https://vulnerability.circl.lu Latest vulnerabilities published by the CNAs operating under the mitre root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 17:18:57 +0000 https://vulnerability.circl.lu/vuln/cve-2026-55106 authentik: Unauthenticated LDAP directory data disclosure authentik: Unauthenticated LDAP directory data disclosure https://vulnerability.circl.lu/vuln/cve-2026-55106 Tue, 18 Aug 2026 16:59:12 +0000 https://vulnerability.circl.lu/vuln/cve-2026-61574 authentik RAC: access any endpoint via an unrelated application authentik RAC: access any endpoint via an unrelated application https://vulnerability.circl.lu/vuln/cve-2026-61574 Tue, 18 Aug 2026 16:57:47 +0000 https://vulnerability.circl.lu/vuln/cve-2026-54730 authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView https://vulnerability.circl.lu/vuln/cve-2026-54730 Tue, 18 Aug 2026 16:55:29 +0000 https://vulnerability.circl.lu/vuln/cve-2026-70415 Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service. Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service. https://vulnerability.circl.lu/vuln/cve-2026-70415 Tue, 18 Aug 2026 16:54:57 +0000 https://vulnerability.circl.lu/vuln/cve-2026-50577 ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter https://vulnerability.circl.lu/vuln/cve-2026-50577 Tue, 18 Aug 2026 16:52:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-50578 ePA 3.x Integration: TLS Certificate Verification Universally Disabled ePA 3.x Integration: TLS Certificate Verification Universally Disabled https://vulnerability.circl.lu/vuln/cve-2026-50578 Tue, 18 Aug 2026 16:51:45 +0000 https://vulnerability.circl.lu/vuln/cve-2026-52723 ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust https://vulnerability.circl.lu/vuln/cve-2026-52723 Tue, 18 Aug 2026 16:50:49 +0000 https://vulnerability.circl.lu/vuln/cve-2026-50576 ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests https://vulnerability.circl.lu/vuln/cve-2026-50576 Tue, 18 Aug 2026 16:49:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-67271 Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution. Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution. https://vulnerability.circl.lu/vuln/cve-2026-67271 Tue, 18 Aug 2026 16:44:13 +0000 https://vulnerability.circl.lu/vuln/cve-2026-50126 adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference https://vulnerability.circl.lu/vuln/cve-2026-50126 Tue, 18 Aug 2026 16:36:14 +0000