Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allowing a per-branch maintainer-edit grant to be reused for ...

CVE-2026-27775

Gitea 1.25.5 caches a branch-specific write-permission result across multiple refs in one pre-receive hook session, allo

历史摘要 · 未重新核验 · NVD

Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to bypass API access token scope checks, exposing private repository commit data to tokens...

CVE-2026-27761

Gitea versions up to and including 1.26.2 allow repository RSS and Atom feed endpoints to bypass API access token scope

历史摘要 · 未重新核验 · NVD

Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to repositories that the user can read but should not be ab...

CVE-2026-26231

Gitea versions up to and including 1.26.1 allow the Allow edits from maintainers permission path to authorize commits to

历史摘要 · 未重新核验 · NVD

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release ...

CVE-2026-46730

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 r

历史摘要 · 未重新核验 · NVD

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed...

CVE-2026-14340

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token

历史摘要 · 未重新核验 · GitHub Advisory

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain wr...

CVE-2026-14340

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token

历史摘要 · 未重新核验 · NVD

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer

CVE-2026-44935

### Impact A vulnerability in Fleet for Rancher Manager affects multi-tenancy environments where different tenants share

历史摘要 · 未重新核验 · GitHub Advisory

SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted

CVE-2026-49997

In SurrealDB, records can be connected as a graph: a `RELATE` statement creates an edge record between two node records.

历史摘要 · 未重新核验 · GitHub Advisory

SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths

A record user could learn the value of a hidden field by counting how many records match a guess. When `DEFINE FIELD ..

历史摘要 · 未重新核验 · GitHub Advisory

SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization

An anonymous caller could create new namespaces and databases on a running SurrealDB instance without holding `DEFINE NA

历史摘要 · 未重新核验 · GitHub Advisory

SurrealDB: Authenticated subscribers can read records hidden by SELECT permissions via LIVE subscriptions

A record user could read records the table's SELECT permission expression should have hidden, when that expression refer

历史摘要 · 未重新核验 · GitHub Advisory

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotation...

CVE-2026-53492

containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation impr

历史摘要 · 未重新核验 · NVD

Incorrect Authorization (CWE-863) in Elastic Defend can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under...

CVE-2026-56152

Incorrect Authorization (CWE-863) in Elastic Defend can lead to unauthorized information disclosure via Accessing Functi

历史摘要 · 未重新核验 · NVD

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree-structure endpoint. An authenticated, low-privileged use...

CVE-2026-53905

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/admin-view-hierarchy/get-acl-tree

历史摘要 · 未重新核验 · NVD

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership endpoint. An authenticated user can modify their group m...

CVE-2026-53902

MCO does not properly enforce authorization checks in the /customer/servlet/mco/webapi/profile-sections/group-membership

历史摘要 · 未重新核验 · NVD

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

CVE-2026-48808

### Description This is a residual bypass of CVE-2026-46635 / GHSA-vcc8-phrv-43wj that only affects sandboxing enabled

历史摘要 · 未重新核验 · GitHub Advisory

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

CVE-2026-48807

### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar

历史摘要 · 未重新核验 · GitHub Advisory

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

CVE-2026-48806

### Description This is a residual bypass of CVE-2026-47732 / GHSA-pr2w-4gpj-cpq4 left after the initial fix for unguar

历史摘要 · 未重新核验 · GitHub Advisory

Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook

CVE-2026-49824

### Summary The Fission Function admission webhook (`pkg/webhook/function.go`) validated that `spec.secrets[].namespace

历史摘要 · 未重新核验 · GitHub Advisory

Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook

CVE-2026-49823

### Summary A Fission Function spec carries three reference types — Secret, ConfigMap, and Package. The first two were

历史摘要 · 未重新核验 · GitHub Advisory