Critical CVE-2026-10868 A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplied fields in UsersController::edit(). When processing edit requests, the application accepted a user-controlled User.id value from request data. An...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[Critical] CVE-2026-10868 – A mass assignment vulnerability exists in the MISP user edit functionality due t...

VERWANDTEARTIKEL

CVE-2023-5502 - On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.

CVE-2024-27892 - On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).

[Medium] CVE-2026-42547 – IRIS is a web collaborative platform that helps incident responders share techni...

[High] CVE-2026-10871 – A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability af...

[Medium] CVE-2026-11322 – Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that all...

CVE-2026-10871 - Shibby Tomato Web UI rc start_6rd_tunnel os command injection