Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation
CVE-2026-47229
## Summary `modules/sso/clients.php` validates an `adm_csrf_token` on every state-changing branch except `enable`. The
2026-05-30 归档
今日共收录 1277 条安全情报，包含 517 个 CVE，386 篇安全通告，以及 105 篇研究论文。
← 返回归档列表Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords
CVE-2026-47228
## Summary `modules/registration.php` mode `send_login` regenerates a random password for `user_uuid_assigned`, stores
A stored cross-site scripting (XSS) vulnerability has been identified in the web management...
CVE-2026-34127
A stored cross-site scripting (XSS) vulnerability has been identified in the web management interface of TP-Link's TL-SG
There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard...
CVE-2026-9051
There is an authentication bypass vulnerability in the NI SystemLink Enterprise Dashboard application that may allow an
Authelia Missing Username Canonicalization in Basic Auth (LDAP)
CVE-2026-47203
### Impact **CVSSv4 Baseline Score:** Moderate 6.3 **CVSSv4 Weighted Score:** Low 2.9 The full CVSSv4 Vector for this
authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user
CVE-2026-47201
### Summary authentik's SAML Source ACS endpoint is vulnerable to XML Signature Wrapping when validating upstream SAM
Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs
CVE-2026-47260
## Summary Koel validates the podcast feed URL via the `SafeUrl` rule (DNS resolution + public IP check), but the indiv
russh server userauth state is not reset when authentication principal changes
CVE-2026-46705
### Summary The `russh` server authentication path keeps internal userauth state across `SSH_MSG_USERAUTH_REQUEST` messa
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password...
CVE-2026-5386
The affected KMW CCTV Security Cameras are vulnerable to a critical unauthenticated password reset. This flaw allows an
The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT...
CVE-2026-5768
The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing p
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device...
CVE-2026-7786
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintex
Firefox browsers
Firefox browsers
Sign in to Cloud
Sign in to Cloud
Sign Up for Free Cloud Tier
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 16.7.15 and iPadOS 16.7.15