Overzicht van binnengekomen advisories.
1553 resultaten gevonden
A use-after-free vulnerability exists in the Proxy component of Google Chrome prior to version 152.0.7977.75. The flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by sending crafted network traffic. This vulnerability has been rated High severity by the Chromium security team. Successful exploitation could lead to full system compromise beyond the browser sandbox boundary. The issue has been addressed in Chrome stable channel update 152.0.7977.75. Users are advised to update their Chrome installations immediately to mitigate risk.
Bekijk origineel advisory →CVE-2026-84325 describes an improper input validation vulnerability in the DataTransfer component of Google Chrome prior to version 152.0.7977.75. A remote attacker could exploit this flaw through social engineering techniques to bypass system access restrictions via a co-installed application. The vulnerability has been rated High severity by the Chromium security team. The fix was included in the Chrome stable channel update for desktop released in September 2026. Users are advised to update to Chrome 152.0.7977.75 or later to mitigate the risk. The attack vector requires user interaction through social engineering, adding a layer of complexity to exploitation. The issue was tracked internally via Chromium issue tracker reference 553117928.
Bekijk origineel advisory →The Amelia Premium plugin for WordPress (versions 8.0 to 9.6.2) contains a critical privilege escalation vulnerability tracked as CVE-2026-9055. The flaw stems from insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint. An unauthenticated attacker can exploit this by first elevating their role to 'manager' via the customer update endpoint, then creating a provider entity linked to an administrator user ID to overwrite that administrator's password. This two-stage attack chain allows full administrator-level compromise of the WordPress installation. The vulnerability is triggered when the 'externalId' parameter is set to 0, causing creation of a WordPress user with the wpamelia-manager role. No authentication is required to initiate the attack, making this a significant risk for any site running the affected plugin versions.
Bekijk origineel advisory →CVE-2026-53649 affects Joro, a web exploitation framework by BishopFox, in versions prior to 1.1.1. The vulnerability stems from Joro's default proxy mode exposing a local API on 127.0.0.1:9090 with no authentication and a wildcard CORS policy. Because plugin uploads leverage the CORS-safelisted multipart/form-data content type, any cross-origin JavaScript from a page visited by the operator can reach privileged API endpoints without preflight checks or credentials. An attacker can abuse this to upload a malicious native plugin and trigger a restart, achieving unauthenticated remote code execution as the operator's user. The attack requires only a single page visit by the operator, making it highly accessible. The issue has been fully patched in Joro version 1.1.1. Users are strongly advised to upgrade immediately.
Bekijk origineel advisory →A critical authorization bypass vulnerability exists in Craft CMS versions >= 5.0.0-RC1 and < 5.10.11. The flaw resides in ElementsController::actionDeleteForSite(), which incorrectly checks deletion permissions against a user's provisional draft rather than the canonical element. This allows authenticated users with certain permissions (viewEntries, viewPeerEntries, saveEntries, savePeerEntries, editSite) but without the deleteEntriesForSite permission to hard-delete canonical entry site records. For single-site entries, this results in complete and irrecoverable deletion of the element and its content, bypassing Craft's recycle bin. The vulnerability stems from missing re-authorization after the provisional draft check propagates the deletion to the canonical element. Users should upgrade to Craft CMS 5.10.11 or later to remediate this issue.
Bekijk origineel advisory →CVE-2026-53635 affects the Open edX Platform, specifically the set_course_mode_price() view function in the instructor dashboard. The endpoint is only protected by @login_required and lacks any course-level permission checks. Any authenticated user, regardless of their role, can send a POST request to overwrite the honor mode price and currency for any course on the platform. The vulnerability exists because a frontend modal was removed during a cleanup but the underlying URL route and backend view were left active, creating an unguarded orphan endpoint. This constitutes a broken access control vulnerability with potential financial and integrity impact. The issue has been patched in commit 59bb6d6 along with additional related commits. Platform administrators should apply the patch immediately to prevent unauthorized price manipulation.
Bekijk origineel advisory →A security vulnerability (CVE-2026-84841) has been identified in tsi-coop tsi-dpdp-cms versions up to 0.5.0. The flaw involves client-side enforcement of server-side security, meaning authentication or access controls are only enforced on the client side and can be bypassed by directly sending HTTP requests to the server. The vulnerability can be exploited remotely without requiring physical access. A public exploit has already been released, increasing the risk of active exploitation. The affected product is a CMS (Content Management System) developed by tsi-coop. Users are strongly advised to upgrade to version 0.5.1, which contains the security fix. The vulnerability falls under the CWE category of improper enforcement of behavioral workflow or client-side security controls. No workaround is mentioned other than upgrading to the patched version.
Bekijk origineel advisory →CVE-2026-19117 describes a vulnerability affecting on-premises deployments where, under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target user account. Once the rogue credential is registered, the attacker can authenticate as the targeted user without their knowledge or consent. The vulnerability is limited to on-premises deployments and does not affect cloud-hosted instances. The issue is tracked by Delinea, which has published a security advisory. Successful exploitation could lead to full account takeover, bypassing multi-factor authentication protections provided by FIDO2. The vulnerability is rated as high severity given the potential for complete authentication bypass.
Bekijk origineel advisory →CVE-2026-84715 affects FeatherPanel versions prior to 1.3.7.10, where the SubuserController updateSubuser handler fails to properly validate permissions. Authenticated subusers with minimal privileges can exploit this flaw by sending crafted requests to modify their own permission records. This privilege escalation vulnerability allows attackers to grant themselves full server control. Successful exploitation can lead to unauthorized access to sensitive data, server backups, and server configuration settings. The vulnerability has been patched in FeatherPanel version 1.3.7.10. A fix was committed to the repository and a new release was published. Users are strongly advised to upgrade to the patched version immediately. The issue is tracked by VulnCheck as a privilege escalation advisory.
Bekijk origineel advisory →CVE-2026-84381 affects HTTPX2, a Python HTTP client library, versions 2.6.0 through 2.9.1. The vulnerability exists in httpcore2's SOCKS5 proxy implementation, where the TLS upgrade logic only checks for 'https' and fails to handle 'wss' (WebSocket Secure) connections. As a result, WebSocket connections routed through a SOCKS5 proxy are established without TLS encryption and without certificate verification. Sensitive data including the WebSocket handshake, query parameters, Authorization headers, cookies, and WebSocket frames can be transmitted in plaintext. An attacker positioned on the proxy path can perform man-in-the-middle attacks, reading or modifying traffic and impersonating the WebSocket server. The flaw is exposed via the Client.websocket() and AsyncClient.websocket() methods. The issue is fully remediated in httpcore2 2.10.0 and HTTPX2 2.10.0, released by Pydantic.
Bekijk origineel advisory →Craft CMS versions prior to 5.10.11 contain a critical authorization bypass vulnerability in the assets/move-asset endpoint. When the force=1 parameter is supplied, the endpoint fails to perform proper authorization checks. Authenticated users who lack peer asset permissions can exploit this flaw to move their own assets into other users' folders. The force parameter additionally triggers deletion of conflicting files, enabling unauthorized asset deletion and replacement. This affects a wide range of Craft CMS 5.x installations up to and including version 5.10.10. The vulnerability requires authentication but does not require elevated privileges beyond a standard user account. It poses risks of data loss, content tampering, and potential disruption to web applications relying on the CMS asset management system. A fix has been issued in version 5.10.11. Advisories have been published by both the Craft CMS GitHub security team and VulnCheck.
Bekijk origineel advisory →CVE-2026-84354 describes an incorrect authorization vulnerability in the FileSystem component of Google Chrome prior to version 152.0.7977.75. A remote attacker can leverage social engineering techniques to exploit this flaw via a crafted HTML page. Successful exploitation allows arbitrary code execution outside the Chrome sandbox, effectively bypassing a key security boundary. The vulnerability is rated High severity by the Chromium security team. The fix was included in the stable channel update for desktop released in September 2026. Users are advised to update to Chrome 152.0.7977.75 or later to mitigate the risk. The attack vector requires user interaction through social engineering, making it a realistic threat in targeted or phishing-style campaigns.
Bekijk origineel advisory →Cisco's internal security review of IOS XR Software identified multiple vulnerabilities, including improper access control issues tracked under CVE-2026-20279. The vulnerabilities are classified under CWE-284 (Improper Access Control). Cisco has released software hardening updates to address these internally discovered issues. The advisory is part of Cisco's proactive security and product quality initiative. The vulnerability affects Cisco IOS XR Software, which is widely deployed in network infrastructure. No external discovery or active exploitation has been mentioned. The NVD listing is currently awaiting full analysis. A Cisco Security Advisory has been published with additional details and remediation guidance.
Bekijk origineel advisory →CVE-2026-82404 is a prototype pollution vulnerability in the TOON serialization library, used for compact JSON encoding in LLM prompts. Prior to version 2.3.1, decoding attacker-controlled TOON data containing keys like __proto__, constructor, or prototype would write through the object prototype chain, polluting Object.prototype at runtime. The vulnerability affects multiple decode paths including expandPaths: 'safe', plain nested objects, tabular rows, quoted keys, and streaming decode. The encoder also had issues dropping own __proto__ properties and invoking inherited setters during normalization. Exploitation could lead to denial of service or, with a suitable downstream gadget, remote code execution. The fix was released in TOON version 2.3.1 with the patch available on GitHub.
Bekijk origineel advisory →Craft CMS versions >= 5.0.0-RC1 and < 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionDeleteForSite(). The flaw arises because the method checks deletion permissions against a user's provisional draft (verifying only draft ownership) rather than performing an independent check against the canonical element. This allows an authenticated user with certain permissions (viewEntries, viewPeerEntries, saveEntries, savePeerEntries, editSite) but lacking deleteEntriesForSite to hard-delete canonical entry site records. For single-site entries, this results in full element and content deletion. The deletion is irrecoverable via Craft's recycle bin, making this a high-severity data integrity issue. A fix is available in Craft CMS version 5.10.11.
Bekijk origineel advisory →Craft CMS versions before 5.10.11 contain a site scope bypass vulnerability in GraphQL entry mutation resolvers. The flaw exists because siteId is not validated through ArgumentManager::prepareArguments() in GraphQL entry mutation resolvers. Attackers holding tokens scoped to a single site can exploit this by passing siteId directly in mutation arguments. This allows unauthorized read, modification, or deletion of entries across other sites within the same Craft CMS installation. The vulnerability poses a significant risk to multi-site Craft CMS deployments where data isolation between sites is critical. It has been assigned CVE-2026-84796 and is documented in a GitHub security advisory. Users are strongly advised to upgrade to Craft CMS version 5.10.11 or later to remediate the issue.
Bekijk origineel advisory →A critical Remote Code Execution (RCE) vulnerability exists in DSpace, an open-source repository application. The flaw affects versions 8.0-rc1 through before 8.4, versions 9.0-rc1 through before 9.3, and version 10-rc1. The vulnerability is exploitable via Velocity Templates used by DSpace for COAR Notify and LDN (Linked Data Notifications) messages. Successful exploitation could allow an attacker to execute arbitrary code on the affected server. The issue has been addressed and patched in DSpace versions 8.4, 9.3, and 10.0. Users are strongly advised to upgrade to the patched versions immediately. The vulnerability was tracked and disclosed through GitHub security advisories and NVD.
Bekijk origineel advisory →CVE-2026-73475 describes an Incorrect Authorization vulnerability in the Drupal Commerce PayPal module. The flaw allows attackers to exploit Forceful Browsing, potentially accessing restricted resources without proper authorization. The vulnerability affects two version ranges: from 0.0.0 to 1.12.0 and from 2.0.0 to 2.1.3. This type of vulnerability can lead to unauthorized access to payment-related pages or order data within Drupal-based e-commerce sites. The issue has been documented by the Drupal security team via security advisory sa-contrib-2026-095. Organizations using the affected versions of Commerce PayPal should apply patches or updates promptly. The vulnerability is currently awaiting full analysis on the NVD.
Bekijk origineel advisory →Cisco's IOS XR Software engineering team conducted an internal security review that identified multiple vulnerabilities, resulting in software hardening releases. The vulnerabilities tracked under CVE-2026-20274 relate to improper resource control issues classified under CWE-664. These were internally discovered and proactively addressed by Cisco as part of their ongoing security commitment. The advisory was published on NVD and Cisco's Security Advisory portal. No external exploitation or active threat actors have been mentioned in relation to this vulnerability. The affected product is Cisco IOS XR Software, widely used in network infrastructure and routing platforms. Patches and hardening releases have been made available to address these issues.
Bekijk origineel advisory →A critical vulnerability was discovered in Submariner, a Kubernetes multi-cluster networking component. In cert-auth mode, connection configurations are built from unvalidated free-form strings sourced from Custom Resource Definitions (CRDs). A malicious cluster can exploit this by publishing a crafted CableName containing newline characters and arbitrary ipsec.conf directives. This enables injection of unauthorized configuration parameters into the IPsec configuration file. Attackers can further leverage leftupdown hooks to execute arbitrary commands. The end result is remote code execution with root privileges on the gateway node. The vulnerability poses a severe risk in multi-cluster Kubernetes environments using Submariner for secure tunneling.
Bekijk origineel advisory →