CVE-2026-70055

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-70024

Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...

CVE-2026-70014

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

CVE-2026-70005

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69992

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69982

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69919

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-110240

Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding interna...

CVE-2026-110254

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-108131

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-103576

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-100466

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-110254 Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-110254 Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-110254

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, and Teredo IPv6 transition ranges. Authenticated attackers can embed loopback, cloud metadata, or private IPv4 addresses...

CVE-2026-110254

Finsys Dockhand versions prior to 1.0.45 are vulnerable to a Server-Side Request Forgery (SSRF) flaw located in the ipCategory() function within src/lib/server/url-safety.ts. The root cause is a failure to validate NAT64 , 6to4 , and Teredo IPv6 transition ranges. Authenticated attackers can expl...

EUVD-2026-100450

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-108131

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. The issue has a base severity of High (CVSS 3.1 score of 7.5), with an attack vector of Network and Low attack complexity. While the severity is high, it primarily i...

EUVD-2026-100431

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

CVE-2026-97830

A double free vulnerability in Windows Internet Information Services allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-415 and has a CVSS 3.1 base score of 7.5 (High). No specific exploit information or direct remediation steps...