RLSA-2026:97238 Important: cockpit-machines security, bug fix, and enhancement update

Cockpit component for managing libvirt virtual machines. Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass CVE-2026-2950 Bug Fixe...

RLSA-2026:97514 Important: subscription-manager-cockpit security update

Subscription Manager Cockpit UI Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass CVE-2026-2950 For more details about the securi...

RLSA-2026:97539 Important: cockpit-machines security update

Cockpit component for managing libvirt virtual machines. Security Fixes: lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass CVE-2026-2950 For more...

CVE-2026-126357 Hono: `mount()` and `app.mount()` can forward a path that bypasses middleware scoped inside the mount prefix

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.13.16, mount and app.mount can remove a dynamic mount prefix using the route-pattern length rather than the matched-prefix length, allowing a crafted path to be forwarded as a protected inner route...

CVE-2026-126357

The Hono Web application framework is vulnerable to an authentication bypass in versions prior to 4.13.16 . The issue resides in the mount() and app.mount() functions, which can improperly handle path forwarding. Specifically, the framework may remove dynamic mount prefixes based on route-pattern...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...

Important: Red Hat Security Advisory: cockpit-machines security update

An update for cockpit-machines is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

CVE-2022-22978

CVE-2022-22978 Spring Security Pass Spring Security 成功 http://localhost:9090/login%0a Pass Spring Security with SayMyName 失敗 http://localhost:9090/name%0d Bypass Spring Security with Custom RBAC 失敗 http://localhost:9090/admin/admin%0d Bypass Spring Security with Annotation RBAC 失敗...

Important: Red Hat Security Advisory: cockpit-podman security update

An update for cockpit-podman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: Red Hat Security Advisory: cockpit-machines security, bug fix, and enhancement update

An update for cockpit-machines is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: subscription-manager-cockpit security update

An update for subscription-manager-cockpit is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2026-125113

The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. Prior to version 5.9.2, XRootD's rpCheck function in src/XrdXrootd/XrdXrootdXeq.cc rejects a parent-directory component only when t...

CVE-2026-123797 SuperTokens Core: Unknown tenant path bypasses API key and public-tenant enforcement

SuperTokens Core is an open source authentication server. Prior to 11.3.6, 11.4.6, and 12.0.8, app-specific management requests using an unknown tenant path and an older supported cdi-version can bypass API-key and public-tenant enforcement. In...

CVE-2026-123797 SuperTokens Core: Unknown tenant path bypasses API key and public-tenant enforcement

SuperTokens Core is an open source authentication server. Prior to 11.3.6, 11.4.6, and 12.0.8, app-specific management requests using an unknown tenant path and an older supported cdi-version can bypass API-key and public-tenant enforcement. In...

Pods CVE-2026-19598 privilege escalation detect

CVE-2026-19598: meta-box-loader JSON path bypasses podsadmin guards; unauthenticated saveuser can reset user 1 password. !/usr/bin/env python3 -- coding: utf-8 -- """Pods = 3.3.9 unauthenticated podsadmin priv esc CVE-2026-19598.""" from future import annotations import secrets from kittysploit...

CVE-2026-125113: xrootd: The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data…

The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. Prior to version 5.9.2, XRootD's rpCheck function in src/XrdXrootd/XrdXrootdXeq.cc rejects a parent-directory component only when t...

CVE-2026-124040

CivetWeb through 1.16, when built with USEHTTP2 and enablehttp2 on, contains a use-after-free vulnerability in handlehttp2 that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame omitting these pseudo-headers to influence request method or pa...

AZL-113116 CVE-2026-124040 affecting package ceph 18.2.2-13

CivetWeb through 1.16, when built with USEHTTP2 and enablehttp2 on, contains a use-after-free vulnerability in handlehttp2 that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame omitting these pseudo-headers to influence request method or pa...

Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

Summary Since 4.6.0, Nuxt resolves . and .. segments in the request path, including percent-encoded forms such as %2e, before rendering a page. Nitro's routing, Nitro's route rules and server/middleware see the path with those segments still in place. A request for /%2e/admin therefore renders th...

GHSA-9V7C-Q64Q-VV33 Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

Summary Since 4.6.0, Nuxt resolves . and .. segments in the request path, including percent-encoded forms such as %2e, before rendering a page. Nitro's routing, Nitro's route rules and server/middleware see the path with those segments still in place. A request for /%2e/admin therefore renders th...