Anchor CMS through 0.12.7 Privilege Escalation via Missing Authorization on Admin User-Management Endpoints
CVE-2026-88959
Anchor CMS through 0.12.7 fails to enforce role-based access control in admin user-management endpoints, allowing any au
#advisory
共收录 23661 条相关情报。
← 返回所有主题rclone: http backend forwards custom/auth headers to a different host on redirect
CVE-2026-88013
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.49.
Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded
CVE-2026-88878 · CVE-2026-88012
Traefik is an open source HTTP reverse proxy and load balancer. From 2.8.2 until 2.11.56 and 3.7.12, HTTP/3 entrypoints
Traefik: ForwardAuth identity spoofing via dot-form header alias
CVE-2026-88879 · CVE-2026-88011
Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-
knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint
CVE-2026-88939 · CVE-2026-88940
knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attac
knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption
CVE-2026-88940 · CVE-2026-88939
knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only ag
knowns through 0.33.0 Path Traversal via code.find MCP tool
CVE-2026-88938
knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agen
knowns through 0.33.0 Path Traversal via Template Engine
CVE-2026-88937
knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allo
knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header
CVE-2026-88899
knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode pro
Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging
CVE-2026-88009
Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless
Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
CVE-2026-88008
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards
Traefik HTTP/3 Backend NTLM Connection Reuse
CVE-2026-88007
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypo
AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Authorization on Bulk Publish Endpoint
CVE-2026-88898
AppFlowy-Cloud versions 0.7.2 through 0.9.64 fail to authorize callers against the workspace in the bulk publish endpoin
Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String
CVE-2026-88897
Flextype CMS through 1.0.0-alpha.3 accepts API authentication credentials through URL query string parameters in REST AP
Open WebUI: Users denied by the OAuth role policy can still sign in via token exchange
CVE-2026-88006
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebU
Open WebUI: Users denied by the OAuth domain allowlist or role policy can still sign in via token exchange
CVE-2026-88005
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI
Type confusion in Zephyr HL78xx GNSS NMEA driver causes wild-pointer write from GNSS input
CVE-2026-15461
The Sierra Wireless HL78xx modem GNSS driver (drivers/modem/hl78xx/, later drivers/modem/vendor_standalone/hl78xx/) embe
Traefik entrypoint header-name sanitization bypassed via request trailers
CVE-2026-88004
Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses ali
Suricata lua/tls: null dereference in TlsGetCertInfo
CVE-2026-45747
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr
Suricata http2: decompression bomb can cause denial of service in Suricata
CVE-2026-46387
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr