CVE-2026-84718

A flaw exists in the Ansible Automation Platform automation-controller where the Controller trusts the client-supplied X-Forwarded-For header as the request's client IP without verifying it originated from a trusted proxy. By selecting the leftmost (attacker-controlled) header value, an attacker ...

EUVD-2026-85611

A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's install bundle, the controller signs an X.509 certificate with the receptor mesh certificate authority in which the Common Name, DNS...

CVE-2026-84716

The automation-controller instance in Red Hat Ansible Automation Platform (versions 2.5, 2.6, and 2.7) contains a flaw in the install-bundle endpoint. When a System Administrator downloads an execution/hop node's install bundle, the controller signs an X.509 certificate using the receptor mesh ce...

CVE-2026-84474

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret hostconfigkey is exposed to users holding only the read-level viewjobtemplate permission -- both in the job template API representation and in the activity stream -- and the...

CVE-2026-82356

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-84718

A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the Controller trusts the client-supplied X-Forwarded-For header as the request's client IP without verifying that it originated from a trusted proxy, and selects the leftmost...

CVE-2026-84474 Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host match

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret hostconfigkey is exposed to users holding only the read-level viewjobtemplate permission -- both in the job template API representation and in the activity stream -- and the...

CVE-2026-84474 Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host match

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret hostconfigkey is exposed to users holding only the read-level viewjobtemplate permission -- both in the job template API representation and in the activity stream -- and the...

CVE-2026-84474

A flaw in Red Hat Ansible Automation Platform 's automation-controller allows for privilege escalation and remote code execution on managed hosts. The vulnerability stems from the exposure of the provisioning-callback secret (host_config_key) to users with only view_jobtemplate permissions. Furth...

EUVD-2026-85555

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret hostconfigkey is exposed to users holding only the read-level viewjobtemplate permission -- both in the job template API representation and in the activity stream -- and the...

CVE-2026-84474

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret hostconfigkey is exposed to users holding only the read-level viewjobtemplate permission -- both in the job template API representation and in the activity stream -- and the...

EUVD-2026-66388

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

CVE-2026-82356

Imprivata Enterprise Access Management (EAM) versions 26.2.6 and below lack a supported mechanism to rotate the RSA key pair used to generate the appliance's X.509 certificate . Because the key pair remains static indefinitely, a compromise of the private key—via backup exfiltration, hypervisor s...

EUVD-2026-85537

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production

Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...

CVE-2026-96651

Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get'. A remote attacker with a valid session token could read any file that the target user can access. This access includes the...

CVE-2026-96651

Plex Media Server before version 1.43.3.10861 is vulnerable to a path traversal flaw because the software fails to validate ../ sequences in the url parameter. An attacker can exploit this via the /system/agents/media/get endpoint to read any file accessible by the target user. Specifically, an a...

EUVD-2026-85366

Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via '/system/agents/media/get'. A remote attacker with a valid session token could read any file that the target user can access. This access includes the...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag 诊断工具 — CVE-2026-43284 一个社区诊断工具，用于判断 XCP-ng dom0 主机是否暴露于 CVE-2026-43284 （“Dirty Frag”），这是 Linux 内核 xfrm-ESP 子系统中的一个本地权限提升漏洞。 TL;DR — 所有当前 XCP-ng 版本（8.1、8.2、8.3）运行标准 4.19 dom0 内核的都在受影响代码范围内。截至 2026 年 5 月，官方尚未发布 XCP-ng 补丁。本工具能明确告知您的主机是否暴露，并提供安全的临时缓解措施。 背景 “Dirty Frag”...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...