https://vulnerability.circl.lu/cna-root/mitre/recent 2026-08-18T17:18:57.675981+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Latest vulnerabilities published by the CNAs operating under the mitre root of the CVE Program. https://vulnerability.circl.lu/vuln/cve-2026-55106 2026-08-18T16:59:12.476000+00:00 authentik: Unauthenticated LDAP directory data disclosure

authentik: Unauthenticated LDAP directory data disclosure

2026-08-18T16:59:12.476000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-61574 2026-08-18T16:57:47.043000+00:00 authentik RAC: access any endpoint via an unrelated application

authentik RAC: access any endpoint via an unrelated application

2026-08-18T16:57:47.043000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-54730 2026-08-18T16:55:29.771000+00:00 authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView

authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView

2026-08-18T16:55:29.771000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-70415 2026-08-18T16:54:57.477000+00:00 Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service.

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service.

2026-08-18T16:54:57.477000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-50577 2026-08-18T16:52:38.214000+00:00 ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

2026-08-18T16:52:38.214000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-50578 2026-08-18T16:51:45.177000+00:00 ePA 3.x Integration: TLS Certificate Verification Universally Disabled

ePA 3.x Integration: TLS Certificate Verification Universally Disabled

2026-08-18T16:51:45.177000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-52723 2026-08-18T16:50:49.799000+00:00 ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust

ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust

2026-08-18T16:50:49.799000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-50576 2026-08-18T16:49:43.358000+00:00 ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests

ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests

2026-08-18T16:49:43.358000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-67271 2026-08-18T16:44:13.150000+00:00 Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution.

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution.

2026-08-18T16:44:13.150000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-50126 2026-08-18T16:36:14.618000+00:00 adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference

adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference

2026-08-18T16:36:14.618000+00:00