CVE-2026-79659

Ech0 before 4.7.3 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the fetchPeerConnectInfo function. The root cause is the use of unvalidated HTTP requests instead of safe request methods with URL validation. An authenticated attacker can supply arbitrary URLs to reach intern...

CVE-2026-55976 Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is...

CVE-2026-55976

Apache Hive versions before 4.2.1 are vulnerable to a Server-Side Request Forgery (SSRF) in the Avro SerDe schema resolution. Specifically, improper input validation of the avro.schema.url table property allows an authenticated remote attacker with CREATE TABLE privileges to force the Hive server...

Apicurio/apicurio-registry: apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation

A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document containing attacker-controlled import...

SQL Injection

ureport is vulnerable to SQL Injection. The vulnerability is due to insufficient validation of SQL statements in the /ureport/datasource/previewData component, which allows an attacker to inject crafted SQL queries and access sensitive database information...

CVE-2026-74708

A flaw was found in the Linux kernel's xsk AFXDP socket component. This vulnerability arises from improper validation of launch-time metadata size, where the metadata can extend beyond its allocated structure. This could lead to inconsistent decisions if user space concurrently changes flags,...

CVE-2026-77140

The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visitor who knows the UID of a visible employee record can send a direct POST request to the update action and overwrite...

CVE-2026-77130

The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

URI Validation Bypass

http4k-security-digest is vulnerable to URI Validation Bypass. The vulnerability is due to the client not validating the uri parameter in the Digest authentication response against the actual request URL, which allows an attacker to replay a captured authentication response against other URLs...

CVE-2026-77130 Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

CVE-2026-77134 Broken Access Control in extension "femanager" (femanager)

The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval...

EUVD-2026-65336

The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visitor who knows the UID of a visible employee record can send a direct POST request to the update action and overwrite...

CVE-2026-77140

TYPO3 extension Telephone Directory (telephonedirectory) suffers from a Broken Access Control flaw. The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, but not in the action that persists the change. As a result, an unauthenticated visi...

CVE-2026-77140 Broken Access Control in extension "Telephone Directory" (telephonedirectory)

The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visitor who knows the UID of a visible employee record can send a direct POST request to the update action and overwrite...

CVE-2026-77140 Broken Access Control in extension "Telephone Directory" (telephonedirectory)

The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visitor who knows the UID of a visible employee record can send a direct POST request to the update action and overwrite...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.35 security and extras update

Red Hat OpenShift Container Platform release 4.20.35 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

Improper Input Validation

Keycloak is vulnerable to Improper Input Validation. The vulnerability is due to the HTTP parameter pollution check ignoring the fragment portion of wildcard redirect URIs, allowing an attacker to inject duplicate security parameters that may cause improperly configured clients to trust...

Improper Hostname Validation

org.keycloak, keycloak-services is vulnerable to improper hostname validation. The vulnerability is due to improper validation of wildcard domain suffixes, which allows an attacker who controls the reverse DNS of their connection to bypass host-based restrictions and perform unauthorized client...

CVE-2026-16601

CM Map Locations for WordPress (all versions ≤ 2.1.8 ) is vulnerable to limited arbitrary file upload via the cmloc_route_image_upload AJAX action. The uploadMedia function performs incomplete extension filtering without MIME-type checks or upload capability verification before calling move_uploa...

Authentication Bypass

Keycloak is vulnerable to an authentication bypass. The vulnerability is due to missing brute-force protection validation in the CIBA token redemption handler, which allows an attacker with valid client credentials to obtain access and refresh tokens for a user whose account was locked after the...