CVE-2026-106345

An use of released resource flaw was found in the Session component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556258544...

EUVD-2026-94055

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

CVE-2026-107229: Session Fixation

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

PT-2026-107515

Name of the Vulnerable Software and Affected Versions wger versions prior to 2.6 Description A flaw in the authentication and session lifecycle allows bearer-style API credentials to remain valid after a user logs out or changes their password. An attacker who obtains a victim's DRF authtoken or...

Linux Distros Unpatched Vulnerability : CVE-2026-92414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any...

PT-2026-107679

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.16.0 through 3.0.13 Description The ThreadSafeCookieStore component incompletely validates cookie Domain attributes. This occurs due to missing private-section and default public-suffix rules, absent A-label...

CVE-2026-107228: Improper Authentication

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the enabled-by-default cookie store replaces a Cookie header explicitly supplied through setHeader or addHeader whenever the store contribut...

CVE-2026-19572: Authentication Bypass Using an Alternate Path or Channel

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials...

CVE-2026-45161: Cross-Site Request Forgery (CSRF)

wger is a free, open-source workout and fitness manager. Prior to version 2.6, the trainerlogin view in wger accepts GET requests and executes djangologin without any CSRF protection, because Django's CsrfViewMiddleware only enforces tokens on unsafe methods POST/PUT/PATCH/DELETE. An attacker can...

PT-2026-107391

A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials...

Keycloak 26.7.3 <= 26.8.0 User Session Note Mapper Access Token Exposure (CVE-2026-105302)

The version of Keycloak installed on the remote host is 26.7.3 through 26.8.0. It is, therefore, affected by a vulnerability where a User Session Note protocol mapper can expose upstream identity provider access tokens to managed clients, allowing a client to obtain a token it was not intended to...

PT-2026-107678

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.1.0 through 3.0.13 Description The enabled-by-default cookie store in the AsyncHttpClient library replaces a Cookie header explicitly supplied through setHeader or addHeader whenever the store contributes any cookie...

PT-2026-107509

Name of the Vulnerable Software and Affected Versions wger versions prior to 2.6 Description The trainer login view in wger is susceptible to Cross-Site Request Forgery CSRF, a condition where a malicious site tricks a user's browser into performing an unwanted action on a different website. This...

PT-2026-107579

Name of the Vulnerable Software and Affected Versions Apache Jackrabbit versions 2.23.0 through 2.23.5 Apache Jackrabbit versions 2.22.0 through 2.22.4 Apache Jackrabbit versions 2.20.0 through 2.20.17 Description The WebDAV server allows session fixation and session reuse across users. The syste...

CVE-2026-103416: Out-of-bounds Write

Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of the session control block, which holds pointers. A malicious or compromised server can make a TL...

CVE-2026-92414: Session Fixation

: Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/TransactionId/SubscriptionId/If-header field token match with no credential check. This issue affects Apache Jackrabbit: from 2.23...

CVE-2026-101023

Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the refreshtoken grant type, but not that the token was a refresh token. An unexpired access token for the same OAuth2 application and grant could be exchanged for a new access token and refresh token. Whoeve...

CVE-2026-96594 Gitea repository media API stored XSS

The Gitea API endpoint GET /api/v1/repos/owner/repo/media/filepath wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the content type and disposition headers Gitea uses for user content. An HTML file committed to a repository was therefore rendered by...

CVE-2026-101023

A flaw in Gitea allows an attacker or user to maintain persistent access to the application. The OAuth2 token endpoint validates the signature and grant of a token submitted with the refresh_token grant type but fails to verify that the submitted token is specifically a refresh token . Consequent...

EUVD-2026-94061

Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the refreshtoken grant type, but not that the token was a refresh token. An unexpired access token for the same OAuth2 application and grant could be exchanged for a new access token and refresh token. Whoeve...