EUVD-2025-30316

Rejected reason: Not used...

EUVD-2025-28688

Rejected reason: Not used...

EUVD-2025-28687

Rejected reason: Not used...

EUVD-2025-28684

Rejected reason: Not used...

EUVD-2025-18984

Rejected reason: Not used...

EUVD-2022-54499

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CLSA-2026-1792099789 TuxCare security update for org.springframework.security (2 CVEs)

TuxCare rebuilt 21 org.springframework.security packages to address 2 CVEs. Fixed in 5.7.11-tuxcare.10...

CVE-2026-70194

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...

CLSA-2026-1792099763 TuxCare security update for org.springframework.security (3 CVEs)

TuxCare rebuilt 21 org.springframework.security packages to address 3 CVEs. Fixed in 5.5.8-tuxcare.2...

CVE-2026-108433

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-108433

A security feature bypass vulnerability exists in Microsoft Office Word due to the reliance on untrusted inputs in a security decision (CWE-807 ). This flaw allows an unauthorized attacker to bypass a security feature locally. The vulnerability has a HIGH base severity score of 7.8 , impacting co...

EUVD-2026-102445

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

GHSA-23VG-4CJM-66Q5 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

Summary openapi3filter.ValidationHandler.Middleware validates requests with kin-openapi's legacy router, which selects an OpenAPI operation from the decoded URL.Path. The method is documented as implementing gorilla/mux.MiddlewareFunc, but a downstream gorilla/mux router configured with...

kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

Summary openapi3filter.ValidationHandler.Middleware validates requests with kin-openapi's legacy router, which selects an OpenAPI operation from the decoded URL.Path. The method is documented as implementing gorilla/mux.MiddlewareFunc, but a downstream gorilla/mux router configured with...

Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools

Summary An OTP-enabled authenticated user who cannot use the HTTP configuration mutation endpoints without a valid secure session can still mutate Nginx configuration through /mcp and /mcpmessage using only ordinary authentication. Details The HTTP configuration mutation surface is explicitly...

GHSA-VC32-4GWF-77XP Nginx UI: OTP secure-session step-up can be bypassed via MCP configuration tools

Summary An OTP-enabled authenticated user who cannot use the HTTP configuration mutation endpoints without a valid secure session can still mutate Nginx configuration through /mcp and /mcpmessage using only ordinary authentication. Details The HTTP configuration mutation surface is explicitly...

Vulnerabilities

Misc Vulnerabilities found during the tests...

DNS-resolve-checker

DNS-resolver Usage bash pdnscheck.sh follow the steps...

CVE-2026-111235

An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no...

CVE-2026-109897

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...