New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.12.10, a vulnerability exists in the Stripe webhook h...

CVE-2026-41432

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to versio

历史摘要 · 未重新核验 · NVD

free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions

CVE-2026-44330

### Summary free5GC's NEF mounts the `nnef-pfdmanagement` route group without inbound OAuth2/bearer-token authorization.

历史摘要 · 未重新核验 · GitHub Advisory

Snipe-IT has Privilege Escalation via API Permissions Assignment

CVE-2026-44832

### Impact An authenticated user with only `users.edit` permission can escalate their own privileges to `admin` by sendi

历史摘要 · 未重新核验 · GitHub Advisory

Data Space Portal is an open-source Software as a Service (SaaS) solution designed to streamline Dataspace management. From version 2.1.1 to before version 7.3.2, there is insuf...

CVE-2026-42160

Data Space Portal is an open-source Software as a Service (SaaS) solution designed to streamline Dataspace management. F

历史摘要 · 未重新核验 · NVD

Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels

CVE-2026-44561

# Deactivated Channel Members Retain Full Access to Group/DM Channels ## Affected Component Channel membership authori

历史摘要 · 未重新核验 · GitHub Advisory

Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO

CVE-2026-44564

# Read-Only Users Can Modify Collaborative Documents via Socket.IO ## Affected Component Socket.IO collaborative docum

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants

CVE-2026-44558

# Channel Access Grants Bypass filter_allowed_access_grants ## Affected Component Channel creation and update endpoint

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access

CVE-2026-44553

# Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access ## Affected Component Socket

历史摘要 · 未重新核验 · GitHub Advisory

The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environ...

CVE-2025-66170

The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenti

历史摘要 · 未重新核验 · NVD

OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple...

CVE-2026-40213

OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This un

历史摘要 · 未重新核验 · GitHub Advisory

OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Key...

CVE-2026-40213

OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This un

历史摘要 · 未重新核验 · NVD

Webauthn has a User Verification Downgrade via Default-Open ClientOverridePolicy

## Summary In version 5.3.0 of the Symfony bundle, `Webauthn\Bundle\Policy\ClientOverridePolicy` defaulted to allowing

历史摘要 · 未重新核验 · GitHub Advisory

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERM_EDIT_USERS permission (intended for general ...

CVE-2026-41903

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user hold

历史摘要 · 未重新核验 · NVD

Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the webhook notification feature reuses an administrator-configured local-tar...

CVE-2026-41689

Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the webhook notifica

历史摘要 · 未重新核验 · NVD

Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin...

CVE-2026-41660

Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authen

历史摘要 · 未重新核验 · NVD

Admidio is an open-source user management solution. Prior to version 5.0.9, the contacts_data.php endpoint uses a weaker permission check (isAdministratorUsers(), requiring only...

CVE-2026-41657

Admidio is an open-source user management solution. Prior to version 5.0.9, the contacts_data.php endpoint uses a weaker

历史摘要 · 未重新核验 · NVD

vm2 has a NodeVM builtin allowlist bypass via `module` builtin's `Module._load` that allows sandbox escape

CVE-2026-43999

## Summary NodeVM's `builtin` allowlist can be bypassed when the `module` builtin is allowed (including via the `'*'` wi

历史摘要 · 未重新核验 · GitHub Advisory

etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests

CVE-2026-44283

### Impact _What kind of vulnerability is it? Who is impacted?_ A vulnerability in etcd allows read access via PrevKv,

历史摘要 · 未重新核验 · GitHub Advisory

Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

CVE-2026-41050

### Impact Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant

历史摘要 · 未重新核验 · GitHub Advisory

OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation

### Description A flaw was identified in the OpenSearch Security plugin's document-level security (DLS) implementation.

历史摘要 · 未重新核验 · GitHub Advisory