CVE-2026-21391 Improper Claim Validation in PingAM OIDC Provider

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

EUVD-2026-77425

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

CVE-2026-21391

CVE-2026-21391 affects PingAM 's OIDC provider, where an improper validation of ID Token claims allows a well-crafted request to set or override arbitrary or protected claims. In certain configurations, this enables an attacker to bypass authentication controls via spoofing , leading to privilege...

CVE-2026-87802

Apache Syncope is vulnerable to an improper verification of cryptographic signature when the SRA is configured for OAuth 2.0 without a JWKS set URI assigned. This flaw allows an attacker to forge arbitrary JWTs to impersonate any user identity and permissions, potentially gaining full access to s...

WordPress Zonify plugin < 1.0.5 - Unauthenticated Account Login Token Disclosure vulnerability

Unauthenticated Account Login Token Disclosure vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Zonify Amazon Product Importer for WooCommerce versions 1.0.5...

Security update for perl-Mojolicious

This update for perl-Mojolicious fixes the following issue: CVE-2026-15747: exposing a stable representation of the session CSRF token to a BREACH compression oracle bsc1271431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

SUSE-SU-2026:4151-1 Security update for perl-Mojolicious

This update for perl-Mojolicious fixes the following issue: - CVE-2026-15747: exposing a stable representation of the session CSRF token to a BREACH compression oracle bsc1271431...

Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following...

Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files

A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...

PT-2026-91759

Name of the Vulnerable Software and Affected Versions DocsGPT versions prior to 0.20.1 Description The software posts OAuth connector session tokens to a wildcard target origin in the 'callback-status' endpoint without validating the sender origin. An attacker can act as the window.opener during...

CVE-2026-88819: Authentication Bypass by Spoofing

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID...

CVE-2026-50157: Use of GET Request Method With Sensitive Query Strings

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

CVE-2026-90943: Improper Neutralization of Input During Web Page Generation

parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in comment body rendering that allows authenticated panel users to inject malicious scripts. Attackers can store XSS payloads in comment bodies that execute in the browsers of other users viewing those...

PT-2026-91163

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or...

CVE-2026-54447: Incorrect Permission Assignment for Critical Resource

garminconnect is a Python 3 API wrapper for Garmin Connect that retrieves statistics and manages activities. Prior to 0.3.5, garminconnect/client.py Client.dump creates the OAuth token directory and garmintokens.json without explicit owner-only modes, so a permissive umask such as 022 can leave t...

PT-2026-91175

Inadequate access control in Hiperdino’s REST v1.0 API. The public endpoint ‘customer/check’ could allow an authenticated attacker to enter a telephone number or an email address. When the value entered belongs to a registered customer, the service returns the associated information email address...

PT-2026-91253

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID...

PT-2026-91281

Name of the Vulnerable Software and Affected Versions DotVVM versions prior to 4.2.11 DotVVM versions prior to 4.3.15 DotVVM versions prior to 5.0.0-preview09-final Description Applications using configured file upload storage allow unauthenticated users to submit files directly to the...

CVE-2026-90945: Use of Hard-coded Cryptographic Key

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes...

PT-2026-91186

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope. An administrator with adequate entitlements can get access via REST to the list of existing Access Tokens, including their signed JWT body. These values can be then used to perform further REST requests,...