CVE-2026-16336

Technical details about CVE-2026-16336 are not publicly available in the provided documents. Monitor for updates from trinodb/trino project and CVE listings.

CVE-2026-16336

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirecturi results in open redirect. It is possible to initiate t...

CVE-2026-16336 trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirecturi results in open redirect. It is possible to initiate t...

CVE-2026-16336 trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirecturi results in open redirect. It is possible to initiate t...

CVE-2026-16336 trinodb trino OAuth2/OIDC ExternalUriInfo.java redirect

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirecturi results in open redirect. It is possible to initiate t...

EUVD-2026-46141

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validateurl, safefetch, buildopener, fetchhtml and downloadbinary functions...

PT-2026-62057

Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O EXCL or O NOFOLLOW. The segment is created in graph.h with openpath, O RDWR|O CREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

PT-2026-61858

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists where a remote authenticated peer can advertise a zero maximum packet size within the SSH MSG CHANNEL OPEN message. This causes subsequent channel writes to enter an infinite loo...

Open vSwitch validate_push_nsh() function Data Compromise

The vulnerability of the validatepushnsh function in the netopenvswitch/flownetlink.c module, which is part of the Open vSwitch router support in Linux operating systems, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-62059

Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O EXCL or O NOFOLLOW. The segment is created in pubsub.h with openpath, O RDWR|O CREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...

CVE-2026-8284: URL Redirection to Untrusted Site

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

PT-2026-61933

Name of the Vulnerable Software and Affected Versions FlexCity versions 5.536.0 through 5.541.0 Description An open redirect issue allows input data manipulation by redirecting users to untrusted sites. Recommendations Update FlexCity to version 5.542.0...

CVE-2026-16336: URL Redirection to Untrusted Site

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirecturi results in open redirect. It is possible to initiate t...

PT-2026-62060

Name of the Vulnerable Software and Affected Versions Data::ReqRep::Shared versions prior to 0.05 Description This issue occurs when the software creates a world-readable mmap backing file and opens it without using O EXCL or O NOFOLLOW. The segment is created in reqrep.h using the open function...

PT-2026-62061

Name of the Vulnerable Software and Affected Versions Data::SortedSet::Shared versions prior to 0.03 Description This issue occurs when creating a memory-mapped mmap backing file, which is created with world-readable permissions. The process uses the open function in sortedset.h with a mode of...

PT-2026-62417

Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can supply a crafted diagnostics URL that results in arbitrary command execution on the charging station...

PT-2026-61821

A vulnerability was found in trinodb trino 481. Affected is an unknown function of the file core/trino-main/src/main/java/io/trino/server/ExternalUriInfo.java of the component OAuth2/OIDC. Performing a manipulation of the argument redirect uri results in open redirect. It is possible to initiate...

PT-2026-62056

Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O EXCL or O NOFOLLOW. The segment is created in deque.h with openpath, O RDWR|O CREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readabl...

PT-2026-62188

Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft PeopleSoft Enterprise PeopleTools versions 8.61 through 8.62 Description An issue exists in the OpenSearch Dashboards component that allows an unauthenticated attacker with network access via HTTP to compromise the system...

AuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API

Broken Object-Level Authorization BOLA, also known as Insecure Direct Object Reference IDOR, has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this flaw class is that a...