CVE-2026-14898

The OpenAI Codex desktop app for macOS contains a vulnerability where it renders remote images from Markdown in model responses. An attacker can use indirect prompt injection via untrusted sources or connected-tool results to trick the model into constructing a remote image URL containing sensiti...

PT-2026-58098

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.6.17 Roundcube Webmail versions 1.7.x prior to 1.7.2 Description The password plugin allows username spoofing through the manipulation of session data, which may enable an attacker to take over user...

PT-2026-55452

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 4.19.3 SimpleSAMLphp versions prior to 4.20.2 SimpleSAMLphp versions prior to 5.0.6 SimpleSAMLphp versions prior to 6.2.1 Description In the HTTPArtifact::receive flow, the library may treat an unsigned embedded...

CVE-2026-13602

We found a chain of combining multiple weaknesses in the product that could allow an attacker to become any user in the backend and access any data: The payment integration plugins Stripe included in the core system, pretix-mollie, pretix-oppwa, pretix-bitpay, pretix-payone, pretix-secuconnect,...

GO-2026-5302 ShellHub has cross-tenant IDOR in `GET /api/sessions/:uid` that discloses SSH session data in github.com/shellhub-io/shellhub

ShellHub has cross-tenant IDOR in GET /api/sessions/:uid that discloses SSH session data in github.com/shellhub-io/shellhub...

WissKI - Critical - Access bypass - SA-CONTRIB-2026-059

The module adds support for the mirador viewer in WissKI and enables annotations on images via the mirador viewer. It does not sufficiently check the submitted parameters via a route and writes these to the session object without further checks, which can lead to Access Bypass. This vulnerability...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /sessionservice endpoint when authenticated users register URLs for session event notifications without sufficient restriction. An attacker can cause the server to make outbound requests to...

OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

OpenAM Open Identity Platform is an open-source Identity and Access Management IAM platform derived from ForgeRock OpenAM, providing SSO, OAuth2, SAML, and OpenID Connect capabilities. It is widely deployed in enterprise environments as a central authentication gateway. The /sessionservice...

EUVD-2025-210289

Flowise before 3.0.8 contains a cross-site scripting XSS vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload e.g., in a chat box, or by having a custom agent function return an X...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity in the WebsocketToken handler and the WebSocket upgrader process. An attacker can access sensitive session state and resource information by obtaining a CSRF token from an unauthenticated...

PT-2026-50980

Name of the Vulnerable Software and Affected Versions Tilt versions 0.20.8 through 0.37.3 Description The HUD HTTP server lacks authentication for state-changing and sensitive-read endpoints. When the HUD is bound to a non-loopback address, a network attacker can trigger pre-defined Tiltfile...

CVE-2026-48294: Improper Neutralization of Input During Web Page Generation

Adobe Acrobat PDF Extension Chrome versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in tha...

CVE-2026-48294

Adobe Acrobat PDF Extension Chrome versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in tha...

PT-2026-50077

Name of the Vulnerable Software and Affected Versions Adobe Acrobat PDF Extension Chrome versions prior to 26.5.2.3 Description A UXSS-class cross-origin data disclosure issue exists where an attacker can gain access to the victim's session data. UXSS Universal Cross-Site Scripting is a type of...

org.activiti.cloud.messages:activiti-cloud-starter-messages-mongodb (7.1.0.m6), org.springframework.boot:spring-boot-starter-data-mongodb (2.1.12.release) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (2.1.15.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.1.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...

org.springframework.data:spring-data-mongodb-cross-store (1.9.4.release), org.springframework.session:spring-session-data-mongo (>=1.3.0.release, <=1.3.3.release) potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.9.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

org.springframework.data:spring-data-mongodb-cross-store (1.9.4.release), org.springframework.session:spring-session-data-mongo (>=1.3.0.release, <=1.3.3.release) potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.4.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - org.springframework.data:spring-data-mongodb-cross-store...

com.efindi:smo-filter (0.0.1-release), org.springframework.data:spring-data-mongodb-cross-store (2.0.2.release) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.efindi:smo-filter 0.0.1-release -...

com.github.softbasic:micro-core (>=0.0.1, <=0.0.6), org.springframework.boot:spring-boot-starter-data-mongodb (2.0.7.release) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (2.0.12.release)

org.springframework.data:spring-data-mongodb MAVEN version 2.0.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.softbasic:micro-core =0.0.1, =2.0.4.release,...

com.alibaba.smart.framework:smart-engine-extension-storage-mongodb (>=2.0.4, <=2.6.4), org.springframework.boot:spring-boot-starter-data-mongodb (1.4.7.release) +3 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.9.11.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.9.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: -...