15824 matches found
CVE-2026-88421
APSL puput versions v1.2.1 through v2.2.0 are vulnerable to an incorrect access control flaw in the BlogPage.get_entries() component. This vulnerability allows unauthenticated attackers to view restricted blog entries through multiple access points, including the blog index, tag, category, author...
EUVD-2026-87081
Incorrect access control in the BlogPage.getentries component of APSL puput v1.2.1 through v2.2.0 allows unauthenticated attackers to view restricted blog entries via the blog index, the tag, category, author and date archives, the sidebar widgets, or the RSS feed...
CVE-2026-94611
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...
CVE-2026-94611
The open-source identity provider authentik is vulnerable to unauthorized credential exposure in versions prior to 2026.2.7 , 2026.5.7 , and 2026.8.2 . The authentik API serializers incorrectly return stored credentials when a user possesses view permission on an affected configuration, even if t...
EUVD-2026-86277
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...
CVE-2026-94611 authentik: Stored credentials are readable with view permission alone
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...
CVE-2026-94611 authentik: Stored credentials are readable with view permission alone
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...
CVE-2026-94611
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...
CVE-2026-94611 authentik: Stored credentials are readable with view permission alone
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...
Server-Side Request Forgery (SSRF)
Spring Framework is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper handling of XsltView when an application uses an / mapping for view rendering without explicitly specifying the view name, which allows an attacker to trigger unintended server-side requests a...
CVE-2026-94611: Exposure of Sensitive Information to an Unauthorized Actor
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...
PT-2026-98034
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.7 authentik versions prior to 2026.5.7 authentik versions prior to 2026.8.2 Description API serializers return stored credentials when an account possesses view permission on specific configurations, regardle...
DRUPAL-CONTRIB-2026-173
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficiently restrict access to certain submission view modes. Under certain conditions, a user who can view a submission could access a more...
CVE-2026-93528
The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key...
EUVD-2026-85064
The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key...
EUVD-2026-85036
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not verify that the target user of a REST route matches the authenticated caller before reading and modifying that user's saved favorites, allowing any authenticated user with...
Webform - Less critical - Access bypass - SA-CONTRIB-2026-173
The Webform module allows site builders to create forms, collect submissions, and configure access to forms and submission data. The module did not sufficiently restrict access to certain submission view modes. Under certain conditions, a user who can view a submission could access a more...
CVE-2026-17618
The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability where improper authorization allows a remote unauthenticated attacker to view and modify sensitive information. This flaw can also result in a denial of service . While specific affected versions are n...
EUVD-2026-84038
Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards...
CVE-2026-95683 MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL
In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the lookup condition, without applying the report's own distribution/ACL constraints. Because MISP reports carry an...