7307 matches found
EUVD-2026-101746
Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim'...
PT-2026-115274
Name of the Vulnerable Software and Affected Versions BMC Helix Network Management on-prem versions prior to 26.3.01 Description An authentication bypass exists when SAML single sign-on is configured. This allows unauthenticated attackers to log in as the local administrator by submitting the...
CVE-2026-101019
Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...
UBUNTU-CVE-2026-101019
Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...
python313-python3-saml-1.16.0-2.4 on GA media (moderate)
python313-python3-saml-1.16.0-2.4 on GA media Announcement ID: openSUSE-SU-2026:12034-1 Rating: moderate Cross-References: CVE-2017-11427 CVSS scores: CVE-2017-11427 SUSE : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...
CVE-2026-110863 Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers
Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim'...
CVE-2026-110863
The @better-auth/sso library (versions 1.7.0-rc.2 before 1.7.3 ) contains an authentication bypass vulnerability. The root cause is that the account lookup mechanism ignores the providerId , allowing an authenticated attacker to register a personal SSO provider using a legitimate provider's OIDC ...
CVE-2026-110863 Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers
Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a personal SSO provider. Attackers can copy a legitimate provider's OIDC issuer or SAML entity ID and assert a victim'...
CVE-2026-102899
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
CVE-2026-102899
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
CVE-2026-102899
The application monitoring platform Sentry is vulnerable to account takeover via a flaw in its SAML SSO identity-linking flow . An attacker controlling a SAML identity provider can socially engineer an authenticated user into visiting a malicious URL. If the user's browser accepts cross-site cook...
CVE-2026-102899 Sentry: Improper authentication on SAML SSO process allows user identity linking
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
CVE-2026-102899 Sentry: Improper authentication on SAML SSO process allows user identity linking
Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provider to socially engineer an authenticated user into opening a malicious URL, link the attacker's identity to the...
CVE-2026-101019
Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...
EUVD-2026-101121
Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...
CVE-2026-101019 NGINX ngx_http_js_module vulnerability
Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...
CVE-2026-101019
The NGINX JavaScript (njs) module contains a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends, the $attr$Name getter may return undefined for attributes containing internal entit...
Linux Distros Unpatched Vulnerability : CVE-2026-101019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization...
SAML IDP and SAML SP Controllers NetScaler ADC NetScaler Gateway
The vulnerability of SAML IDP and SAML SP authentication mechanisms in NetScaler ADC formerly Citrix ADC and NetScaler Gateway virtual environment access control systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to...
netscaler-saml-memory-disclosure-security-assessment
CVE-2026-8451 - Citrix NetScaler SAML Memory Overread CitrixBleed Consultant-Style Cybersecurity Report Professional vulnerability assessment report for NetScaler SAML memory disclosure risk, including technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--...