CVE-2026-34044 Coolify: Cross-team IDOR in logs component (resource lookup not team-scoped)

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, the Logs::mount component looks up resources by UUID without scoping the lookup to the current team, allowing an authenticated user to access logs for applications owned by...

Metinfo MetInfo SQL注入漏洞

Metinfo MetInfo is a content management system CMS developed by China's Metinfo using PHP and Mysql. A SQL injection vulnerability exists in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0, which allows attackers to access sensitive database information...

Cisco Identity Services Engine Cross-Site Scripting Attack Vulnerability

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to regulate the network. logs component is one of th...