CVE ID :CVE-2026-109469 Published : Nov. 6, 2026, 11:17 p.m. | 1 hour, 55 minutes ago Description :Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over…
CVE-2026-68935 – Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections
CVE ID :CVE-2026-68935 Published : Nov. 6, 2026, 10:17 p.m. | 54 minutes ago Description :Chartbrew is an open-source web application for creating charts from databases and APIs. In versions 4.8.5 through 5.2.2,…
CVE-2026-59104 – UgCS server HCI authentication bypass with empty credentials
CVE ID :CVE-2026-59104 Published : Nov. 6, 2026, 10:17 p.m. | 54 minutes ago Description :UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP…
CVE-2026-50240 – Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount
CVE ID :CVE-2026-50240 Published : Nov. 6, 2026, 10:17 p.m. | 54 minutes ago Description :A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository…
CVE-2026-86044 – JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution
CVE ID :CVE-2026-86044 Published : Nov. 6, 2026, 9:17 p.m. | 1 hour, 55 minutes ago Description :JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop exposed getServerInfo to…
CVE-2026-86005 – Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew
CVE ID :CVE-2026-86005 Published : Nov. 6, 2026, 9:17 p.m. | 1 hour, 55 minutes ago Description :Chartbrew is an open-source web application that can connect directly to databases and APIs and use the…
CVE-2026-107492 – Envoy Proxy Improper Authentication Vulnerability
CVE ID :CVE-2026-107492 Published : Nov. 6, 2026, 12:43 a.m. | 26 minutes ago Description :Improper Authentication in the jwt_authn HTTP filter in envoyproxy envoy versions up to and including 1.38.0 allows an…
CVE-2025-71458 – FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfo
CVE ID :CVE-2025-71458 Published : Nov. 6, 2026, 12:20 a.m. | 49 minutes ago Description :FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the…
CVE-2026-63774 – Subnet Solutions PowerSYSTEM Center SQL Injection
CVE ID :CVE-2026-63774 Published : Nov. 6, 2026, 12:05 a.m. | 1 hour, 4 minutes ago Description :Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL…
CVE-2026-63017 – Subnet Solutions PowerSYSTEM Center Incorrect Authorization
CVE ID :CVE-2026-63017 Published : Nov. 6, 2026, 12:01 a.m. | 1 hour, 8 minutes ago Description :Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators….