CVE Notifier

CVE-2026-92003 CWE-770 N/A

MISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion

Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure branches wrote directly to the Log model:  - API requests with no authentication…

cve.org MISP:MISP 15 Sep 2026

CVE-2026-91998 CWE-863 9.9

Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp

Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any application's clientId and clientSecret to gain unrestricted access to user administration acro…

cve.org casdoor:casdoor 15 Sep 2026

CVE-2026-91997 CWE-697 5.3

evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypass

evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that always evaluates to false, allowing unauthenticated access to the /metrics endpoint. Attackers can bypass IP wh…

cve.org evolution-foundation:evolution-api 15 Sep 2026

CVE-2026-91996 CWE-306 7.5

lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint

lamp-cloud through 5.10.0 whitelists the path pattern /*/anno/** for anonymous access, allowing unauthenticated attackers to read the server's full JVM system property map. Attackers can send POST requests to /defGenProj…

cve.org dromara:lamp-cloud 15 Sep 2026

CVE-2026-91995 CWE-620 9.1

pig before 4.1.0 Unverified Password Change via /register/password

pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint where password verification results are discarded, allowing any value as the current password. Remote attackers can subm…

cve.org pig-mesh:pig 15 Sep 2026

CVE-2026-91994 CWE-862 6.5

Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests

Semaphore UI through 2.19.12 exempts GET and HEAD requests from project resource permission checks in GetMustCanMiddleware. Attackers with guest or task_runner roles can read all project environments including plaintext …

cve.org semaphoreui:semaphore 15 Sep 2026

CVE-2026-91993 CWE-639 4.3

Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list

Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit r…

cve.org dromara:Jpom 15 Sep 2026

CVE-2026-92002 CWE-778 N/A

MISP: Authentication failure logging suppressed during Redis unavailability

Affected versions of MISP use Redis to throttle repeated authentication-failure log entries. The intent is to avoid excessive duplicate logs while still recording failed authentication activity. However, User->setupRed…

cve.org MISP:MISP 15 Sep 2026

CVE-2026-91925 CWE-1336 8.8

Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine

Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs …

cve.org polyaxon:polyaxon 15 Sep 2026

CVE-2026-91786 CWE-125 6.1

Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size

A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised …

cve.org Red · Hat:Red · Hat 15 Sep 2026

CVE-2026-91924 CWE-862 8.5

pgweb through 0.17.0 Missing Authorization on Direct Connect Endpoint

pgweb through 0.17.0 leaves the POST /api/connect endpoint unguarded when connect-backend authorization is configured, allowing attackers to supply arbitrary database connection strings. Attackers can bypass the resource…

cve.org sosedoff:pgweb 15 Sep 2026

CVE-2026-91923 CWE-918 7.7

KubeSphere through 4.1.3 SSRF via git credential verification endpoint

KubeSphere through 4.1.3 contains a server-side request forgery vulnerability in the git credential verification endpoint that accepts unvalidated caller-supplied URLs without allowlist restrictions. Authenticated attack…

cve.org kubesphere:kubesphere 15 Sep 2026