EUVD-2026-94015

Backstage: Improper input validation in cloud storage URL readers...

GHSA-7649-WM97-W3J3 Backstage: Improper input validation in cloud storage URL readers

Impact An attacker with write access to a cloud storage bucket used by Backstage could craft object names that could collide with protected files in the output directory. In certain deployment configurations, this could lead to content injection. Patches Patched in @backstage/backend-defaults...

GO-2026-6624 SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check in github.com/siyuan-note/siyuan/kernel

SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check in github.com/siyuan-note/siyuan/kernel...

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

The U.S. Federal Bureau of Investigation FBI and Secret Service USSS on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer SSL virtual private network VPN gateways. "The campaign...

CVE-2026-106494

A flaw was found in the @backstage/backend-defaults package of Backstage. Improper input validation in cloud storage URL readers allows an attacker with write access to an associated cloud storage bucket to create specially crafted object names. Under certain deployment configurations, these name...

CVE-2026-106493

A flaw was found in Backstage. Cloud storage catalog providers do not sufficiently validate object paths. An attacker with permissions to create or rename objects in a configured cloud storage source, such as Amazon Web Services AWS S3 or Azure Blob Storage, can cause catalog descriptors to be re...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Abacre Restaurant Point of Sale POS의 메모리 내 평문 저장. Abacre Restaurant Point of Sale POS 15.0.0.1656까지의 모든 버전은 메모리 내 민감 정보 평문 저장 취약점에 영향을 받습니다. 애플리케이션은 활성화 시도 중에 유효한 장치 바인딩 라이선스 키를 프로세스 메모리에 남깁니다. 이러한 키는 디버거에 프로세스를 연결하고 프로세스/메모리 덤프를 분석하여 획득할 수 있으며, 이후 구매 없이 동일한 머신에서...

CVE-2026-106393

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allo...

Linux Distros Unpatched Vulnerability : CVE-2026-106393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code...

PT-2026-107709

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...

CVE-2023-5359

CVE-2023-5359 - W3 Total Cache 平文保存の脆弱性 説明 CVE-2023-5359 は、WordPress プラグイン W3 Total Cache のバージョン ≤ 2.7.5 に影響する平文保存の脆弱性です。この脆弱性により、リモートの攻撃者は、公開されている暗号化されていない PHP ファイルに保存された機密の認証情報にアクセスできます。 深刻度 CVSS スコア : 7.5 高 ベクター : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N タイプ : 機密情報の露出 技術的な脆弱性 根本原因 W3 Total...

Cleartext-Storage-vulnerability-CVE-2023-5359-in-W3-Total-Cache

W3 Total Cache における平文保存の脆弱性 CVE-2023-5359 CVE-2023-5359 に脆弱なバージョン ≤2.7.5 を対象とします import requests import re from urllib.parse import urljoin Common paths where credentials are stored CREDENTIALPATHS = "/wp-content/plugins/w3-total-cache/ExtensionCloudFlarePlugin.php",...

CVE-2026-106494

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validation in cloud storage url readers. An attacker with write access to a cloud storage bucket used by Backstage could craft object names that...

CVE-2026-106493

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106490

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs static content requests. When using the Azure Blob Storage provider, an authenticated Backstage user may be able to re...

CVE-2026-106489

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106494 Backstage: Improper input validation in cloud storage URL readers

Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validation in cloud storage url readers. An attacker with write access to a cloud storage bucket used by Backstage could craft object names that...

CVE-2026-106493

The Backstage developer portal framework is vulnerable to a path validation issue in its cloud storage catalog providers prior to version 1.54.6 . Specifically, the framework failed to sufficiently validate object paths, allowing a principal with permissions to create or rename objects in Azure B...

CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

CVE-2026-106493 Backstage: Cloud storage catalog locations may cross configured storage boundaries

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...