OpenSearch vulnerable to improper authorization for Rollover Requests

### Description A flaw was identified in the OpenSearch Security plugin's handling of index rollover requests. When a r

历史摘要 · 未重新核验 · GitHub Advisory

OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths

### Description A flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed

历史摘要 · 未重新核验 · GitHub Advisory

Axonflow fixed bugs by implementing multi-tenant isolation and access-control hardening

## Summary Eight independently-filed bug fixes in the v7.1.3 → v7.5.0 release window collectively close a set of multi-

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries. Attackers with DM-pai...

CVE-2026-44110

OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization th

历史摘要 · 未重新核验 · NVD

ArcadeDB vulnerable to cross-database authorization bypass and unsecured newly-created databases

CVE-2026-44221

### Impact Authenticated users and API tokens scoped to a specific database could read, write, and mutate schema on any

历史摘要 · 未重新核验 · GitHub Advisory

Grav Vulnerable to Sensitive Information Disclosure via Accounts Service Bypass

CVE-2026-42610

## Summary Information disclosure exists in `Grav CMS v1.8.0-beta.29`. Despite previous security patches (notably in `v1

历史摘要 · 未重新核验 · GitHub Advisory

Grav API Privilege Escalation to Super Admin

CVE-2026-42843

### Summary An insecure direct object reference and logic flaw in the Grav API plugin (`UsersController::update`) allow

历史摘要 · 未重新核验 · GitHub Advisory

Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsi...

CVE-2026-39852

CVE-2026-39852 是 Quarkus 框架中的一个路径规范化不一致漏洞，影响 3.20.6.1、3.27.3.1、3.33.1.1、3.35.1.1、3.34.7 和 3.35.2 之前的版本。Quarkus 的 Securit

历史摘要 · 未重新核验 · NVD

lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete...

CVE-2026-39402

CVE-2026-39402 是 Linux 容器运行时 LXC 中 setuid 辅助工具 lxc-user-nic 的一个逻辑缺陷漏洞。当 lxc-user-nic 执行删除操作时，其内部函数 find_line() 在对 NIC 数据

历史摘要 · 未重新核验 · NVD

Nginx-UI: Authenticated settings disclosure exposes node.secret and enables trusted-node authentication abuse, backup exfiltration, and restore-based nginx-ui state rollback

CVE-2026-42220

## Summary An authenticated user can call `GET /api/settings` and retrieve sensitive configuration values, including `no

历史摘要 · 未重新核验 · GitHub Advisory

CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone...

CVE-2026-33489

CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL s

历史摘要 · 未重新核验 · NVD

RustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeover

## Summary `ListServiceAccount` (`GET /rustfs/admin/v3/list-service-accounts?user=`) authorizes cross-user requests aga

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybox applet execution that allows attackers to obscure which...

CVE-2026-43530

OpenClaw versions 2026.2.23 before 2026.4.12 contain a weakened exec approval binding vulnerability in busybox and toybo

历史摘要 · 未重新核验 · NVD

OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media attachment read helper that allows unauthorized local file di...

CVE-2026-42438

OpenClaw versions 2026.4.9 before 2026.4.10 contain a sender policy bypass vulnerability in the outbound host-media atta

历史摘要 · 未重新核验 · NVD

OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override exec routing by specifying host=node. Attackers can bypa...

CVE-2026-42434

OpenClaw versions 2026.4.5 before 2026.4.10 contain a sandbox escape vulnerability allowing sandboxed agents to override

历史摘要 · 未重新核验 · NVD

pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted `proxy.*` config (incomplete fix for CVE-2026-33509 /...

CVE-2026-42313

### Summary The `set_config_value()` API method (`@permission(Perms.SETTINGS)`) in `src/pyload/core/api/__init__.py` ga

历史摘要 · 未重新核验 · GitHub Advisory

pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted `ssl_verify` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)

CVE-2026-42312

### Summary The `set_config_value()` API method (`@permission(Perms.SETTINGS)`) in `src/pyload/core/api/__init__.py` ga

历史摘要 · 未重新核验 · GitHub Advisory

Pelican Web UI Affected by a Privilege Escalation Attack

CVE-2026-42571

## Background On April 2nd, 2026, a Claude coding agent alerted Pelican PI Brian Bockelman to a privilege escalation vu

历史摘要 · 未重新核验 · GitHub Advisory

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an authenticated user can call GET /api/settings and retrieve sensitive configuration values, ...

CVE-2026-42220

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, an authenticated user can call GET /a

历史摘要 · 未重新核验 · NVD

Distribution's tag deletion bypasses `storage.delete.enabled` configuration

CVE-2026-41888

### Summary Tag deletion via the `DELETE /v2//manifests/` endpoint bypasses the `storage.delete.enabled: false` configu

历史摘要 · 未重新核验 · GitHub Advisory