242803 matches found
CVE-2026-55985
The web management interface in Tycon Systems TPDIN-Monitor-WEB2 stores and displays system credentials in cleartext on a certain configuration page accessible to authenticated users. Any party with access to the administrative dashboard can immediately read these credentials, which may be used t...
EUVD-2026-46307
react-server-dom: Denial of Service in Server Functions...
GHSA-GF8H-GQ53-288J OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
Summary The GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an ObjectInputFilter meant to allow only AuthenticatorImpl, but it short-circuits to ALLOWED for any object at stream depth 1. Because the Java serialization filter is consulted for every class in the graph and...
EUVD-2026-42650
open-webui terminal proxy path traversal guard bypass via 9x encoded traversal...
EUVD-2026-42639
Open WebUI: Arena task endpoints can bypass underlying model access controls...
EUVD-2026-42633
Open WebUI: WEBFETCHFILTERLIST host allow/block filter bypassable via URL path and non-label-boundary matching...
CVE-2026-59714
creationtimestamp| type| source ---|---|--- 2026-07-24 18:35:10+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-x2ff-v5v8-m75m...
CVE-2026-59222
creationtimestamp| type| source ---|---|--- 2026-07-24 18:35:03+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-gh7p-78x6-jw6m...
EUVD-2026-48733
In epa4all, prior to version 2026-05-20, an attacker who can intercept the TLS connection between epa4all and the ePA backend can complete the VAU handshake with attacker-controlled keys and obtain the session encryption keys. All inner HTTP traffic patient consent decisions, medication data,...
CVE-2026-65711
sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators to execute arbitrary commands as the web server process user by setting a malicious backup path and triggering a backup. The FileBackupService builds a tar shell command via stri...
EUVD-2026-42628
Open WebUI: Upload metadata.knowledgeid bypasses the knowledge-base write-access check read-only users can add files to KB...
EUVD-2026-42627
Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller sessionid...
EUVD-2026-42625
Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout...
EUVD-2026-42621
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config...
EUVD-2026-42617
Open WebUI: Account enumeration via observable login timing discrepancy...
K000162436: Spring Web Flow vulnerability CVE-2026-40985
Security Advisory Description Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions. Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1. CVE-2026-40985 Impact There is no impact; F5 products are not...
Updated transmission packages fix a security vulnerability
The updated packages fix a security vulnerability: Transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths. CVE-2026-38978...
CVE-2026-57106
creationtimestamp| type| source ---|---|--- 2026-07-24 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfpdryc7w2y 2026-07-24 17:01:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrftcvc72z2j 2026-07-25 06:14:27+00:00| seen|...