420660 matches found
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by an authentication bypass (CVE-2026-16184)
Summary Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Remote Server, is affected by an authentication bypass CVE-2026-16184 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
CVE-2026-72817
A flaw was found in the go-chi/chi component. The RealIP middleware, responsible for resolving the request source IP, does not properly validate trusted proxies when processing the X-Forwarded-For header. A remote attacker can exploit this by prepending a forged IP address to the X-Forwarded-For...
[SECURITY] [DSA 6450-1] srt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6450-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 18, 2026 https://www.debian.org/security/faq -...
CVE-2026-12631 Broken access-control denial in k_thread_join/k_thread_abort syscall validation in Zephyr kernel
The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...
CVE-2026-12631
The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...
EUVD-2026-61491
The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...
CVE-2026-12631 Broken access-control denial in k_thread_join/k_thread_abort syscall validation in Zephyr kernel
The Zephyr kernel validates the kthreadjoin and kthreadabort system calls declared syscall in include/zephyr/kernel.h through threadobjvalidate in kernel/thread.c. Its default switch branch is the access-denied path, taken when kobjectvalidate returns -EPERM the calling user thread was never...
[SECURITY] [DSA 6449-1] swift security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6449-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 18, 2026 https://www.debian.org/security/faq -...
Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it
Summary Repo under test: https://github.com/Netflix/lemur PUT /api/1/certificates//revoke authorizes the caller against the Lemur database row creator == current user, or CertificatePermission over the row's roles rather than the underlying CA-side certificate identity. Separately, POST...
GHSA-PXMC-2FFP-8J67 Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it
Summary Repo under test: https://github.com/Netflix/lemur PUT /api/1/certificates//revoke authorizes the caller against the Lemur database row creator == current user, or CertificatePermission over the row's roles rather than the underlying CA-side certificate identity. Separately, POST...
Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False
Summary The CertificateExport handler in lemur/certificates/views.py nests its entire ownership / CertificatePermission check inside an if plugin.requireskey: branch. When the selected export plugin advertises requireskey = False, the authorization check is skipped entirely and any authenticated...
GHSA-4H97-P9WQ-CHQJ Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False
Summary The CertificateExport handler in lemur/certificates/views.py nests its entire ownership / CertificatePermission check inside an if plugin.requireskey: branch. When the selected export plugin advertises requireskey = False, the authorization check is skipped entirely and any authenticated...
GHSA-F3QQ-49M6-RW8F Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)
Summary The SSRF mitigation added for GHSA-54vg-pfh7-jq95 validaterevocationurl in lemur /certificates/verify.py can be bypassed. An operator-role user who uploads a certificate with attacker-controlled CRL/OCSP extensions can still make Lemur reach internal destinations RFC1918, loopback,...
Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)
Summary The SSRF mitigation added for GHSA-54vg-pfh7-jq95 validaterevocationurl in lemur /certificates/verify.py can be bypassed. An operator-role user who uploads a certificate with attacker-controlled CRL/OCSP extensions can still make Lemur reach internal destinations RFC1918, loopback,...
Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs
Summary The ACME client used to issue certificates from Let's Encrypt / Google Public CA / private ACME CAs connects to an acmeurl, then issues requests to URLs that the ACME server returns in its directory/order/authorization/finalize responses - this is the classic ACME-client SSRF RFC 8555...
GHSA-XPMJ-WJCP-6PWW Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs
Summary The ACME client used to issue certificates from Let's Encrypt / Google Public CA / private ACME CAs connects to an acmeurl, then issues requests to URLs that the ACME server returns in its directory/order/authorization/finalize responses - this is the classic ACME-client SSRF RFC 8555...
GHSA-MHC4-G3WH-CW7M Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
Vulnerability Details File: go/vt/vttablet/tabletmanager/vreplication/vrlog.go Summary vttablet's /debug/vrlog HTTP endpoint streams live VReplication event data — including the literal SQL DML statements being replicated by MoveTables, Reshard, Materialize, and "vitess"-strategy Online DDL...
Critical: Red Hat Security Advisory: Red Hat build of Keycloak 26.4.15 Images Security Update
New images are available for Red Hat build of Keycloak 26.4.15 and Red Hat build of Keycloak 26.4.15 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...
Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection
Summary The Froxlor AJAX endpoint lib/ajax.php is missing Cross-Site Request Forgery CSRF protection. While the main application lib/init.php enforces CSRF token validation on all state-changing HTTP requests POST/PUT/PATCH/DELETE, the standalone lib/ajax.php endpoint bypasses this mechanism...
GHSA-XPR4-8VP6-C87J Froxlor has CSRF Vulnerability in AJAX Endpoint — Missing Cross-Site Request Forgery Protection
Summary The Froxlor AJAX endpoint lib/ajax.php is missing Cross-Site Request Forgery CSRF protection. While the main application lib/init.php enforces CSRF token validation on all state-changing HTTP requests POST/PUT/PATCH/DELETE, the standalone lib/ajax.php endpoint bypasses this mechanism...