ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange
CVE-2026-56668
### Summary A vulnerability in ZITADEL’s OAuth2 Token Exchange endpoint allows an authenticated user or client to excha
#advisory
共收录 23580 条相关情报。
← 返回所有主题ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade
CVE-2026-59178
## Summary The dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier
关于腾讯云 API 停止中国大陆以外地域 TLS 1.0/1.1 支持的公告
关于腾讯云 API 停止中国大陆以外地域 TLS 1.0/1.1 支持的公告
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2...
CVE-2026-87719
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing...
CVE-2026-90467
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESM
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19...
CVE-2026-85706
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 1
QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value...
CVE-2026-89268
QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist...
CVE-2026-89267
starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fields allowlist when configured as an emp
Requests from the reverse proxy to the identity-provider service for token discovery,...
CVE-2026-90452
Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exch
When a particular authentication mode is configured, the reverse proxy forwards requests for a...
CVE-2026-90449
When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party admin
A file-upload handler redirects the authenticated client's browser to a URL taken directly from...
CVE-2026-90453
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Refe
An example environment-configuration file for a bundled inventory-management component ships with...
CVE-2026-90456
An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-know
A prior update that raised a bundled HTTP client library to a version remediating known...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later revert
The administrative password is hashed using a comparatively weak, fast algorithm for the...
CVE-2026-90457
The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one au
An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated...
CVE-2026-90460
An issue was discovered in OpenStack Keystone before 29.0.3. Tokens obtained via delegated authentication methods (EC2 c
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host...
CVE-2026-90461
OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host when Image Service is conf
An example environment-configuration file ships with a fixed, publicly-known secret value used to...
CVE-2026-90451
An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication co
A deployment mode intended to expose only read access to a bundled packet-analysis component's...
CVE-2026-90454
A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list o
stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook...
CVE-2026-89266
stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation s
A deployment mode intended to expose only read access to stored data proxies a set of application...
CVE-2026-90448
A deployment mode intended to expose only read access to stored data proxies a set of application programming interface