CVE-2025-43929

CVE-2025-43929 Proof-of-concept for CVE-2025-43929, a high-severity vulnerability in KiTTY allowing for local executables to be ran without user confirmation under certain circumstances Vulnerability Type CWE-346: CWE-346 Origin Validation Error Vulnerability Description openactions.py in kitty...

curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

A flaw was found in libcurl. This vulnerability allows for information disclosure when a custom Host: header is used in an initial HTTP request, and a subsequent request reuses the same connection without specifying a new Host: header. This can lead to libcurl incorrectly sending cookies intended...

CVE-2026-89326

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

SUSE CVE-2026-89326

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

DEBIAN-CVE-2026-89326

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-89326

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-102589

When independent Grafana instances share the same rendering renderertoken, an image renderer key issued by one instance is accepted by the others, so a user on one instance could act as the user with the same ID on another origin validation error. This affects instances with the renderAuthJWT...

CVE-2026-102589 Cross-instance user impersonation through image renderer JWTs

When independent Grafana instances share the same rendering renderertoken, an image renderer key issued by one instance is accepted by the others, so a user on one instance could act as the user with the same ID on another origin validation error. This affects instances with the renderAuthJWT...

CVE-2026-102589

Independent Grafana instances are vulnerable to cross-instance user impersonation due to an origin validation error . When instances share the same renderer_token, an image renderer key issued by one instance is accepted by others, allowing a user on one instance to act as a user with the same ID...

CVE-2026-102589

When independent Grafana instances share the same rendering renderertoken, an image renderer key issued by one instance is accepted by the others, so a user on one instance could act as the user with the same ID on another origin validation error. This affects instances with the renderAuthJWT...

EUVD-2026-123545

When independent Grafana instances share the same rendering renderertoken, an image renderer key issued by one instance is accepted by the others, so a user on one instance could act as the user with the same ID on another origin validation error. This affects instances with the renderAuthJWT...

CVE-2026-89326 Apache XML Graphics Batik: Check url protocol when loading document

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-89326

The Apache XML Graphics Batik library is affected by an Origin Validation Error (CWE-346) in versions through 1.19 . The root cause is that the external resource same-origin check fails to compare the URL protocol . This vulnerability could allow for improper resource loading or security bypasses...

EUVD-2026-123535

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

CVE-2026-89326

Origin Validation Error vulnerability in Apache XML Graphics Batik: the external resource same-origin check does not compare the URL protocol This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue...

Exploit for CVE-2026-121529

Fortinet2Shell — CVE-2026-121529: FortiClient local API origin...

Exploit for CVE-2026-121529

CVE-2026-121529 — FortiClient local API origin validation erro...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for November 2026.

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Vulnerability Details CVEID:CVE-2026-112085 DESCRIPTION: webpack-dev-server is a development server that provides live reloading for webpack...

Fortinet FortiClient Origin validation error in local API endpoint (FG-IR-26-194) (macOS)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-194 advisory. - A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through...

Fortinet FortiClient Origin validation error in local API endpoint (FG-IR-26-194)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-194 advisory. - A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through...