CVE-2026-27736

BigBlueButton Open Redirect CVE-2026-27736 affects the 3.x branch before version 3.0.20. The vulnerability arises because the errorRedirectUrl string is not validated and is used directly in respondWithRedirect, enabling an open redirect. The issue is fixed in BigBlueButton 3.0.20. No exploitatio...

The vulnerability of the Apache Tomcat application server, related to unvalidated error states, allows attackers to bypass authentication processes and cause service failures.

The vulnerability of the Apache Tomcat application server is related to an unvalidated error condition. Exploiting this vulnerability allows a malicious actor to bypass authentication processes and cause service failures...

The vulnerability of the PPP over Ethernet (PPPoE) network gateway function in Cisco IOS XR operating systems allows a hacker to trigger a service failure.

The vulnerability of the PPP over Ethernet PPPoE network gateway function in Cisco IOS XR operating systems is related to an unvalidated error state. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specific PPPoE packets...

The vulnerability of the Samba networking communication package, related to an unvalidated error state, allows a intruder to trigger a service failure.

The vulnerability of the Samba networking communication package is related to an unvalidated error condition. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability in the implementation of the `waitid` function in Linux kernel allows a malicious actor to exploit their privileges.

The vulnerability of the waitid function implementation in Linux operating systems is related to an unvalidated error state. Exploiting this vulnerability can allow attackers to gain increased privileges...