29187 matches found
CVE-2026-73247 Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http uri argument to URI.create and the server-side HTTP client without restricting private, loopback, or...
CVE-2026-73247 Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata
Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http uri argument to URI.create and the server-side HTTP client without restricting private, loopback, or...
CVE-2026-73247
Kestra prior to 2.0.0 has a SSRF-like issue in HttpFunction.java: the user-controlled http() URI is passed to URI.create() and used by the server-side HTTP client without restricting private, loopback, or link-local destinations. This allows an unauthenticated attacker to import and execute a flo...
CVE-2026-71474
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...
CVE-2026-71474
A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-lived credential. This information disclosure could...
CVE-2026-70348
Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...
CVE-2026-62893
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-62818
Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...
CVE-2026-62692
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61367
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61365
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61364
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61357
Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61356
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-28757
Protection mechanism failure for some IntelR Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may...
CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability
...
CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability
...
CVE-2026-61357
CVE-2026-61357 is described as a use-after-free in Application Information Services that allows an authorized attacker to locally elevate privileges. The available data indicate a local attack vector with low privilege required and no user interaction, resulting in high impact to confidentiality,...
