1440884 matches found
CVE-2026-68525
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...
CVE-2026-68525 Apache Tomcat: Redirect after FORM auth may bypass method specific constraints
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...
Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.6 security update
Red Hat multicluster engine for Kubernetes v2.10 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...
CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...
CVE-2026-66422
This is an Improper Authorization vulnerability in Apache Tomcat where security-role-ref definitions were incorrectly treated as role aliases within the Realm , enabling a bypass of declarative role constraints beyond the intended Request.isUserInRole() mechanism. Affected releases span 11.0.0-M1...
CVE-2026-66422
Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 throu...
Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.11.6 security update
Red Hat multicluster engine for Kubernetes v2.11 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.17.2 security update
Red Hat multicluster engine for Kubernetes v2.17 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
CVE-2026-65182
Apache Tomcat is vulnerable to a security constraint bypass (CVE-2026-65182) caused by improper access control in constraint processing: if a constraint for a longer path is declared before a more restrictive constraint for a shorter sub-path, the more restrictive rule is effectively bypassed. Th...
CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
DEBIAN-CVE-2026-79141
Incorrect authorization in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79178
Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79108
UI misrepresentation in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-78979
Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-45018
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:07+00:00| published-proof-of-concept| https://github.com/Chainlit/chainlit/security/advisories/GHSA-w3fx-mc44-mf6j 2026-08-25 22:08:11+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwtfdjmag2e 2026-08-26...
CVE-2026-45019
creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:05+00:00| published-proof-of-concept| https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j 2026-08-25 22:31:31+00:00| seen| https://gist.github.com/alon710/cd9e29ae1307bd41a5c652b5662f31b2 2026-08-31...
MINI-R326-GMH3-39JQ
Bulletin has no description...
