2026

A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBA

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese mar

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that c

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusive

A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSe

The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token

The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH

The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `

The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role glob

ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson rout

ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission r

BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to f

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to

cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read

MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-pri

CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefron

SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated worksp

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthentica

zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to igno

crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other me

Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create tim

ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restrict

metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows au

Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthen

Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.ph

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encry

ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private

APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node

pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated

OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep sh

Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authentica

JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote

rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwri

RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraf

Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to ac

TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make

ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attack

JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler th

OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id]

Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authentic

BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows

Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthent

Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that a

snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicio

Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exh

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form prot