CVE-2026-97846: Improper Authentication

Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that originally requested it by binding it to their digital certificate. A flaw was discovered where the new Standard Token Exchange V2 feature does not check for this...

CVE-2026-92288: Weak Authentication

Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCredentials does not verify the client secret of a public Relying Party. checkEndPointAuthenticationCredentials skips th...

PT-2026-98319

Name of the Vulnerable Software and Affected Versions Lemonldap::NG::Portal versions 2.20.0 through 2.21.5 Lemonldap::NG::Portal versions 2.22.0 through 2.23.3 Description An issue exists in the OAuth2 token introspection process where the checkEndPointAuthenticationCredentials function fails to...

PT-2026-98856

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Internal REST service-account passwords are stored in a reversible plaintext-equivalent format. An authenticated attacker with access to these stored credentials could recover the password ...

PT-2026-98934

Name of the Vulnerable Software and Affected Versions zhistaredu StarTraining versions prior to 3.8.2 Description A remote issue exists in the JWT Token Handler component within the UserLoginService.createToken function of the application.yml file. Manipulating the user id or company id arguments...

PT-2026-98911

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.7 RabbitMQ versions 4.3.0 through 4.3.1 Description The set token auth/2 function inserts a bearer token from the Authorization header or access token cookie into OAuth bootstrap JavaScript without proper...

PT-2026-99083

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description When a Microsoft Graph request fails, the system logs the error including the authentication token used to access the mailbox. Although the system attempts to mask the token, the process is incomplete...

PT-2026-98361

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description Keycloak includes an mTLS holder-of-key binding feature designed to ensure tokens are only usable by the client that originally requested them by binding the token to a digital certificate. ...

PT-2026-98914

Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.8 RabbitMQ versions 4.3.0 through 4.3.2 Description An issue exists in the OAuth2 implementation where token expiry checks are skipped if the Identity Provider IdP emits the exp claim as a JSON float. This...

PT-2026-99021

rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...

PT-2026-98320

Name of the Vulnerable Software and Affected Versions Lemonldap::NG::Portal versions 2.23.0 through 2.23.3 Description An issue exists where public Relying Parties in PKCE or secret mode can bypass Proof Key for Code Exchange PKCE, a security extension for OAuth 2.0 that prevents authorization co...

The vulnerability of the Kibana data visualization service lies in the improper processing of token timestamps, which allows attackers to disclose protected information.

The vulnerability of the Kibana data visualization service is related to the improper processing of token timestamps. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2026-67242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, OAuth2 isintegerExp guard skips token-expiry checks for float exp...

PT-2026-98993

Kyverno before 1.16.4 automatically attaches the admission controller's ServiceAccount token to outbound HTTP requests in apiCall service mode without explicit authorization headers. Attackers can exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints,...

Exploit for CVE-2026-72001

CVE-2026-72001 — Pangolin Cross-Organization Resource Authenti...

Improper Authentication

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Improper Authentication via the check endpoint, which allows authentication based solely on a valid 6-digit TOTP token and a user-chosen user-id, withou...

Improper Authentication

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Improper Authentication via the check endpoint, which allows authentication based solely on a valid 6-digit TOTP token and a user-chosen user-id, withou...

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

Summary Decepticon wraps web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users configure their own LLM credentials to any OpenAI-compatible...

CVE-2026-77320

TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes, and places through GET /api/shared/:token even when the trip owner disables sharemap. The client hides the map, but the public JSON response still...

CVE-2026-61732

Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals. Under the BYOK Bring Your Own Key deployment model, users...