Medium CVE-2026-41569 authentik is an open-source identity provider. Prior to version 2026.2.3, the WS-Federation provider validates the user-supplied wreply parameter using a raw string prefix check rather than proper URL parsing. An attacker who can craft a login link can supply a wreply value on...

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Medium] CVE-2026-41569 – authentik is an open-source identity provider. Prior to version 2026.2.3, the WS...

VERWANDTEARTIKEL

CVE-2026-42588

CISA warns of cyberattacks targeting fuel tank monitoring systems

[Medium] CVE-2026-43924 – FOSSBilling is a free, open-source billing and client management system. Prior t...

[High] CVE-2026-44609 – Local privilege escalation due to EXE hijacking vulnerability. The following pro...

[High] CVE-2026-50033 – Local privilege escalation due to DLL hijacking vulnerability. The following pro...

[Unknown] CVE-2026-37700 – Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attack...