133 matches found
CVE-2026-72861
In Appwrite templates' github-issue-bot, verifyWebhook uses an inverted condition (typeof signature !== 'string' || (await verify(...))) that short-circuits to success when the X-Hub-Signature-256 header is absent, skipping HMAC verification. Unauthenticated callers can then post arbitrary commen...
CVE-2026-53583
In libgit2 before 1.8.6 and 1.9.5, verify_server_cert in src/libgit2/streams/openssl.c uses an inverted !!memcmp in the GEN_IPADD branch, so OpenSSL builds accept mismatched IP SubjectAltName certificates and reject matching ones, enabling a network attacker to intercept IP-literal HTTPS connecti...
CVE-2026-72320
A flaw was found in the Linux kernel's netfilter component, specifically within the nftlookup functionality. This issue arises from incorrect handling of 'catchall' elements during 'inverted lookups' in the nftlookupeval function. Due to a logic error where the lookup result is not recomputed,...
CVE-2026-73692
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Linux Distros Unpatched Vulnerability : CVE-2026-72231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This...
PT-2026-77030
Dolibarr contains an authorization bypass vulnerability in the clonetasks mass action that allows authenticated users with project creation permissions to clone tasks into private projects they are not authorized to access. An inverted boolean condition in the private-project membership check...
CVE-2026-72320
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
UBUNTU-CVE-2026-72320
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
EUVD-2026-59219
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
CVE-2026-72320 netfilter: nft_lookup: fix catchall element handling with inverted lookups
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by interva...
CVE-2026-72320
CVE-2026-72320 concerns the Linux kernel netfilter implementation for nft_lookup. The issue arises in how inverted lookups (NFT_LOOKUP_F_INV) interact with the catchall element in interval sets, potentially causing an incorrect verdict. The documented fix folds the catchall lookup into ext before...
CVE-2026-72231
CVE-2026-72231 affects the Linux kernel’s batman-adv TT (traffic test) logic. The vulnerability arises in batadv_send_tt_request(), which previously allocated a tt_req_node for a destination originator, potentially allowing multiple TT requests to be sent concurrently. The issue is that a send-bu...
CVE-2026-72231 batman-adv: tt: avoid request storms during pending request
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadvsendttrequest allocates a ttreqnode when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same time...
Linux Distros Unpatched Vulnerability : CVE-2026-72320
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftlookup: fix catchall element handling with inverted lookups nftlookupeval decides whether a lookup matched found from the direct set lookup and...
PT-2026-72508
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft lookup: fix catchall element handling with inverted lookups nft lookup eval decides whether a lookup matched found from the direct set lookup and priv-invert before falling back to the catchall element used by...
CVE-2026-19182 OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users acknowledge alarms as any user and bypass read-only
An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user ROLEREST to acknowledge, escalate, or clear alarms recorded as an arbitrary username, and, when also assigned ROLEREADONLY, to modify alarm state despite the...
CVE-2026-19182
Summary of vulnerability details (CVE-2026-19182) : OpenNMS Meridian and Horizon contain an inverted authorization check in the v2 Alarm REST API. A low-privileged authenticated user (ROLE_REST) can acknowledge, escalate, or clear alarms recorded as an arbitrary username, and if also granted ROLE...
CVE-2026-64579
In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...