28557 matches found
CVE-2026-92983 InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch
InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys. Unauthenticated attackers can send completion requests to the proxy endpoint that accumulate...
Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues
Summary Multiple vulnerabilities CVE-2026-50734, CVE-2026-53917, CVE-2026-10050, CVE-2026-10051, CVE-2026-6790 affect IBM Sterling Secure Proxy and are addressed in version 6.2.1.3. Vulnerability Details CVEID:CVE-2026-50734 DESCRIPTION: Memory Allocation with Excessive Size Value vulnerability i...
PT-2026-94385
Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.1.0 through 2.16.0 AsyncHttpClient versions 3.0.1 through 3.0.11 Description Requests using an authenticated SOCKS proxy can expose proxy credentials to the origin server. This occurs because NettyRequestFactory and...
CVE-2026-54907: Initialization of a Resource with an Insecure Default
Caddy Proxy Manager is a web interface for managing Caddy Server reverse proxies and certificates. Prior to 1.5.1, Caddy Proxy Manager enables email and password self-registration by default at /api/auth/sign-up/email, allowing an unauthenticated remote actor to create an active account with the...
CVE-2026-90106: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address...
CVE-2026-69399: Unintended Proxy or Intermediary
Azure Arc Elevation of Privilege Vulnerability...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109811)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109811 advisory. FreeRDP before 3.29.0 affected versions = 3.28.0 does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109805)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109805 advisory. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. Tenable has extracted the preceding description block directly from the Unity Linux securi...
CVE-2026-85719: Cleartext Transmission of Sensitive Information
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...
CVE-2026-85720: Cleartext Transmission of Sensitive Information
The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a request using an HTTP proxy to reach an HTTPS origin can expose preemptive origin credentials because NettyRequestFactory and...
Rclone 1.64.x < 1.75.1 FTP Auth-Proxy Cross-Session Backend Confusion (CVE-2026-88017)
The version of Rclone installed on the remote host is 1.64.x prior to 1.75.1. It is, therefore, affected by a cross-session backend confusion vulnerability: - The FTP auth-proxy driver stores one obscured password per username in a server-wide map and does not bind the credential or the returned...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109824)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109824 advisory. FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOWICONORDER when AsyncUpdate is enabled e.g. xfreerdp...
SUSE CVE-2023-54397
Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers accepting non-standard characters. Attackers can send crafted HTTP requests with these characters to bypass proxy validation and smuggle requests when deployed behind certain...
CVE-2026-92804 Nango through 0.70.4 Server-Side Request Forgery via Configuration
Nango through 0.70.4 fails to validate caller-supplied connection configuration values interpolated into provider token and proxy URL templates. Authenticated attackers can supply malicious configuration values to direct server requests at internal addresses or cloud metadata endpoints, potential...
CVE-2026-59823
LiteLLM is a proxy server (AI Gateway) for calling LLM APIs. Prior to version 1.83.9 , an authenticated caller holding a valid virtual key could place api_base inside the user_config request body, bypassing the is_request_body_safe check that blocks top-level api_base and base_url but did not ins...
CVE-2026-59823 LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy
LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.83.9, an authenticated LiteLLM Proxy caller with a valid virtual key can place apibase inside the userconfig request body to bypass isrequestbodysafe, which blocks top-level apibase and baseurl but...
CVE-2026-59944
A flaw was found in Composer, a dependency manager for PHP. A malicious or compromised dependency can bypass existing security measures designed to prevent unauthorized binary path execution. This can occur when Composer processes untrusted cached data or older build artifacts, allowing it to...
GO-2026-6460 rclone: RC per-server auth-proxy bypass in github.com/rclone/rclone
rclone: RC per-server auth-proxy bypass in github.com/rclone/rclone...
GO-2026-6462 rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass in github.com/rclone/rclone
rclone serve s3: --auth-proxy without --auth-key authenticates nobody - full SigV4 signature bypass in github.com/rclone/rclone...