785 matches found
CVE-2026-72841
The CVE-2026-72841 entry affects the OpenWrt luci-app-openvpn component. An insecure validation of the instance_name2 parameter during file upload lets authenticated users perform path traversal and write arbitrary files outside the intended directory. Attackers could place SSH keys in system dir...
CVE-2026-72841
luci-app-openvpn fails to properly validate the instancename2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SS...
CVE-2026-73664
FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appends it to /home/asterisk/.ssh/authorizedkeys for the asterisk system user without reliably enforcing backup-only...
CVE-2026-73664 FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module
FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appends it to /home/asterisk/.ssh/authorizedkeys for the asterisk system user without reliably enforcing backup-only...
CVE-2026-73664 FreePBX: Authenticated Arbitrary SSH Key Injection via Backup Module
FreePBX is an open source IP PBX. From 17.0.5.34 until 17.0.11, the publicKeySave AJAX endpoint in Backup.class.php accepts an authenticated administrator's SSH public key and appends it to /home/asterisk/.ssh/authorizedkeys for the asterisk system user without reliably enforcing backup-only...
CVE-2026-73664
The CVE-2026-73664 issue affects FreePBX (Open Source IP PBX) and concerns the publicKeySave AJAX endpoint in Backup.class.php, vulnerable from 17.0.5.34 through 17.0.11. It accepts an authenticated administrator’s SSH public key and appends it to /home/asterisk/.ssh/authorized_keys for the aster...
CVE-2026-56657
A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remote attacker could potentially exploit this by submitting a specially crafted SSH key, leading to the unavailability of the Gitea service. Mitigation Mitigation for this issue is either not availabl...
CVE-2026-56657
Gitea SSH Key Parser Denial of Service...
CVE-2026-56657 Gitea SSH Key Parser Denial of Service
Gitea SSH Key Parser Denial of Service...
EUVD-2026-58144
Gitea SSH Key Parser Denial of Service...
CVE-2026-56657 Gitea SSH Key Parser Denial of Service
Gitea SSH Key Parser Denial of Service...
CVE-2026-56657
The Git repository management system Gitea contains a vulnerability in the parseKeyString() function within the models/asymkey/ssh_key_parse.go file. Due to access control deficiencies, a remote attacker could submit a specially crafted SSH key to trigger a denial of service , potentially leading...
PT-2026-71904
Name of the Vulnerable Software and Affected Versions luci-app-openvpn affected versions not specified Description Authenticated users can perform path traversal and write arbitrary files outside the intended directory because the software fails to properly validate the instance name2 parameter...
CVE-2026-71965 CyberPanel 2.4.3 Authenticated RCE via Remote Backup Feature
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers can exploit the unverified SSH public k...
CVE-2026-71965
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server address. Attackers can exploit the unverified SSH public k...
CVE-2026-72734
Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a caller-controlled serverId and calls haveActiveServices, findServerById, removeDeploymentsByServerId, and deleteServer...
EUVD-2026-55680
Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a caller-controlled serverId and calls haveActiveServices, findServerById, removeDeploymentsByServerId, and deleteServer...
CVE-2026-72734 Dokploy: Cross-organization authorization bypass in server.remove allows deletion of another organization's server registration
Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a caller-controlled serverId and calls haveActiveServices, findServerById, removeDeploymentsByServerId, and deleteServer...
PT-2026-69879
Name of the Vulnerable Software and Affected Versions Dokploy versions 0.28.7 through 0.29.12 Description The server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a caller-controlled serverId and executes the functions haveActiveServices, findServerById,...
