PT-2026-60546

Name of the Vulnerable Software and Affected Versions Frogman versions prior to 1.6.2 Description Frogman provides headless PBX control through MCP and HTTP API. The software stores API tokens generated by the CreateApiToken.php function as raw strings in the oc api tokens table. The...

PT-2026-40969

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.82.0 Description A flaw in the Windows MDM enrollment flow allows authentication tokens from any Azure AD tenant to be accepted. The software validates JWT JSON Web Token signatures using Microsoft's multi-tenant JWKS...

GO-2025-3460 Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT in github.com/distribution/distribution

Distribution's token authentication allows attacker to inject an untrusted signing key in a JWT in github.com/distribution/distribution...