CVE-2024-30085

CVE-2024-30085 CVE-2024-30085 Alex Birnberg Affected Versions: Windows 11 23H2 Originally from here Slighly modified to compile with no configuration on visual studio...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (>=14.5.2, <=15.2.2), org.openidentityplatform.openig:openig-doc (>=5.0.9, <=5.4.0) +1 more potentially affected by CVE-2026-44793 via org.openidentityplatform.openam:openam-federation-library (>=14.5.2, <=15.2.2)

org.openidentityplatform.openam:openam-federation-library MAVEN version =14.5.2, =14.5.2, =5.0.9, =5.0.9, =5.4.0 Source cves: CVE-2026-44793 Source advisory: MEND:CVE-2026-44793...

CVE-2026-71326

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

CVE-2026-71326 Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

CVE-2026-71326

Traefik is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/basicauth.go deduplicates concurrent password checks with a singleflight key built from the delimiter-free concatenation of password and...

MAL-2026-12503 Malicious code in numpyp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971ce16c4710dfddc439c30ec2fc190001171f79fcd66f718ad358a43ecdf876 Package name numpyp is a one-character edit of numpy top-1 PyPI package and PKG-INFO advertises it as 'the simplest module for quick work with files'...

sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

CVE-2026-56817 Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, any caller that can deliver bytes to a Netty channel pipeline containing XmlDecoder can send XML with a DOCTYPE declaration...

CVE-2026-56817

Netty CVE-2026-56817 affects Netty versions 4.2.0.Final–4.2.15.Final and 4.1.0.Final–4.1.135.Final, where any caller delivering bytes to a channel pipeline containing XmlDecoder can send XML with a DOCTYPE to an AsyncXMLInputFactory started without security configuration, leaving DTD/entity handl...

CVE-2026-56817 Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled

Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, any caller that can deliver bytes to a Netty channel pipeline containing XmlDecoder can send XML with a DOCTYPE declaration...

CVE-2026-58208

NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a WebSocket listener could route requests for the MQTT-over-WebSocket path into MQTT handling even when MQTT was not configured, allowing an unauthenticated client with...

PT-2026-56582

Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.14.3 NATS Server versions prior to 2.12.12 Description A WebSocket listener may route requests for the MQTT-over-WebSocket path to MQTT handling processes even if MQTT is not configured. This allows an...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (14.7.3) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (14.7.3)

org.openidentityplatform.openam:openam-federation-library MAVEN version 14.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (14.7.2) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (14.7.2)

org.openidentityplatform.openam:openam-federation-library MAVEN version 14.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (14.6.1) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (14.6.1)

org.openidentityplatform.openam:openam-federation-library MAVEN version 14.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (14.5.3) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (14.5.3)

org.openidentityplatform.openam:openam-federation-library MAVEN version 14.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (15.1.6) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (15.1.6)

org.openidentityplatform.openam:openam-federation-library MAVEN version 15.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (15.0.3) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (15.0.3)

org.openidentityplatform.openam:openam-federation-library MAVEN version 15.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (15.0.4) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (15.0.4)

org.openidentityplatform.openam:openam-federation-library MAVEN version 15.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...

org.openidentityplatform.openam:openam-fedlet-unconfigured-war (14.8.1) potentially affected by CVE-2026-45052 via org.openidentityplatform.openam:openam-federation-library (14.8.1)

org.openidentityplatform.openam:openam-federation-library MAVEN version 14.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.openam:openam-federation-library and may be impacted: -...