92682 matches found
CVE-2026-72772 n8n before 2.32.1 Authentication Bypass via Token Exchange
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...
EUVD-2026-56098
n8n before 2.32.1 and before 2.31.5 is vulnerable to account takeover via the Token Exchange Embed Login feature. When a validly-signed incoming token was matched to a local account by its email claim, the service did not verify that the email claim was verified, nor that the trusted key's...
CVE-2026-72772
n8n
CVE-2026-72745
CVE-2026-72745 is a duplicate of CVE-2026-73242 for FreeRDP. Technical details in connected docs describe an out-of-bounds vulnerability in kerberos_DecryptMessage() within winpr/libwinpr/sspi/Kerberos/kerberos.c, where a peer-supplied 16-bit EC (extra count) in a GSS Wrap token can move decrypt ...
CVE-2026-72745
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73242...
CVE-2026-72745 FreeRDP before 3.30.0 Out-of-Bounds Read via Kerberos GSS Wrap-token EC
FreeRDP before 3.30.0 contains an out-of-bounds vulnerability in kerberosDecryptMessage winpr/libwinpr/sspi/Kerberos/kerberos.c. The 16-bit EC extra count field of a peer-supplied GSS Wrap token RFC 4121 is used directly in pointer arithmetic to locate the encrypted regions without being...
CVE-2026-72540
This CVE was rejected by Red Hat CNA-LR as not valid. However, EUVD and PT Security describe an insecure direct object reference (IDOR) in PhotoPrism through commit bb0b933. The AlbumCover handler does not verify that the requesting user is authorized to access the specified album before serving ...
CVE-2026-72540
Red Hat CNA-LR concluded that this CVE is not valid...
CVE-2026-72540
...
CVE-2026-72537 Authentik Security authentik - Privilege Escalation
A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user inges...
CVE-2026-72537
Authentik Authentik (through version 2026.5.6) contains a privilege escalation vulnerability where an attacker with a source-scoped SCIM provisioning token can take over existing local user accounts, including the superuser. The SCIM user ingest function accepts pre-existing local accounts by use...
Exploit for CVE-2026-62737
CVE-2026-62737: from crash to lab-assisted SYSTEM A follow-up...
CVE-2026-15567
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...
EUVD-2026-55989
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...
CVE-2026-15567 Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...
CVE-2026-15567
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...
CVE-2026-15567
The CVE-2026-15567 entry concerns WildFly. A remote, unauthenticated attacker can trigger an OutOfMemoryError because CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and allocates a byte array of that size. This indicates a memory allocation vulnera...
CVE-2026-15567
A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size...