CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API

Privilege Escalation via Access Token Scope Escalation in API...

EUVD-2026-58143

Privilege Escalation via Access Token Scope Escalation in API...

CVE-2026-56654 Privilege Escalation via Access Token Scope Escalation in API

Privilege Escalation via Access Token Scope Escalation in API...

CVE-2026-56654

The Gitea Project is affected by CVE-2026-56654 , a Critical severity vulnerability allowing for Privilege Escalation via Access Token Scope Escalation within the API. An attacker can manipulate the scope of an access token to gain unauthorized access to sensitive functions or data, potentially l...

CVE-2026-55982

The Gitea application is vulnerable to an issue where the OIDC userinfo Endpoint returns identity claims without enforcing API token scopes . This vulnerability allows for the exposure of sensitive information to unauthorized actors. Remediation is available in Gitea v1.27.0 , which includes fixe...

CVE-2026-55982 OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes

OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes...

CVE-2026-55982 OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes

OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes...

CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

EUVD-2026-58136

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-50105

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-50105

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-50105

The Git repository management system Gitea contains a vulnerability in its RSS and Atom feed handlers due to a lack of access control. This flaw allows an attacker to bypass API-token scope and public-only confinement , potentially leading to information disclosure or an increase in privileges . ...

CVE-2026-50105 RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

CVE-2026-68453

A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insufficient validation of user-controlled length fields within the Common Cryptographic Architecture CCA token structures. An attacker could manipulate these fields to cause a buffer over-read or...

CVE-2026-73506

creationtimestamp| type| source ---|---|--- 2026-08-13 16:35:05+00:00| published-proof-of-concept| https://github.com/JanDeDobbeleer/oh-my-posh/security/advisories/GHSA-fwjx-9p69-h25h...

Frappe Connected App OAuth flow: insufficient permission checks and external redirect

Frappe Connected App OAuth Flow: Insufficient Permission Checks and External Redirect Vulnerability Overview Connected App in Frappe Framework is an OAuth2 client integration mechanism; its whitelisted method is used to generate an authorization URL for a user and write the authorization state in...

PhotoPrism global preview/download tokens bypass resource visibility boundaries

PhotoPrism global preview/download tokens bypass resource visibility boundaries Vulnerability Overview PhotoPrism loads thumbnails and file downloads via simple URLs that cannot carry authentication headers preview/download tokens in query parameters or paths, validated by an in-memory token look...

WeKan Trello import source.url stored XSS can steal Meteor.loginToken (SourceBleed)

WeKan Trello Import source.url Stored XSS Can Steal Session Tokens SourceBleed Vulnerability Overview When WeKan imports a Trello board, it persists the import source information including the source board's URL and renders it as a clickable link in the board's activity sidebar, without validatin...

CVE-2026-68453

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in ccacipher2protkey Add validation of both the actual key buffer size and token length fields in all the ccachecksectoken functions. Additionally check in ccagencipherkey for possible underflow...