CVE-2026-101149

A vulnerability exists due to insufficient validation of OIDC SSO provider configuration . This flaw could allow a user with specific high privileges to perform a Server-Side Request Forgery (SSRF) by directing requests to arbitrary destinations. No specific software versions, affected components...

CVE-2026-101149 Security Advisory 0186

Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinations...

CVE-2026-101150 Security Advisory 0186

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations...

EUVD-2026-92817

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

Cisco ASA URL Redirection to Untrusted Site (CVE-2023-20264)

A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 single sign-on SSO for remote access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to intercept the SAML...

CVE-2026-103546

The MongoDB Controllers for Kubernetes are vulnerable to improper validation of Ops Manager backup configuration . An attacker with permissions to modify an OpsManager custom resource can trigger unintended administrative changes in Ops Manager. This vulnerability specifically impacts deployments...

CVE-2026-103546 Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

EUVD-2026-92478

Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint at /api/workspaces/workspaceslug/projects/projectid/members/memberpk/ to change another user's project role. The role-update logic blocks...

PT-2026-106243

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic lies in the insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of Containerd’s execution environment, related to insufficient validation of input data, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Containerd’s execution environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...

PT-2026-106021

Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint at /api/workspaces/workspace slug/projects/project id/members/member pk/ to change another user's project role. The role-update logic block...

The vulnerability of the StaticFiles.lookup_path() function in the Starlette ASGI framework for web development allows a attacker to perform an SSRF attack.

The vulnerability of the StaticFiles.lookuppath function in the Starlette ASGI framework for web development is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to perform an SSRF attack...

The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager (AEM) Forms on JEE lies in the insufficient validation of requests at the server-side level. This allows attackers to exploit their privileges.

The vulnerability of the corporate platform for creating, managing, and processing Adobe Experience Manager AEM Forms on JEE is related to insufficient validation of requests at the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

CLEANSTART-2024-WN69569 Insufficient validation of untrusted input in V8 in Google Chrome prior to 89

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in V8 in Google Chrome prior to 89...

CLEANSTART-2024-UJ11353 Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90...

CLEANSTART-2024-QP63264 Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92...

CLEANSTART-2024-HF39354 Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102...

CLEANSTART-2024-WS76335 Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103

Security vulnerability affects the chromium package. Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103...

The vulnerability in the phpMyFAQ web application’s file phpMyFAQ/src/phpMyFAQ/Controller/Frontend/Api/ChatController.php allows a violator to disclose protected information.

The vulnerability in the phpMyFAQ application’s file phpMyFAQ/src/phpMyFAQ/Controller/Frontend/Api/ChatController.php is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information...