CVE-2026-96238

A vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network due to an origin validation error . This flaw enables an attacker to skip security measures with a CVSS 3.1 score of 6.5. No specific versions or remediation details are provided in the documents.

EUVD-2026-100207

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96234

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96234

An origin validation error in .NET allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the NCSC advisory. Exploitation details are not provided.

CVE-2026-96234

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-99750

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

A vulnerability in Active Directory Federation Services (AD FS) stems from improper certificate validation . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability has a base severity of 7.4 (High) according to the CVSS 3.1 metric provided. No specific exp...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70194

The .NET Framework is affected by a security feature bypass vulnerability (CVE-2026-70194 ) caused by improper certificate validation . This flaw allows an unauthorized attacker to bypass security features over a network. The vulnerability carries a CVSS v3.1 score of 6.5 (Medium) and is categori...

CVE-2026-88132

An origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. This vulnerability is classified as an Access to Sensitive Data issue with a CVSS v3.1 score of 5.9 (Medium) . Microsoft has released updates to address this vulnerability; users ...

CVE-2026-70213

An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...

EUVD-2026-99610

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

EUVD-2026-99597

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-69877

An origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the CVSS metric and the CVE description. Microsoft has released updates to address this issue, and users are r...

CVE-2026-83926

A security vulnerability in Windows Hello was identified involving improper certificate validation (CWE-295). This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability carries a Medium severity rating with a CVSS 3.1 score of 4.4. No specific exploit details ...

CVE-2026-105719

A vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network due to improper input validation . The impact is categorized as access to sensitive data with a CVSSv3.1 base score of 6.5. Microsoft has released updates to address this vulnerabil...

CVE-2026-110224 QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing...

CVE-2026-110224

QloApps versions through 1.7.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability within the AdminSearchConfController::processSave() function. The root cause is that the application echoes rejected alias and search values without proper escaping during validation errors. An a...