9640 matches found
PT-2026-71132
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.1 Description The Task SDK fails to mask the contents of a Variable when its JSON value is a list. This occurs because masking is only applied to deserialized values that are strings or dictionaries, leavin...
CVE-2026-66832 Mira Hormone Monitor, Mira Android App Use of GET request method with sensitive query strings
When the Mira Android app opens in-app WebView content e.g., shop redirect flows, the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent header. Both are then transmitted to third-party web...
CVE-2026-71474
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...
EUVD-2026-56902
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...
CVE-2026-71474
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...
CVE-2026-71474
CVE-2026-71474 affects insights-client (noted in the CVE record as insights-client-rhel9). The flaw: when insights-client receives a non-200 HTTP response, it logs request headers, which may include the cloud.openshift.com pull-secret token. A local user with access to hub pod logs could read thi...
CVE-2026-71845 Insights-client: insights-client: ccx_token bearer credential logged in clear text at startup via setdefault()
A flaw was found in insights-client. The setDefault function logs the value of every environment variable it processes, including CCXTOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or higher, the token is written in clear text to the pod...
PT-2026-70869
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...
Ray 2.56.0 Local File Inclusion / Directory Traversal
This proof of concept demonstrates a directory traversal and local file inclusion vulnerability in Ray's /logs API. By supplying a crafted glob filter, a remote unauthenticated attacker can access files outside the intended log directory. Version 2.56.0 is affected. Exploit Title: Ray 2.56.0 -...
CVE-2026-66805
A flaw was found in the console component. An attacker who can write to container logs on a managed cluster can inject malicious code into the hub console user's browser session. This occurs when the user views raw pod logs, as the console does not properly escape the log content. Successful...
CVE-2026-72883
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-container-terminal.ts, apps/dokploy/server/wss/docker-container-logs.ts, and apps/dokploy/server/wss/docker-stats.ts validat...
CVE-2026-72883 Dokploy: WebSocket Terminal Missing Service-Level Access Control
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-container-terminal.ts, apps/dokploy/server/wss/docker-container-logs.ts, and apps/dokploy/server/wss/docker-stats.ts validat...
CVE-2026-72883
CVE-2026-72883 affects Dokploy (PaaS) prior to version 0.29.13. The WebSocket handlers in wss/terminal.ts, wss/docker-container-terminal.ts, wss/docker-container-logs.ts, and wss/docker-stats.ts validate organization membership but do not enforce checkServiceAccess, accessedServerIds, or accessed...
CVE-2026-72725
Discourse (open‑source discussion platform) has a Stored XSS issue in the staff action log: prior to 2026.1.6, the staff action log model rendered unescaped previous and new value fields, enabling stored XSS in the staff interface. The vulnerability is fixed in versions 2026.1.6, 2026.5.2, 2026.6...
CVE-2026-72725 Discourse: Stored XSS in staff action logs injects staff UI
Discourse is an open-source discussion platform. Prior to 2026.1.6, the staff action log model rendered unescaped previous and new value fields that could inject stored cross-site scripting into the staff interface. The issue is fixed in 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0...
CVE-2026-71959
Bitwarden Server before 2026.7.2 does not verify that the caller is a member of the organization identified in a POST /collect request body, allowing any authenticated user to write forged, arbitrarily backdated entries into any organization's audit log...
CVE-2026-65945 Apache Ranger: Logs contain replayable JWT bearer tokens
Logs contain replayable JWT tokens in Apache Ranger versions = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-66403
DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled. The floor map and log information stored on the affected products may be retrieved...