Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
CVE-2026-101062
Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dyn
#advisory
共收录 23312 条相关情报。
← 返回所有主题utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery...
CVE-2026-101061
utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incompl
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in...
CVE-2026-101060
python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_
utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI...
CVE-2026-101059
utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attacker
Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders,...
CVE-2026-101051
Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated use
Cloudreve before 4.16.1 fails to revalidate share access when restoring cached navigator state...
CVE-2026-101056
Cloudreve before 4.16.1 fails to revalidate share access when restoring cached navigator state from a context_hint UUID.
Cloudreve before 4.17.0 registers the administrative node test endpoints (POST /api/v4/admin/node...
CVE-2026-101048
Cloudreve before 4.17.0 registers the administrative node test endpoints (POST /api/v4/admin/node/test and POST /api/v4/
Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application...
CVE-2026-101047
Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enter
utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP...
CVE-2026-101057
utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a cal
Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask...
CVE-2026-101045
Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests gen
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET ...
CVE-2026-101046
Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities
python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool URLs declared in a...
CVE-2026-101058
python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manu
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway....
CVE-2026-88777
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects AD
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway....
CVE-2026-88776
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue...
CVE-2026-88775
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. ...
CVE-2026-88771
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: b
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix...
CVE-2026-88778
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This i
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC:...
CVE-2026-88774
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC:...
CVE-2026-88772
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in...
CVE-2026-88773
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC a