PT-2026-66852

Name of the Vulnerable Software and Affected Versions free5GC versions prior to 1.4.5 Description The AUSF Authentication Server Function fails to validate the supiOrSuci field in UE authentication requests. Null bytes x00 and other control characters are passed through JSON parsing and forwarded...

SUSE CVE-2025-27088

oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting XSS vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted...