170497 matches found
CVE-2026-93352
Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbiddenextensions blocklist in config/mediable.php. The blocklist introduced to address CVE-2026-49972 includes phpt but omits pht, which Apache executes as PHP via...
automation-controller: automation-controller-container: automation-controller: workflow job template node execute permission check bypassed by creating a node with a null unified_job_template and then patching it, allowing a single workflow-admin to execute any other tenant's job template with the victim's credentials (cross-tenant privilege escalation)
A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The execute-permission check on a workflow job template node's unified job template is skipped when the node's currently stored unified job template is empty: the check inspects only the existing value, not the...
9router: Mass assignment in PATCH /api/settings allows authenticated authorization downgrade
Summary The PATCH /api/settings endpoint writes the entire request body to persistent settings without a field whitelist. An authenticated user can set security-critical fields that are not meant to be modifiable here — notably requireLogin. Setting requireLogin: false disables authentication for...
CVE-2026-86512
A flaw was found in java-json-tools json-patch. This vulnerability, located in the CopyOperation.apply and MoveOperation.apply functions, allows for improper access controls. A remote attacker could exploit this to potentially perform unauthorized operations, leading to impacts on confidentiality...
CVE-2026-86319
A flaw was found in java-json-tools json-patch. A remote attacker can exploit a vulnerability in the JsonPatch.apply function within the Patch Operation Handler component. By manipulating input, an attacker can cause excessive resource consumption, leading to a Denial of Service DoS condition...
SUSE-SU-2026:4315-1 Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on...
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate reads inherited properties and assign uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys beginning with an inherited property such ...
CVE-2026-61834
The scim-patch library, used for applying SCIM patch operations, is vulnerable to process-global mutation in versions prior to 0.9.2 . The root cause lies in the navigate() function reading inherited properties and the assign() function using prototype-chain membership checks when resolving attac...
CVE-2026-61834 scim-patch: Mutation of Inherited Built-in Method Objects
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate reads inherited properties and assign uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys beginning with an inherited property such ...
CVE-2026-61834 scim-patch: Mutation of Inherited Built-in Method Objects
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate reads inherited properties and assign uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys beginning with an inherited property such ...
CVE-2026-61834 scim-patch: Mutation of Inherited Built-in Method Objects
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate reads inherited properties and assign uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys beginning with an inherited property such ...
ROOT-APP-NPM-CVE-2026-59940 CVE-2026-59940 in seroval - Patched by Root
Root has patched CVE-2026-59940 in the seroval package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-2976 CVE-2023-2976 in com.google.guava:guava - Patched by Root
Root has patched CVE-2023-2976 in the com.google.guava:guava package for Root:Maven. Multiple fixed versions available...
CVE-2026-82996
creationtimestamp| type| source ---|---|--- 2026-09-23 09:50:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83005
creationtimestamp| type| source ---|---|--- 2026-09-23 09:49:52+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11 2026-09-23 21:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mw7niuhlte2e...
CVE-2026-83022
creationtimestamp| type| source ---|---|--- 2026-09-23 09:49:19+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83028
creationtimestamp| type| source ---|---|--- 2026-09-23 09:49:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...
CVE-2026-83045
creationtimestamp| type| source ---|---|--- 2026-09-23 09:48:33+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11 2026-09-24 20:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mwc4c4mfln2a...