencentOS Server 4: tomcat (TSSA-2026:1064)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1064 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2026-13720: Improper Authorization

An Editor can set file-provisioning metadata the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations when creating a dashboard through the dashboard API, because these fields were stored without an authorization check. The dashboard then appears file-provisioned, a...

CVE-2026-102846: Improper Authorization

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument...

CentOS Linux 7 [TuxCare] Security Update: libsss_idmap / libsss_simpleifp / libsss_simpleifp-devel / etc (CENTOS7:CLSA-2025:1748967240)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1748967240 advisory. - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...