EUVD-2026-97139

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

CVE-2026-108785 macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

CVE-2026-108785 macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

CVE-2026-108785

A flaw in macrozheng mall versions up to 1.0.3 allows for session expiration due to a vulnerability in the JwtAuthenticationTokenFilter component. Specifically, the JwtTokenUtil.refreshHeadToken function (located in the /admin/refreshToken file) fails to properly handle the token argument. This i...

PT-2026-110610

Name of the Vulnerable Software and Affected Versions AnyDesk versions prior to 8.0.3 Description A heap-based buffer overflow occurs in the session protocol stream packet handler for mode 5 because a payload length value is not validated. This allows unauthenticated remote attackers to execute...

CVE-2026-109557: Improper Neutralization of Input During Web Page Generation

EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. Attackers can set malicious names via MCP createnotebook, renamenotebook or creatememo tools, running script on drag wi...

PT-2026-110707

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.11.1 through 0.11.3 Description Authenticated users can execute scripts by uploading crafted DOCX attachments. The issue resides in DocxPreview.svelte and occurs when attackers embed an OOXML altChunk HTML part or a...

PT-2026-110650

Name of the Vulnerable Software and Affected Versions MarkLogic Server versions 11.0.0 through 11.3.6 MarkLogic Server versions 12.0.0 through 12.0.x Description Insufficient isolation of user-supplied code executed through certain REST and XDBC evaluation paths may expose HTTP request, response,...

CVE-2026-107226: Session Fixation

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the default ThreadSafeCookieStore does not retain whether a Set-Cookie response used a secure transport. It accepts Secure cookies received...

CVE-2026-108785: Insufficient Session Expiration

A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotel...

CVE-2026-78357: Insufficient Session Expiration

Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an existing JWT may remain valid until its regular expiration time, which can be approximately 16 hours. An attacker who has...

CVE-2026-109390: Improper Handling of Length Parameter Inconsistency

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root without the victim approving desktop control. In the stream packet handler for mode 5 in the session protocol, a payload...

CVE-2026-109300: Improper Neutralization of Input During Web Page Generation

Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages...

PT-2026-110950

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.1 Description Certain endpoints accept a normal authenticated session without verifying the current password because they are registered outside the RequireSecureSession mechanism. An attacker possessing a stolen...

CVE-2026-109559: Incorrect Authorization

EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attackers can embed a link using userinfo syntax after the dev-server prefix, for example in a note-template preview, to...

CVE-2026-9191: Origin Validation Error

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state. An attacker able to execute code through an affected path...

PT-2026-110919

Name of the Vulnerable Software and Affected Versions Flower versions prior to 2.2.0 Description Cross-site request forgery occurs because Tornado xsrf cookies are disabled and the OAuth session cookie lacks the SameSite attribute. This allows attackers to trick authenticated users into visiting...

CVE-2026-109426: Cleartext Storage of Sensitive Information

Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's authenticated Telegram session string, which is protected only by a keyless, reversible encoding transform rather than...

PT-2026-110973

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.1 Description The GetCasdoorUri function uses the configured Casdoor application name as a constant OAuth state value, and the CasdoorCallback function fails to compare the submitted state with a value bound to t...

CVE-2026-109292: Exposure of Sensitive Information to an Unauthorized Actor

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...