9router /v1 APIs has unauthenticated access via reverse proxy locality collapse
CVE-2026-56675
## Summary 9router treats local loopback requests as trusted and allows access to `/v1/*` without an API key. In a docu
#severity:high
共收录 5373 条相关情报。
← 返回所有主题ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search...
CVE-2026-96272
ClipBucket v5 before 5.5.3-#182 contains a blind SQL injection vulnerability in the photo search endpoint where the quer
Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL...
CVE-2026-96271
Photoview through 2.4.0 contains an authorization bypass vulnerability in the shareAlbum GraphQL mutation that allows au
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection...
CVE-2026-94367
OpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 contains an OS command injection vulnerability in recbackup
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18131
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary JavaScri
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18123
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial of service
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18152
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to forge validly-signed messa
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18134
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated...
CVE-2026-18095
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbi
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18176
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to...
CVE-2026-17647
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18154
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to...
CVE-2026-18066
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to obtain sensitive informatio
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18172
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive informati
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18074
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actio
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to...
CVE-2026-18137
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to execute arbitrary ESQL com
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-16672
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-16468
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated...
CVE-2026-16469
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-17102
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands du