CVE-2025-66390

In Microsoft Azure API Management (through 2025-10-17), enabling self-service signup (username/password Basic Authentication) in Tenant A can be abused to reuse the registration flow by changing the hostname or tenant identifier to Tenant B, allowing cross-tenant requests based on the Host header...

PT-2022-23308 · Airspan · Airspan Airvelocity 1500

Name of the Vulnerable Software and Affected Versions: Airspan AirVelocity 1500 version 15.18.00.2511 Description: The issue is related to a lack of CSRF protections in the eNodeB's web management UI. This may potentially affect other AirVelocity and AirSpeed models. Recommendations: For Airspan...