4985 matches found
PT-2026-91465
Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description An open redirect issue allows a remote attacker to conduct phishing attacks. By persuading a victim to visit a specially crafted website, an attacker can spoof the displaye...
PT-2026-91464
IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001...
PT-2026-91462
Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description Insufficient validation of incoming request resources could allow a remote attacker to cause a denial of service, which is a condition where the system becomes unavailable ...
PT-2026-91463
Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description IBM Verify Identity Access lacks origin validation, which may enable a remote attacker to perform operations on behalf of a victim and potentially launch subsequent attacks...
CVE-2026-13272: Missing Origin Validation in WebSockets
IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the victim and potentially launch further attacks against the systems...
CVE-2026-13276: Improper Neutralization of Input During Web Page Generation
IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001 and IBM Verify Identity Access Container 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access Container 10.0.0 through 10.0.9.2 Interim Fix 001...
CVE-2026-13277: URL Redirection to Untrusted Site
IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web si...
CVE-2026-89265
MoguBlog through 6.2 contains an authorization bypass in the admin endpoint POST /pictureSort/getPictureSortByUid , which omits the @AuthorityVerify annotation required to enforce role-based permissions. Authenticated back-office users without image-category permissions can supply a category uid ...
PT-2026-90418
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd component where the nfsd fh verify and nfsd fh verify err tracepoints incorrectly size the server sockaddr slot using xpt remotelen while filling it from xpt...
CVE-2026-78622
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-78622 Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...
EUVD-2026-74184
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...
CVE-2026-78622 Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...
CVE-2026-78622
Okta Verify for Windows uninstaller is vulnerable to improper link resolution . The uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive ...
PT-2026-88338
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-52486: Improper Verification of Cryptographic Signature
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
EUVD-2026-74266
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-78622: Improper Link Resolution Before File Access
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...