7077 matches found
CVE-2026-56726
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal ticket isolation boundaries between agents. Any authenticated agent, even one with no active tickets assigned to them, can view the titles, status, labels, and URL links of...
CVE-2026-89032
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...
CVE-2026-67412
A flaw was found in RabbitMQ. The Federation feature fails to enforce virtual host vhost authorization checks when validating upstream connections. An authenticated user with policy configuration privileges in one vhost can exploit this flaw by targeting another vhost where they lack permissions...
CVE-2026-89032
A flaw was found in LiteLLM. Due to a metadata key mismatch in the semantic cache component, an authenticated remote attacker can bypass tenant isolation by submitting semantically similar queries. This issue leads to information disclosure, allowing unauthorized access to cached responses...
CVE-2026-56726
The Zammad open source helpdesk system contains a vulnerability in versions prior to 7.0.2 where a missing authorization check in the GitHub and GitLab integrations breaks ticket isolation boundaries. Any authenticated agent, regardless of their assigned tickets, can view the titles, status, labe...
EUVD-2026-87212
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal ticket isolation boundaries between agents. Any authenticated agent, even one with no active tickets assigned to them, can view the titles, status, labels, and URL links of...
CVE-2026-89032 BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...
EUVD-2026-87147
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...
CVE-2026-89032
BerriAI LiteLLM versions prior to 1.101.0-rc.1 are vulnerable to a tenant isolation bypass within the semantic cache layer . The flaw is caused by a metadata key mismatch between the _get_semantic_cache_tenant_scope() and _get_metadata_variable_name() functions. An authenticated remote attacker w...
CVE-2026-89032 BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...
CVE-2026-89032 BerriAI LiteLLM < 1.101.0-rc.1 Tenant Isolation Bypass via Semantic Cache Layer
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...
CVE-2026-87433
A flaw was found in Google Chrome. A race condition in the FileAPI component allows a remote attacker, who has already compromised the renderer process, to bypass site isolation. This bypass can be achieved by providing a specially crafted HTML page...
CVE-2026-79289
A flaw was found in Chromium. A remote attacker, after compromising the renderer process, could bypass site isolation by using a specially crafted HTML page. This could allow the attacker to access data or resources that should be isolated, potentially leading to further compromise of the user's...
CVE-2026-89032: Incorrect Authorization
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between getsemanticcachetenantscope and getmetadatavariablename. Attackers...
CVE-2026-56726: Missing Authorization
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, this vulnerability breaks normal ticket isolation boundaries between agents. Any authenticated agent, even one with no active tickets assigned to them, can view the titles, status, labels, and URL links of...
PT-2026-98928
Name of the Vulnerable Software and Affected Versions BerriAI LiteLLM versions prior to 1.101.0-rc.1 Description A tenant isolation bypass exists in the semantic cache layer due to a metadata key mismatch between the get semantic cache tenant scope and get metadata variable name functions...
PT-2026-98940
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.0.2 Description An issue in the ticket isolation mechanism allows any authenticated agent to bypass boundaries and view sensitive data from GitHub or GitLab issues attached to any ticket in the system. By querying...
PT-2026-99004
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an OpenBao user with access to sys/leases/revoke/:lease id in one namespace could revoke a lease in another namespace when the foreign lease id was known, bypassing namespace ACL isolation. The affected lease look...
Linux Distros Unpatched Vulnerability : CVE-2026-93253
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 memblock: warn when freeing...
SUSE CVE-2026-93253
In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 "memblock: warn when freeing reserved memory before memory map is initialized", the following warning...