CVEs.

Matching CVEs

1. 6.3Med

   CVE-2026-6736 ↗ (opens in a new tab)

   An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce the authentication restriction, allowing account creation and session establishment without identity provider validation. The created account was limited to the default base permissions configured on the instance. Exploitation required network access to a GHES instance configured with an external authent

   GIGitHub· May 7, 2026

2. 6.5Med

   CVE-2026-33823 ↗ (opens in a new tab)

   Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.

   M3Microsoft 365· May 7, 2026

3. 6.1Med

   CVE-2026-32207 ↗ (opens in a new tab)

   Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

   MAMicrosoft Azure· May 7, 2026

4. 4.8Med

   CVE-2026-41686 ↗ (opens in a new tab)

   Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFilesystemMemoryTool in the Anthropic TypeScript SDK created memory files and directories using the Node.js default modes (0o666 for files, 0o777 for directories), leaving them world-readable on systems with a standard umask and world-writable in environments with a permissive umask such as many Docker base images. A local attacker on a shared host could read persisted agent state, and in containerized deployments could m

   ANAnthropic (Claude)· May 4, 2026

5. 5.3Med

   CVE-2026-6915 ↗ (opens in a new tab)

   An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

   MAMongoDB Atlas· Apr 29, 2026

6. 5.9Med

   CVE-2026-33467 ↗ (opens in a new tab)

   Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing closed.

   ECElastic Cloud· Apr 28, 2026

7. 6.3Med

   CVE-2026-24231 ↗ (opens in a new tab)

   NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful exploit of this vulnerability may lead to information disclosure.

   NVNVIDIA· Apr 28, 2026

8. 6.5Med

   CVE-2026-24204 ↗ (opens in a new tab)

   NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing. A successful exploit of this vulnerability may lead to information disclosure.

   NVNVIDIA· Apr 28, 2026

9. 6.5Med

   CVE-2026-41481 ↗ (opens in a new tab)

   LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.split_text_from_url() validated the initial URL using validate_safe_url() but then performed the fetch with requests.get() with redirects enabled (the default). Because redirect targets were not revalidated, a URL pointing to an attacker-controlled server could redirect to internal, localhost, or cloud metadata endpoints, bypassing SSRF protections. The response body is parsed and returned as Document objects to the calling application code. Whether this co

   L/LangChain / LangSmith· Apr 24, 2026

10. 5.4Med

    CVE-2026-6515 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a user to use invalidated or incorrectly scoped credentials to access Virtual Registries under certain conditions.

    GIGitLab· Apr 22, 2026

11. 4.3Med

    CVE-2026-5377 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confidential or private issues in public projects due to improper access control in the issue description rendering process.

    GIGitLab· Apr 22, 2026

12. 6.1Med

    CVE-2026-5262 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.1.0 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an unauthenticated user to access tokens in the Storybook development environment due to improper input validation.

    GIGitLab· Apr 22, 2026

13. 6.5Med

    CVE-2026-1660 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user to cause denial of service when importing issues due to improper input validation.

    GIGitLab· Apr 22, 2026

14. 6.5Med

    CVE-2025-6016 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service due to insufficient resource allocation limits when retrieving notes under certain conditions.

    GIGitLab· Apr 22, 2026

15. 6.5Med

    CVE-2025-3922 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service by overwhelming system resources under certain conditions due to insufficient resource allocation limits in the GraphQL API.

    GIGitLab· Apr 22, 2026

16. 6.5Med

    CVE-2025-0186 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed an authenticated user to cause denial of service under certain conditions by exhausting server resources by making crafted requests to a discussions endpoint.

    GIGitLab· Apr 22, 2026

17. 5.3Med

    CVE-2026-5512 ↗ (opens in a new tab)

    An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error messages included the full repository name for repositories the caller did not have access to. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, 3.15.21, and 3.14.26. This vulnerability was reported via t

    GIGitHub· Apr 21, 2026

18. 5.3Med

    CVE-2026-3307 ↗ (opens in a new tab)

    An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secret scanning push protection delegated bypass reviewer list on another repository by manipulating the owner_id parameter in the request body. Authorization was verified against the repository in the URL, but the action was applied to a different repository specified in the request body. The impact is limited to assigning existing trusted users as bypass reviewers; it does not allow adding arbitrary external users. This vulnerability affe

    GIGitHub· Apr 21, 2026

19. 4.3Med

    CVE-2026-24176 ↗ (opens in a new tab)

    NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references. A successful exploit of this vulnerability might lead to data tampering.

    NVNVIDIA· Apr 21, 2026

20. 5.4Med

    CVE-2026-40155 ↗ (opens in a new tab)

    The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In versions 4.12.0 through 4.17.1, simultaneous requests that trigger a nonce retry may cause the proxy cache fetcher to perform improper lookups for the token request results. Users are affected if their project uses both the vulnerable versions and the proxy handler /me/* and /my-org/* with DPoP enabled. This issue has been fixed in version 4.18.0.

    AUAuth0· Apr 17, 2026

21. 5.4Med

    CVE-2026-35603 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. In versions prior to 2.1.75 on Windows, Claude Code loaded the system-wide default configuration from C:\ProgramData\ClaudeCode\managed-settings.json without validating directory ownership or access permissions. Because the ProgramData directory is writable by non-administrative users by default and the ClaudeCode subdirectory was not pre-created or access-restricted, a low-privileged local user could create this directory and place a malicious configuration file that would be automatically loaded for any user launching Claude Code on the same machine. Ex

    ANAnthropic (Claude)· Apr 17, 2026

22. 6.9Med

    CVE-2026-6437 ↗ (opens in a new tab)

    Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users should upgrade to version v3.0.1

    AWAmazon Web Services· Apr 17, 2026

23. 5.3Med

    CVE-2026-21726 ↗ (opens in a new tab)

    The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endpoint /loki/api/v1/rules/{namespace} Thanks to Prasanth Sundararajan for reporting this vulnerability.

    GCGrafana Cloud· Apr 15, 2026

24. 6.1Med

    CVE-2026-20170 ↗ (opens in a new tab)

    A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks. Cisco has addressed this vulnerability in the Cisco Webex Contact Center service, and no customer action is needed. This vulnerability existed because HTML and script content was not properly handled. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to steal sensitive info

    WEWebex· Apr 15, 2026

25. 6.5Med

    CVE-2026-3590 ↗ (opens in a new tab)

    Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail to enforce atomic single-use consumption of guest magic link tokens, which allows an attacker with access to a valid magic link to establish multiple independent authenticated sessions via concurrent requests.. Mattermost Advisory ID: MMSA-2026-00624

    MCMattermost Cloud· Apr 15, 2026

26. 6.1Med

    CVE-2026-33822 ↗ (opens in a new tab)

    Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

    M3Microsoft 365· Apr 14, 2026

27. 5.5Med

    CVE-2026-33103 ↗ (opens in a new tab)

    Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.

    M3Microsoft 365· Apr 14, 2026

28. 6.5Med

    CVE-2026-32201 ↗ (opens in a new tab)Known exploited

    Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Apr 14, 2026

29. 5.4Med

    CVE-2026-20945 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    M3Microsoft 365· Apr 14, 2026

30. 5.3Med

    CVE-2026-6231 ↗ (opens in a new tab)

    The bson_validate function may return early on specific inputs and incorrectly report success. This behavior could result in skipping validation for BSON data, allowing malformed or invalid UTF-8 sequences to bypass validation and be processed incorrectly. The issue may affect applications that rely on these functions to validate untrusted BSON data before further processing. This issue affects MongoDB C Driver versions prior to 1.30.5, MongoDB C Driver version 2.0.0 and MongoDB C Driver version 2.0.1

    MAMongoDB Atlas· Apr 13, 2026

31. 4.0Med

    CVE-2026-0232 ↗ (opens in a new tab)

    A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.

    PAPalo Alto Networks· Apr 13, 2026

32. 6.3Med

    CVE-2026-5724 ↗ (opens in a new tab)

    The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests without credentials. This endpoint is registered on the same port as WorkflowService and cannot be disabled independently. An attacker with network access to the frontend port could open the replication stream without authentication. Data exfiltration is possible, but only when a configured replication

    TCTemporal Cloud· Apr 10, 2026

33. 5.3Med

    CVE-2026-40087 ↗ (opens in a new tab)

    LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.84 and 1.2.28, LangChain's f-string prompt-template validation was incomplete in two respects. First, some prompt template classes accepted f-string templates and formatted them without enforcing the same attribute-access validation as PromptTemplate. In particular, DictPromptTemplate and ImagePromptTemplate could accept templates containing attribute access or indexing expressions and subsequently evaluate those expressions during formatting. Second, f-string validation based on parsed top-level field name

    L/LangChain / LangSmith· Apr 9, 2026

34. 4.9Med

    CVE-2026-39961 ↗ (opens in a new tab)

    Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission on ClickhouseUser CRDs in their own namespace can exfiltrate secrets from any other namespace — production database credentials, API keys, service tokens — with a single kubectl apply. The operator reads the victim's secret using its ClusterRole and writes the password into a new secret in the attacker's namespace. The operator acts as a confused deputy: its ServiceAccount has cluster-wide secret read/write (aiven-operator-role ClusterR

    AIAiven· Apr 9, 2026

35. 6.5Med

    CVE-2026-24661 ↗ (opens in a new tab)

    Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00611

    MCMattermost Cloud· Apr 9, 2026

36. 6.5Med

    CVE-2026-21388 ↗ (opens in a new tab)

    Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated attacker to cause memory exhaustion and denial of service via sending an oversized JSON payload. Mattermost Advisory ID: MMSA-2026-00610

    MCMattermost Cloud· Apr 9, 2026

37. 5.4Med

    CVE-2026-4398 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have assigned compliance frameworks from namespaces they were not authorized to access to their own project, due to missing namespace validation on self-managed instances.

    GIGitLab· Apr 8, 2026

38. 5.4Med

    CVE-2026-4332 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browsers due to improper input sanitization.

    GIGitLab· Apr 8, 2026

39. 4.3Med

    CVE-2026-2619 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user with auditor privileges to modify vulnerability flag data in private projects due to incorrect authorization.

    GIGitLab· Apr 8, 2026

40. 4.3Med

    CVE-2026-2104 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to access confidential issues assigned to other users via CSV export due to insufficient authorization checks.

    GIGitLab· Apr 8, 2026

41. 4.3Med

    CVE-2026-1752 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user with developer-role permissions to modify protected environment settings due to improper authorization checks in the API.

    GIGitLab· Apr 8, 2026

42. 5.7Med

    CVE-2026-1516 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content.

    GIGitLab· Apr 8, 2026

43. 6.5Med

    CVE-2026-1101 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to cause denial of service to the GitLab instance due to improper input validation in GraphQL queries.

    GIGitLab· Apr 8, 2026

44. 4.3Med

    CVE-2025-9484 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 16.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could have allowed an authenticated user to have access to other users' email addresses via certain GraphQL queries.

    GIGitLab· Apr 8, 2026

45. 6.3Med

    CVE-2026-39862 ↗ (opens in a new tab)

    Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments query parameter flows unsanitized from URL parsing through to /bin/bash -c execution, allowing an attacker to execute arbitrary commands on a developer's macOS workstation. Any developer with Tophat installed is vulnerable. For previously trusted build hosts, no confirmation dialog appears. Attacker commands run with the user's permissions. This vulnerability is fixed in 2.5.1.

    SHShopify· Apr 8, 2026

46. 6.5Med

    CVE-2026-33459 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently, the backend services become unstable, resulting in service disruption and deployment unavailability for all users.

    ECElastic Cloud· Apr 8, 2026

47. 6.5Med

    CVE-2026-33461 ↗ (opens in a new tab)

    Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). A user with limited Fleet privileges can exploit an internal API endpoint to retrieve sensitive configuration data, including private keys and authentication tokens, that should only be accessible to users with higher-level settings privileges. The endpoint composes its response by fetching full configuration objects and returning them directly, bypassing the authorization checks enforced by the dedicated settings APIs.

    ECElastic Cloud· Apr 8, 2026

48. 4.3Med

    CVE-2026-33460 ↗ (opens in a new tab)

    Incorrect Authorization (CWE-863) in Kibana can lead to cross-space information disclosure via Privilege Abuse (CAPEC-122). A user with Fleet agent management privileges in one Kibana space can retrieve Fleet Server policy details from other spaces through an internal enrollment endpoint. The endpoint bypasses space-scoped access controls by using an unscoped internal client, returning operational identifiers, policy names, management state, and infrastructure linkage details from spaces the user is not authorized to access.

    ECElastic Cloud· Apr 8, 2026

49. 6.9Med

    CVE-2025-20628 ↗ (opens in a new tab)

    An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure access rules for Remote Connector Servers (RCS) running in client mode. This means attackers can spoof a client-mode RCS (if one exists) to intercept and/or modify an identity’s security-relevant properties, such as passwords and account recovery information. This issue is exploitable only when an RCS is configured to run in client mode.

    PIPing Identity· Apr 7, 2026

50. 4.8Med

    CVE-2026-24147 ↗ (opens in a new tab)

    NVIDIA Triton Inference Server contains a vulnerability in triton server where an attacker may cause an information disclosure by uploading a model configuration. A successful exploit of this vulnerability may lead to information disclosure or denial of service.

    NVNVIDIA· Apr 7, 2026