157850 matches found
EUVD-2026-87295
Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...
CVE-2026-5267 Unauthenticated Event Stream Exposure of Session Tokens in Navigator NCS
Ciena Navigator Network Control Suite NCS contains an information exposure vulnerability in an event-streaming API that does not properly enforce authentication. An unauthenticated attacker with network access to the affected service could access the event stream and potentially obtain sensitive...
CVE-2026-5267
The Ciena Navigator Network Control Suite (NCS) is affected by an information exposure vulnerability in its event-streaming API . The root cause is a failure to properly enforce authentication , which allows an unauthenticated attacker with network access to the affected service to access the eve...
CVE-2026-56734
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during federated authentication OAuth/OIDC/SAML, a profile image URL from the external identity provider is fetched without verifying the target address. An actor who controls their profile at a connected provider...
CVE-2026-91837
A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...
UBUNTU-CVE-2026-91837
A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...
CVE-2026-56734
The open-source helpdesk system Zammad (versions prior to 7.0.2 ) is vulnerable to Server-Side Request Forgery (SSRF) during federated authentication (OAuth/OIDC/SAML). The application fetches profile image URLs from external identity providers without validating the target address. An attacker c...
CVE-2026-56734 Zammad: Avatar Image URL Server-Side Request Forwarding
Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.2, during federated authentication OAuth/OIDC/SAML, a profile image URL from the external identity provider is fetched without verifying the target address. An actor who controls their profile at a connected provider...
DEBIAN-CVE-2026-67236
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POST /login caused isauthorized/2 to set an auth cookie containing base64-encoded username:password credentials without HttpOnly, Secure, SameSite, or expiration protections. Because base64 is encoding...
CVE-2026-67236
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POST /login caused isauthorized/2 to set an auth cookie containing base64-encoded username:password credentials without HttpOnly, Secure, SameSite, or expiration protections. Because base64 is encoding...
CVE-2026-91837
A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters special characters that can execute...
CVE-2026-67236 RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login
RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, a successful POST /login caused isauthorized/2 to set an auth cookie containing base64-encoded username:password credentials without HttpOnly, Secure, SameSite, or expiration protections. Because base64 is encoding...
CVE-2026-79064
A flaw was found in the Network component of Google Chrome. A remote attacker, by leveraging social engineering tactics and a specially crafted Chrome extension, could exploit a use-after-free vulnerability. This could lead to the execution of arbitrary code outside of the browser's security...
CVE-2026-93306
IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the ASMI web interface. An unauthenticated attacker on the management network can send a malformed HTTPS request to ASMI,...
CVE-2026-93306
IBM Power System firmware is affected by a vulnerability in the ASMI web interface (CWE-125: Out-of-bounds Read). An unauthenticated attacker on the management network can send a malformed HTTPS request , causing the web server to crash with possible memory corruption and generate an error log. W...
Microsoft Office Information Disclosure Vulnerability
Insertion of sensitive information into log file in Microsoft Office allows an authorized attacker to disclose information over a network...
CVE-2026-79028
A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in the network component by crafting a malicious HTML page. This could allow the attacker to obtain sensitive information from the user's browser...
CVE-2026-76921
A flaw was found in Wireshark. A use-after-free vulnerability exists in the CMS Cryptographic Message Syntax protocol dissector. An attacker could exploit this by crafting a malicious network packet, leading to a crash and a denial of service DoS for the application. Mitigation To mitigate this d...
DEBIAN-CVE-2026-98025
In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedules re-enabling of ethernet mode, but then falls through to the rest of...
CVE-2026-98025
In the Linux kernel, the following vulnerability has been resolved: net: usb: cx82310eth: drop URB after 0xffff reboot sentinel to prevent partialdata heap overflow The 0xffff length sentinel detects a router reboot and schedules re-enabling of ethernet mode, but then falls through to the rest of...