Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Secure Custom Fields CVE-2026-97195
The Secure Custom Fields WordPress plugin before 6.9.8 does not sanitize a persisted field definition before emitting part of it as an HTML attribute name, allo
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Secure Custom Fields CVE-2026-97194
The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it renders and formats the values of its relational fields,
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Secure Custom Fields CVE-2026-97193
The Secure Custom Fields WordPress plugin before 6.9.8 does not verify that a user is allowed to edit the target object before writing to it during bidirectiona
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Secure Custom Fields CVE-2026-97192
The Secure Custom Fields WordPress plugin before 6.9.8 does not re-apply its field-group location rules when persisting values submitted through the post editor
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Pie Register CVE-2026-96963
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as con
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Pie Register CVE-2026-96961
The Pie Register WordPress plugin through 3.8.4.15 does not perform any capability, nonce or authentication check on one of its request handlers, allowing unau
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
FV Flowplayer Video Player CVE-2026-85344
The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-wide conte
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Event Tickets Manager for WooCommerce CVE-2026-122085
The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce check on its ticket-transfer feature, wh
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
WP Recipe Maker CVE-2026-122060
The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password protected before returning the recipe thr
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Contact Form 7 CVE-2026-114432
The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a form file field, and a flaw in its temporar
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Userplace CVE-2026-110963
The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to unauthenticated users and publicly exposes th
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Sync Post With Other Site CVE-2026-110132
The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for post types other than pages, allowing us
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Productive Commerce CVE-2026-109925
The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated at
0 CVEs and 0 credit lines.
-
Ecommerce Affiliate CVE-2026-106015
The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to the legitimate account owner, nor limit
3 CVEs and 3 credit lines. None claimed yet.
0 of 3 credit lines claimed Claim credit -
Thanh Toán Quét Mã QR Code Tự Động CVE-2026-105970
The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of incoming bank-transfer payment notifications
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Razorpay for WooCommerce CVE-2026-104639
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an incoming webhook request before using it in a SQ
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Razorpay for WooCommerce CVE-2026-104338
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorization check on one of its REST routes and derives the acting user's ident
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Razorpay for WooCommerce CVE-2026-104337
The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an order before returning a coupon discount computed against that order,
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
BackUpWordPress CVE-2026-104307
The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cleans up its backup directory, allowing any authenti
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Antom Payments CVE-2026-103375
The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check before returning an order's confirmation link, which co
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Turisbook Booking System CVE-2026-103303
The Turisbook Booking System WordPress plugin through 1.3.8 does not have authorisation and CSRF checks when saving its settings, and does not sanitise and esca
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
UnrealIRCd CVE-2026-114713
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing it into replies, which allows any user
0 CVEs and 0 credit lines.
-
Jihong88 CVE-2026-124422
SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in html.clean() that rebuilds iframes from data-se-iframe-holder-attrs JS
4 CVEs and 4 credit lines. None claimed yet.
0 of 4 credit lines claimed Claim credit -
Imgproxy CVE-2026-123616
imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the data_size field. Attackers
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Imgproxy CVE-2026-123615
imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reconstruction (vips_foreign_load_ico_header in vips/i
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Imgproxy CVE-2026-123614
imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted da
3 CVEs and 3 credit lines. None claimed yet.
0 of 3 credit lines claimed Claim credit -
Rustls CVE-2026-123613
Rustls from 0.23.13 before 0.23.45 accepts TLS 1.3 handshake messages at the wrong encryption level when they follow a key-changing message in the same record,
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Rustls CVE-2026-123612
rustls 0.23.44 and 0.23.45 contain an information disclosure vulnerability that sends application data buffered before the handshake completes to the client-fac
0 CVEs and 0 credit lines.
-
Rustls CVE-2026-123611
rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Rustls CVE-2026-123610
rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size bu
0 CVEs and 0 credit lines.
-
Rustls CVE-2026-123609
Rustls before 0.23.46 and 0.24.0-dev.1 before 0.24.0-dev.2 contains an information disclosure vulnerability where derived Debug formatting of client session val
0 CVEs and 0 credit lines.
-
Hickory-dns CVE-2026-123608
Hickory DNS hickory-proto from 0.3.1 before 0.26.1 contains a denial of service vulnerability in BinEncoder that allows remote attackers to exhaust CPU through
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123607
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net before 0.26.1 contain an unbounded loop vulnerability in DnssecDnsHandle NSEC3 closest-e
0 CVEs and 0 credit lines.
-
Hickory-dns CVE-2026-123606
The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-resolver 0.26.0-alpha.1 before 0.26.2 iterates every out-of-bailiwick NS
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123605
Hickory DNS hickory-proto 0.1 through 0.25.0-alpha.3 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because the validator verifies an RRSIG ag
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123604
Hickory DNS hickory-resolver 0.26.0-beta.1 before 0.26.2 contains an unbounded retry loop in NameServerPool::try_send, which re-queues truncated (TC) responses
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123603
hickory-proto and hickory-resolver 0.26.0 before 0.26.2, hickory-server 0.25.0-alpha.1 before 0.26.2, and hickory-recursor 0.25.0-alpha.3 through 0.26.0-alpha.1
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123602
The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2 (recursor feature) is vulnerable to ghost domai
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123601
Hickory DNS hickory-proto 0.25.0 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 invert the relational operators in the wrap-around branch of
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123600
Hickory DNS hickory-proto 0.25.0-alpha.3 through 0.25.2 and hickory-net 0.26.0-alpha.1 before 0.26.2 contain a DNSSEC validation flaw in DnssecDnsHandle that ac
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123599
Hickory DNS hickory-proto before 0.26.0-beta.1 and hickory-net before 0.26.2 contain a DNSSEC validation bypass because verify_rrsets() ignores DNS class when p
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123598
The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net 0.26.0-bet
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123597
Hickory DNS hickory-proto 0.25.0-alpha.1 through 0.26.0-alpha.1 and hickory-net before 0.26.2 contain a logic bug in DnssecDnsHandle's DS-fetch path that caches
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123596
Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's NSEC
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123595
Hickory DNS hickory-proto 0.25 through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw in the validating recursor's
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123594
Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain an NSEC validation flaw that returns a secure proof for NXD
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123593
Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto 0.24.0 through 0.26.0-alpha.1 compare DNSKEY public keys against DNSSEC trust anchors with
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123592
The hickory-net crate in Hickory DNS 0.26.0-beta.1 before 0.26.2 allows DNSSEC validation bypass because Name's Hash ignores label lengths and ValidationCacheKe
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123591
Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 fail to verify, per RFC 6840 §4.4, that an NSEC or NSEC3 record den
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123590
Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 accept NSEC and NSEC3 records for DNSSEC nonexistence proofs when a
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123589
The DNS-over-QUIC (DoQ) server in hickory-server (hickory-dns) before 0.26.2 does not apply any timeout when reading a request message from a QUIC stream, bypas
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123588
The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool wh
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123587
The DNSSEC validation in the Hickory DNS hickory-net crate 0.26.0 before 0.26.2 identifies wraparound NSEC records by comparing the next domain name to an SOA r
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123586
Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server re
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123585
The hickory-resolver component of Hickory DNS 0.25.0 before 0.26.2 follows irrelevant CNAME records when resolving recursive queries, sending queries that are u
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123584
The hickory-net crate in Hickory DNS 0.26.0 before 0.26.2 stops listening and returns an error when a client UDP connection receives a datagram that cannot be p
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123583
The recursive resolver in Hickory DNS hickory-recursor 0.25.0 through 0.25.2 and hickory-resolver 0.26.0 before 0.26.2 does not apply out-of-bailiwick filtering
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123582
The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSE
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123581
Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain a DNSSEC validation flaw that accepts a response as a posit
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123580
Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 perform insufficient checks on NSEC3 record names during DNSSEC ver
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123579
DNSSEC validation in Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 does not distinguish NODATA responses from wil
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123578
Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query whe
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123577
Hickory DNS from 0.24.0 before 0.26.2 contains a resource exhaustion vulnerability that allows remote attackers to consume server memory via unbounded DoH reque
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123576
Hickory DNS 0.24.0 through 0.26.1 contains a memory exhaustion vulnerability that allows remote attackers to consume server resources by sending incomplete DNS-
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123575
Hickory DNS before 0.26.2 contains a resource exhaustion vulnerability in its DNS-over-HTTPS HTTP/2 server that lacks sufficient timeouts or limits for incomple
0 CVEs and 0 credit lines.
-
Hickory-dns CVE-2026-123574
The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is 4096 bytes or longer. Attackers
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123573
hickory-dns from 0.20.1 before 0.26.2 contains a denial of service vulnerability in the hickory-proto SVCB and HTTPS record presentation format parser. Attacker
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123572
Hickory-dns from 0.20.1 before 0.26.2 contains a denial of service vulnerability in the hickory-proto SVCB and HTTPS record presentation format parser, which pa
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123571
Hickory DNS from 0.26.0 before 0.26.2 contains an integer underflow vulnerability in TSIG RDATA decoding that allows remote attackers to trigger a panic via mal
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Hickory-dns CVE-2026-123570
The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and AR
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Sveltejs CVE-2026-123569
The devalue package for npm before 5.6.3 can consume excessive CPU and memory when serializing sparse arrays with uneval or stringify. An attacker who manages t
0 CVEs and 0 credit lines.
-
Sveltejs CVE-2026-123568
Sveltejs devalue before 5.6.3 contains a prototype pollution vulnerability that allows attackers to alter object prototypes by supplying untrusted data to uneva
0 CVEs and 0 credit lines.
-
Sveltejs CVE-2026-123567
Sveltejs devalue before 5.6.4 contains a prototype injection vulnerability that allows attackers to inject __proto__ own properties into objects returned by dev
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Sveltejs CVE-2026-123566
Sveltejs devalue before 5.9.3 contains a denial of service vulnerability that allows attackers to cause CPU amplification by supplying sparse arrays to uneval.
0 CVEs and 0 credit lines.
-
Sveltejs CVE-2026-123565
Sveltejs devalue before 5.9.3 contains a resource exhaustion vulnerability where repeated primitive strings cause quadratic expansion in the uneval function. At
0 CVEs and 0 credit lines.
-
Sveltejs CVE-2026-123564
Sveltejs devalue from 1.0.0 before 5.9.3 contains a memory exhaustion flaw in uneval, whose generated code for sparse arrays allocates memory proportional to th
0 CVEs and 0 credit lines.
-
Sveltejs CVE-2026-123563
Devalue before 5.9.3 contains a validation bypass vulnerability that allows custom ArrayBuffer revivers to skip typed-array allocation checks in the parse funct
0 CVEs and 0 credit lines.
-
Sveltejs CVE-2026-123562
devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing multiple promises, a later promise rej
0 CVEs and 0 credit lines.
-
Sveltejs CVE-2026-123561
devalue before 5.9.3 allows malformed null-prototype object keys to bypass parse's __proto__ rejection through property-key coercion, an incomplete fix for GHSA
0 CVEs and 0 credit lines.
-
ZcashFoundation CVE-2026-123560
Zebra before 7.0.0 contains an incomplete cleanup vulnerability that allows unauthenticated peers to stall initial sync by serving a forged checkpoint block bod
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
ZcashFoundation CVE-2026-123559
Zebra before 7.0.0 contains an inefficient algorithmic complexity vulnerability that allows unauthenticated peers to exhaust verification threads by submitting
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
ZcashFoundation CVE-2026-123558
Zebra zebrad before 7.0.0 contains a denial of service vulnerability that allows a malicious peer to stall checkpoint sync by cancelling the verifier rewind aft
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
ZcashFoundation CVE-2026-123557
ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote peers to abort the node by triggering
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
ZcashFoundation CVE-2026-123556
ZcashFoundation Zebra from 4.5.0 before 7.0.0 contains a protection mechanism failure that bans honest peers by scoring mempool lock-time rejections at the ban
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
ZcashFoundation CVE-2026-123555
Zebra from 2.3.0 before 7.0.0 contains a denial of service vulnerability that allows unauthenticated peers to evade misbehavior scoring by sending transactions
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
ZcashFoundation CVE-2026-123554
Zebra zebrad 6.4.0 before 7.0.0 performs quadratic work in the mempool coinbase-maturity check because Transaction::coinbase_spend_restriction() rebuilds the tr
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123553
OpenAM before 16.1.4 ships built-in identities in the Top Level Realm (demo, anonymous, wsc, wsp, SecurityTokenService and agentAuth) with passwords that are id
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123552
OpenAM before 16.1.4 contains a server-side request forgery vulnerability in certificate CRL checking that fetches CRLs from the distribution point named in a p
0 CVEs and 0 credit lines.
-
OpenIdentityPlatform CVE-2026-123551
OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session tokens from the not
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123550
OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions on the ECP (PAOS) and HT
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123549
OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set restricted attributes inc
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
OpenIdentityPlatform CVE-2026-123548
OpenIdentityPlatform OpenAM before 16.1.4 contains an open redirect because WS-Federation logout, SAML v2.0 logout and name-identifier management, SAML v2.0 ide
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123547
OpenAM before 16.1.4 contains an open redirect vulnerability that allows attackers to redirect users to external sites because RelayState is unchecked when no r
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123546
OpenAM before 16.1.4 contains an open redirect and cross-site scripting vulnerability that allows remote attackers to control post-login and logout destinations
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123545
OpenAM from 14.5.1 before 16.1.4 contains a cross-site request forgery vulnerability in the OAuth 2.0 device authorization flow that allows attackers to approve
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123544
OpenAM before 16.1.4 and its client SDK fail to sufficiently validate responses on the internal server-to-server SOAP channel, allowing network-positioned attac
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
OpenIdentityPlatform CVE-2026-123543
OpenAM before 16.1.4 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending serialized Java dat
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
OpenIdentityPlatform CVE-2026-123542
OpenAM before 16.1.4 fails to enforce PKCE in the OAuth 2.0 device authorization flow, never validating the code verifier when device codes are exchanged for to
2 CVEs and 2 credit lines. None claimed yet.
0 of 2 credit lines claimed Claim credit -
OpenIdentityPlatform CVE-2026-123541
OpenAM before 16.1.4 contains an open redirect vulnerability that allows remote attackers to redirect users after SAML 1.x single sign-on by exploiting loose tr
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
OpenIdentityPlatform CVE-2026-123540
OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter attribute values by injecting unenco
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit