GHSA-48M6-CH88-55MJ Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

Summary An improper mass assignment JSON injection vulnerability in the account registration endpoint of Flowise Cloud allows unauthenticated attackers to inject server-managed fields and nested objects during account creation. This enables client-controlled manipulation of ownership metadata,...

The vulnerability of the server for automating work processes in n8n-MCP, related to insufficient validation of requests on the server side, allows attackers to influence the integrity and accessibility of protected information.

The vulnerability of the n8n-MCP server for automating processes is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access systems lies in the insufficient validation of requests at the server-side. This allows attackers to gain unauthorized access to protected information.

The vulnerability of IBM Verify Identity Access and IBM Security Verify Access lies in insufficient validation of requests at the server-side. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the insufficient validation of requests on the server side, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from insufficient validation of requests on the server side. This allows attackers to execute SSRF attacks.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the OpenEMR system for medical documentation, related to insufficient validation of requests on the server side, allows a hacker to perform a SRF attack.

The vulnerability of the OpenEMR system for medical documentation is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to execute a SRF attack remotely...

CVE-2026-35594 Vikunja Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's link share authentication GetLinkShareFromClaims in pkg/models/linksharing.go constructs authorization objects entirely from JWT claims without any server-side database validation. When a project owner delet...

CVE-2026-35594 Vikunja Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's link share authentication GetLinkShareFromClaims in pkg/models/linksharing.go constructs authorization objects entirely from JWT claims without any server-side database validation. When a project owner delet...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration due to the lack of server-side validation in the GetLinkShareFromClaims process. An attacker can retain unauthorized access to resources by using previously issued JWT tokens even after a link share is...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration due to the lack of server-side validation in the GetLinkShareFromClaims process. An attacker can retain unauthorized access to resources by using previously issued JWT tokens even after a link share is...

Vikunja: Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade

Title Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade Description Vikunja's link share authentication constructs authorization objects entirely from JWT claims without any server-side database validation. When a project owner deletes a link share or...

PT-2026-31945

Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.3.0 Description Vikunja's link share authentication constructs authorization objects entirely from JWT claims without server-side database validation. When a project owner deletes a link share or downgrades its...

The vulnerability of the analytics and automation platform for managing cloud data centers of Cisco Nexus Dashboard lies in insufficient validation of requests on the server side. This allows a malicious actor to carry out an SSRF attack.

The vulnerability of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud-based data centers, lies in insufficient testing of requests on the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Emissary has Stored XSS via Navigation Template Link Injection

Summary Mustache navigation templates interpolated configuration-controlled link values directly into href attributes without URL scheme validation. An administrator who could modify the navItems configuration could inject javascript: URIs, enabling stored cross-site scripting XSS against other...

CVE-2026-33406

Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, configuration values from the /api/config endpoint are placed directly into HTML value="" attributes without escaping in settings-advanced.js,...

The vulnerability of the Azure Cloud Shell, a browser-based interactive environment, arises from insufficient validation of requests on the server side. This allows attackers to escalate their privileges.

The vulnerability of the Azure Cloud Shell, a browser-based interactive environment, is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of Microsoft Purview’s data management tool, related to insufficient validation of server-side requests, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Purview data management tool is related to insufficient testing of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of Microsoft Bing’s search system, related to insufficient validation of queries on the server side, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of Microsoft Bing’s search system is related to insufficient validation of queries on the server side. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of protected information...

PT-2026-30225

Name of the Vulnerable Software and Affected Versions prompts.chat versions prior to commit 0f8d4c3 Description prompts.chat before commit 0f8d4c3 has a path traversal flaw in how it handles skill files. Attackers can create malicious ZIP archives with filenames containing path traversal sequence...

EUVD-2026-17895

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific penalty rates for overdue payments. While the frontend interface prevents users from entering...