CVE-2026-86770

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication. Due to the default utf8mb4_unicode_ci database collation, an attacker who registers IdP accounts with accent or case variants of a victim's username can bypass username matching and achieve account takeo...

PT-2026-89039

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description Insufficient validation of username case sensitivity during SAML authentication allows attackers to authenticate as other users. By registering Identity Provider IdP accounts using case or accent...

PT-2026-67596

Preface Poweradmin maps OIDC identities into local users through oidc user links.oidc subject plus provider id. In the MySQL schema, the OIDC link table explicitly uses utf8mb4 unicode ci, which is case-insensitive and accent-insensitive. OIDC sub is a stable external subject identifier and shoul...

SUSE-SU-2026:22844-1 Security update for mariadb-connector-c

This update for mariadb-connector-c fixes the following issue: - CVE-2026-44172: mysqlrealescapestring incorrectly handled big5 bsc1266438. Changes for mariadb-connector-c: - Update to release 3.4.9. - Update to release 3.4.8: Fix compilation with GCC 15 CONC-762: always set isnull and length in...

GHSA-QW9G-7549-7WG5 Directus has MySQL accent insensitive email matching

Password reset vulnerable to accent confusion The password reset mechanism of the Directus backend is implemented in a way where combined with specific, need to double check if i can work around configuration in MySQL or MariaDB. As such, it allows attackers to receive a password reset email of a...

Wordpress is continuously explosion two stored XSS, the impact of the latest version-bug warning-the black bar safety net

! /Article/UploadPic/2015-4/201542811437550.jpg The official Wordpress in 4 on 2 1, released new version 4. 1. 2, wherein the mentioned fixes a serious memory typexssvulnerabilities. Soon someone shows vulnerability details. Thisxssstill appear in the wordpress comments, but the problem is caused...

WordPress aeration stored XSS vulnerability, the impact of the 4. 2 and the following version-bug warning-the black bar safety net

The official WordPress in 4 on 2 1, released new version 4. 1. 2, wherein the mentioned fixes a serious memory typeXSSvulnerabilities. Soon someone shows vulnerability details. While the security research team Klikki Oy found in that new version XSSvulnerability a ThisXSSvulnerabilities appear in...