Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in...
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
#advisory
共收录 23717 条相关情报。
← 返回所有主题Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file...
CVE-2026-82460
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoint
Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password,...
CVE-2026-82467
Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform()...
CVE-2026-82464
pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-p
pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without...
CVE-2026-82462
pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token vali
pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in...
CVE-2026-82465
pac4j-saml before 6.5.6 does not require signature validation of SAML LogoutRequest messages in SAML2LogoutValidator.val
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route...
CVE-2026-82466
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without...
CVE-2026-82472
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication,
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route...
CVE-2026-82469
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT acces
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp...
CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in...
CVE-2026-82463
pac4j-core before 6.5.6 contains an authentication bypass vulnerability in CheckProfileTypeAuthorizer that reverses the
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in...
CVE-2026-82468
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content
pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry...
CVE-2026-82461
pac4j-oidc before 6.5.6 fails to verify access token signatures, issuers, audiences, or expiry when extracting Keycloak
Memos through 0.30.0 SSRF via Omitted CGNAT Address Range
CVE-2026-82476
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata f
iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
CVE-2026-82475
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode.
KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
CVE-2026-82473
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verificati
Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf
CVE-2026-82472
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication,
Rodauth before 2.47.0 TOTP Code Reuse via Drift Window
CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track
Rodauth before 2.47.0 Authentication Bypass via jwt_refresh
CVE-2026-82469
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT acces