CVE-2026-76370

In Splunk SOAR versions below 8.6.0 with multi-tenancy enabled, the REST API fails to enforce role-based tenant restrictions, allowing authenticated low-privileged users to enumerate names and IDs of tenants outside their role scope. CVSS 3.1 scores 4.3 (Medium) for confidentiality impact. No exp...

CVE-2026-76370 Information Disclosure through the REST API in Splunk SOAR

In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer REST API to view the names and identifiers of tenants that fall outside the role scope for that user. The vulnerability is possible because Splunk SOAR does not...

CVE-2026-76370 Information Disclosure through the REST API in Splunk SOAR

In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer REST API to view the names and identifiers of tenants that fall outside the role scope for that user. The vulnerability is possible because Splunk SOAR does not...

CVE-2026-55482

Snipe-IT is an IT asset/license management system. Prior to 8.4.1, a non-superadmin can use app/Http/Controllers/Assets/BulkAssetsController.php update to submit companyid directly without Company::getIdForCurrentUser, allowing assets to be moved across company boundaries and breaking multi-tenan...

EUVD-2026-62680

Snipe-IT is an IT asset/license management system. Prior to 8.4.1, a non-superadmin can use app/Http/Controllers/Assets/BulkAssetsController.php update to submit companyid directly without Company::getIdForCurrentUser, allowing assets to be moved across company boundaries and breaking multi-tenan...

CVE-2026-55482 Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update

Snipe-IT is an IT asset/license management system. Prior to 8.4.1, a non-superadmin can use app/Http/Controllers/Assets/BulkAssetsController.php update to submit companyid directly without Company::getIdForCurrentUser, allowing assets to be moved across company boundaries and breaking multi-tenan...

CVE-2026-55482

Snipe-IT , a Laravel-based IT asset and license management system, is affected by an authorization bypass in the BulkAssetsController::update() method. The method accepts the company_id parameter directly from user input without invoking Company::getIdForCurrentUser(), the standard company-scopin...

CVE-2026-55482 Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update

Snipe-IT is an IT asset/license management system. Prior to 8.4.1, a non-superadmin can use app/Http/Controllers/Assets/BulkAssetsController.php update to submit companyid directly without Company::getIdForCurrentUser, allowing assets to be moved across company boundaries and breaking multi-tenan...

CVE-2026-55482 Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update

Snipe-IT is an IT asset/license management system. Prior to 8.4.1, a non-superadmin can use app/Http/Controllers/Assets/BulkAssetsController.php update to submit companyid directly without Company::getIdForCurrentUser, allowing assets to be moved across company boundaries and breaking multi-tenan...

CVE-2026-61518

ISPConfig contains an authenticated SQL injection vulnerability in the Remote API. The primaryid parameter passed to delete and update API methods is concatenated directly into SQL WHERE clauses without integer casting or parameterized query binding. The built-in SQL injection scanner does not...

CVE-2026-62602

creationtimestamp| type| source ---|---|--- 2026-08-19 17:53:00+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-29 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3muatjgxi3n2u...

CVE-2026-70790

creationtimestamp| type| source ---|---|--- 2026-08-19 16:51:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70725

creationtimestamp| type| source ---|---|--- 2026-08-19 16:49:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-49283 SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

CVE-2026-49283 SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

CVE-2026-49283

SimpleSAMLphp SAML2 (PHP library) is vulnerable to a TLS validator confusion in the HTTPArtifact::receive() flow. The embedded SAML Response receives a validator that delegates to the outer SOAP ArtifactResponse, but is validated against metadata selected from the embedded response issuer rather ...

CVE-2026-49283

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

EUVD-2026-62502

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

CVE-2026-76237

stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...

CVE-2026-76238

stigmem before 0.9.0a12 has a BOLA flaw in the decay sweep endpoint. Authenticated attackers with write access to one tenant can POST with ttl_seconds=0 to expire facts across all tenants, or use dry_run to retrieve cross-tenant fact counts and existence data. CVSS 4.0 scores 7.2 HIGH (integrity ...