過去6か月のすべてのCVEを、毎日更新します。

5件中5件を表示

• 高CVE-2026-76413CVSSスコア 8.22026/09/16

  A vulnerability in Cisco Adaptive Security Device Manager (ASDM) single sign-on (SSO) handler for Cisco Secure FMC Software could allow an unauthenticated, remote attacker to log in as the Cisco ASDM administrator user. This vulnerability is due to improper ma

  CWE-1259
• 中CVE-2026-58429CVSSスコア 4.92026/08/13

  Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints

  CWE-284CWE-1259
• 高CVE-2026-54593CVSSスコア 8.12026/07/28

  Pterodactyl is a free, open-source game server management panel. Prior to Panel version 1.12.3 and Wings version 1.12.2, the Wings /upload/file endpoint accepted any valid panel-signed JWT that contained server_uuid, user_uuid, and unique_id claims without che

  CWE-1259CWE-1270
• 高CVE-2026-25700CVSSスコア 7.22026/06/10

  Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivate

  CWE-1259apache answer
• 低CVE-2026-40264CVSSスコア 2.72026/04/21

  OpenBao is an open source identity-based secrets management system. OpenBao's namespaces provide multi-tenant separation. Prior to version 2.5.3, a tenant who leaks token accessors can have their token revoked or renewed by a privileged administrator in anothe

  CWE-1259openbao openbao