Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authenticatio...

CVE-2026-53459

Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and p

历史摘要 · 未重新核验 · NVD

Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured...

CVE-2026-77866

Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reac

历史摘要 · 未重新核验 · NVD

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in...

CVE-2026-86120

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to en

历史摘要 · 未重新核验 · GitHub Advisory

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level access control when permission lookups t...

CVE-2026-86120

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to en

历史摘要 · 未重新核验 · NVD

APITable through 1.13.0-beta.1 Fail-Open Authorization in the Fusion API Node Permission Guard

CVE-2026-86120

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to en

历史摘要 · 未重新核验 · OSV.dev

(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-mi...

CVE-2026-85649

(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the A

历史摘要 · 未重新核验 · NVD

CVE-2026-85649

CVE-2026-85649

(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the A

历史摘要 · 未重新核验 · OSV.dev

Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a js_access handler performs asynchronous request body processing and an exception is thr...

CVE-2026-18329

Description NGINX JavaScript (njs) and QuickJS (qjs) engines have a vulnerability when a js_access handler performs asy

历史摘要 · 未重新核验 · NVD

Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash...

CVE-2026-82744

Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controll

历史摘要 · 未重新核验 · NVD

Ash.Reactor change step fails open, skipping a change when its where guard raises

CVE-2026-82744

Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an Ash.Reactor change when the guard controll

历史摘要 · 未重新核验 · OSV.dev

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass...

CVE-2026-82018

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the G

历史摘要 · 未重新核验 · GitHub Advisory

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers t...

CVE-2026-82018

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the G

历史摘要 · 未重新核验 · NVD

AIIR verification and policy gates could report success without enforcing the control (fail-open)

### Summary Several of AIIR's verification and policy paths could return a success/"verified" result without actually en

历史摘要 · 未重新核验 · GitHub Advisory

### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing attackers to bypass the challenge via a specially crafted ...

CVE-2026-46482

### Impact The registration component does not validate the text-based _Security Question_ CAPTCHA correctly, allowing a

历史摘要 · 未重新核验 · NVD

NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate access by checking only for the existence of the auth ob...

CVE-2026-73421

NextAuth.js provides authentication for Next.js. From next-auth 5.0.0-beta.0 until 5.0.0-beta.32, applications that gate

历史摘要 · 未重新核验 · NVD

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during h...

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent host

历史摘要 · 未重新核验 · NVD

rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure

CVE-2026-70452

rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent host

历史摘要 · 未重新核验 · OSV.dev

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69306

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature

历史摘要 · 未重新核验 · NVD

Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces id...

CVE-2026-68746

Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to

历史摘要 · 未重新核验 · NVD

Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

### Impact `next-auth` (Auth.js) v5 applications that gate access by checking only for the **existence** of the `auth`

历史摘要 · 未重新核验 · GitHub Advisory